Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
File:                     d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa (raw, json)
Hash identifier:          FinYYw/SPmkX4N5RsYre6G739FqWP+aizFmAbQiz3W8=
Subject key identifier:   DD:75:2C:F5:C1:A5:A4:C2:4B:8A:F4:F2:93:3E:D8:D9:70:93:35:23
Certificate issuer:       /CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
Certificate serial:       010D0C9F4328584D15A2551B78BDCAC5BC63F600
Authority key identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        2602:f708::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:55:1b:78:bd:ca:c5:bc:63:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=b9cb0d89-6078-41b5-a3eb-b9ae63252bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:94:82:e9:5b:1c:a8:c6:d4:b8:69:77:fa:
                    01:20:c9:4c:d6:62:5c:47:b5:a7:e4:0e:7b:11:9f:
                    ed:87:11:5d:0b:cd:2d:00:c2:5b:38:4e:5a:e4:09:
                    22:f9:c4:26:c4:53:4e:cd:67:5f:ba:d6:49:37:68:
                    7a:5e:b5:ab:6b:57:f4:5a:43:e5:ad:91:7e:aa:9e:
                    20:73:63:38:05:46:d5:d4:3e:61:b9:d1:28:20:bf:
                    06:de:e0:1b:35:c1:ae:cd:19:93:91:3b:97:72:71:
                    1a:44:6e:fb:5a:99:5f:13:7c:83:ac:47:77:15:5f:
                    05:86:51:86:85:fa:04:61:d7:c9:63:69:b6:85:ee:
                    20:16:92:a4:9f:57:f6:6c:9f:88:46:86:1e:0f:e6:
                    46:9f:4d:33:c7:21:88:e5:1e:62:d2:70:53:cc:bb:
                    6b:9b:4c:aa:b2:f0:9a:ca:de:a9:03:25:03:3c:fc:
                    90:de:d6:bc:29:f6:b0:49:5b:bf:10:2e:b2:6b:2f:
                    1e:8d:c1:88:b5:5e:f8:0e:04:67:b3:9c:38:0a:a9:
                    9c:2b:c0:5b:fc:cb:f8:39:6f:5e:89:2b:7a:3a:f2:
                    91:d2:89:c9:9a:26:aa:54:02:3b:1b:02:09:a4:fe:
                    cd:c8:fd:17:a2:83:2f:58:0e:d9:b4:29:a3:9b:ff:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:75:2C:F5:C1:A5:A4:C2:4B:8A:F4:F2:93:3E:D8:D9:70:93:35:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f708::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:7e:47:87:ad:d3:c7:bd:1c:ea:19:4b:12:11:a9:0f:c5:
         20:81:58:56:c8:a9:9f:50:57:01:78:c6:e0:d0:7e:52:58:c5:
         e8:dc:b7:e0:fb:ae:5c:28:01:71:d5:86:f8:13:48:9c:38:5c:
         4f:8e:ab:d7:70:9c:88:3d:65:4c:55:3c:38:da:85:09:c2:dc:
         f3:09:ee:67:00:9b:6d:9c:85:91:d1:96:0b:b8:86:80:6e:5c:
         8b:ca:62:10:c5:fc:a3:f5:2a:2e:ae:06:d6:08:bb:f6:d6:2f:
         5e:e1:8d:40:b3:a4:3f:98:63:aa:00:3d:50:59:be:0b:20:7b:
         dd:2f:83:8e:42:15:68:e8:c5:8d:ff:3d:ce:8f:ab:02:26:d8:
         5f:28:88:be:9c:b7:b8:e1:22:0c:df:9d:78:a4:54:be:75:62:
         27:40:f5:8a:f8:94:9e:bf:a5:ef:cd:6c:20:32:bc:34:4c:49:
         e9:ee:48:a0:38:16:8c:5e:04:fa:ab:dc:73:57:a0:db:31:fb:
         5a:18:ad:21:20:3c:1c:61:4a:bb:6a:d8:01:96:45:8a:58:77:
         02:99:8c:db:25:e8:7a:9d:5e:31:6c:da:4c:f2:3e:aa:e9:f2:
         5d:d1:6f:6d:e6:1c:bc:bd:90:b5:09:dd:03:58:10:0a:59:ba:
         22:d3:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:10 2026 by rpki-client