Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/e6a2333b-c80d-390e-aefc-faa3a93962e4.roa
File:                     e6a2333b-c80d-390e-aefc-faa3a93962e4.roa (raw, json)
Hash identifier:          jcQ6G37rJFUpVAq3Q/bxXO6WADIbVcJNi2v8uxnTqIU=
Subject key identifier:   BD:F4:B9:AC:30:1C:B3:C1:AD:A1:DD:28:B4:DB:BA:A8:B1:3D:52:E8
Certificate issuer:       /CN=ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9
Certificate serial:       010D0C9F4328584D39CF7CCAAE6C3C547314BE80
Authority key identifier: CE:FE:6F:B9:EE:3A:8B:69:64:2C:FC:39:4D:90:2C:96:BB:2F:C2:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/e6a2333b-c80d-390e-aefc-faa3a93962e4.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     29987
IP address blocks:        2602:f6ed::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:7c:ca:ae:6c:3c:54:73:14:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=a25128e8-0306-413d-ab11-40024e156232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:48:77:1f:88:d6:e8:9a:d2:0a:4a:49:cc:
                    37:50:3f:4e:50:1d:e1:15:8e:fe:64:3d:65:53:bb:
                    3f:d0:55:d9:d1:d3:49:88:53:6e:36:c6:3d:b1:46:
                    cd:81:e5:d2:6d:b9:4c:aa:57:d1:8d:5e:21:7c:13:
                    c9:7e:58:ee:7c:0f:42:b3:cd:a5:05:70:99:39:f3:
                    bb:89:bd:e4:c1:d0:84:98:15:01:58:1c:b9:d5:15:
                    30:b3:16:bb:20:69:3f:c8:9e:70:2e:cf:94:ae:68:
                    22:ba:e3:d0:90:61:7f:0c:b6:1e:f4:33:be:4c:02:
                    f5:9a:13:b5:aa:ff:54:8a:d0:e8:78:2c:84:81:02:
                    44:c5:14:b8:d2:5d:71:95:c6:1b:c7:c2:d0:ea:31:
                    dd:9e:79:5f:91:0b:62:f4:49:88:67:a4:8b:d2:04:
                    6c:8f:68:e3:c6:16:8b:4a:8a:4e:89:91:7c:aa:c4:
                    56:0e:d9:4b:71:ee:b4:b2:5c:e7:9f:20:c0:3d:ab:
                    93:35:8f:70:00:30:88:48:0d:9b:05:a0:b4:55:38:
                    d2:60:f4:4e:32:bf:46:f8:48:ec:20:f3:75:46:ad:
                    64:7c:88:df:0d:93:62:e5:74:84:da:44:78:11:87:
                    b2:3b:ba:72:11:90:38:56:a7:eb:0a:6d:75:98:6c:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F4:B9:AC:30:1C:B3:C1:AD:A1:DD:28:B4:DB:BA:A8:B1:3D:52:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/e6a2333b-c80d-390e-aefc-faa3a93962e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.crl

            X509v3 Authority Key Identifier:
                keyid:CE:FE:6F:B9:EE:3A:8B:69:64:2C:FC:39:4D:90:2C:96:BB:2F:C2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6ed::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:0c:54:ac:f5:b4:97:0f:b4:c2:7d:c0:44:32:c2:b8:97:c8:
         b9:d6:3d:4e:0e:c4:e5:77:e9:d9:52:17:37:25:f7:5d:67:fa:
         e5:55:f2:36:22:dc:2e:cd:18:c8:b9:94:b1:90:85:3d:b5:8b:
         aa:2b:cf:27:6d:86:fa:de:ea:5c:d8:22:7e:8f:ed:08:62:fa:
         c5:02:c3:d8:99:2b:12:94:98:26:b1:0f:21:34:3e:0d:dc:8e:
         97:73:99:67:e6:12:e0:48:cd:08:a4:e2:eb:97:6b:dc:6d:f6:
         38:4c:a8:be:d0:10:7e:58:cd:25:fb:33:bc:3f:87:20:ec:30:
         d5:02:54:34:d8:a8:9d:62:8c:ef:3e:91:17:0c:b4:5b:24:8c:
         60:62:08:49:b2:ca:98:f9:cf:71:09:8a:01:46:93:40:8c:b8:
         68:c8:40:23:9f:46:00:b6:fa:0d:6f:4e:de:13:26:90:f9:be:
         fa:22:40:7d:00:a7:f3:ad:dc:f1:cd:63:57:e7:1a:c6:53:d2:
         0f:1a:f1:65:da:e2:f3:50:af:da:31:ce:12:af:c4:8c:c9:f3:
         c3:50:22:fc:f9:d3:8f:b3:6b:e2:26:7c:f9:4d:9c:31:92:ba:
         f9:1d:cc:80:52:3d:0e:02:60:7b:a9:48:2e:dd:00:81:f8:f9:
         38:f7:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:33 2026 by rpki-client