Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/b20e105d-bdab-3546-aab7-542d0f99b65b.roa
File:                     b20e105d-bdab-3546-aab7-542d0f99b65b.roa (raw, json)
Hash identifier:          KyM+BetwsFgFpCFeKNZbhqspaKjxvvCgo+iVATg9NFI=
Subject key identifier:   48:04:D9:0E:FA:C8:D8:89:91:68:E4:45:09:E8:B9:16:DF:24:C2:3F
Certificate issuer:       /CN=270feb68-f8d6-4567-90e5-6325ba1775d1
Certificate serial:       010D0C9F4328584D35C78C0BBFA6F9C0C849E500
Authority key identifier: 37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/b20e105d-bdab-3546-aab7-542d0f99b65b.roa
Signing time:             Wed 18 Mar 2026 14:21:29 +0000
ROA not before:           Wed 18 Mar 2026 14:21:29 +0000
ROA not after:            Tue 16 Jun 2026 14:21:29 +0000
asID:                     11421
IP address blocks:        2602:f429::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:c7:8c:0b:bf:a6:f9:c0:c8:49:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270feb68-f8d6-4567-90e5-6325ba1775d1
        Validity
            Not Before: Mar 18 14:21:29 2026 GMT
            Not After : Jun 16 14:21:29 2026 GMT
        Subject: CN=53b8ea47-b1ec-43ee-8444-524076b3ef29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:43:ca:fb:69:82:0d:a0:cb:bf:c8:49:cb:
                    62:e4:da:aa:ef:21:c2:5b:84:73:99:45:d5:b5:c9:
                    07:08:01:76:46:63:36:75:ea:f4:e3:54:57:b1:dd:
                    07:f3:4f:7f:bd:a0:00:78:3f:a0:f0:ae:2e:5e:cb:
                    83:e5:0a:31:cd:31:34:66:cf:3f:93:59:09:2c:0b:
                    40:e3:43:f6:eb:33:09:41:1e:68:0e:5d:ab:b2:23:
                    d9:6e:dd:46:42:2e:0e:6c:82:22:d7:15:2c:f5:c7:
                    0a:77:74:9f:67:62:2a:6f:bd:97:c3:d7:02:cc:44:
                    83:8f:fa:60:bc:41:21:6c:2f:3d:a1:a9:5e:e7:d0:
                    68:8a:66:78:56:eb:4d:9f:75:85:25:ab:da:0a:02:
                    bf:1c:98:4d:a4:3e:4b:ac:e6:8b:53:ff:db:7b:0f:
                    66:00:ed:1b:f5:fe:99:3b:d1:70:0d:95:3b:e8:d7:
                    d4:97:09:84:0e:e0:b9:77:aa:c9:74:34:04:05:36:
                    fa:84:b0:eb:40:d3:a2:79:16:96:12:2a:3e:59:7f:
                    25:18:e5:bd:25:09:08:96:07:6d:f9:f3:7a:75:66:
                    d7:a5:a7:6e:d0:69:4f:4e:60:db:95:11:41:d5:0f:
                    13:8b:06:af:d8:c0:b5:0c:62:5d:27:9f:78:7c:33:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:04:D9:0E:FA:C8:D8:89:91:68:E4:45:09:E8:B9:16:DF:24:C2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/b20e105d-bdab-3546-aab7-542d0f99b65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.crl

            X509v3 Authority Key Identifier:
                keyid:37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f429::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:2e:98:fa:aa:48:5d:8b:24:4c:97:56:3d:1f:18:93:2c:
         5d:64:b7:5b:1d:99:cd:32:f8:03:20:f2:bc:11:7b:28:8a:94:
         66:6a:fa:c1:5f:4b:ce:9a:0e:55:07:3b:ab:a2:b9:10:b0:d4:
         34:a2:c0:ad:d6:35:64:08:bb:bc:e0:48:6a:93:61:62:ce:84:
         02:d9:0c:19:ab:ce:d3:79:d8:41:08:37:dd:25:f4:8b:98:5c:
         9f:7e:20:88:f9:48:82:d4:75:62:45:7e:45:29:a9:87:6d:25:
         9d:4f:34:af:ef:74:8f:60:db:bd:82:69:7f:32:64:c2:7e:d9:
         33:0f:e0:7f:2d:ec:d4:93:a2:6e:d0:af:eb:1a:82:2a:30:1a:
         97:cc:03:35:14:7d:52:df:07:ec:65:ff:50:c5:6b:ad:96:a7:
         0e:98:59:c9:8a:45:0e:58:30:1c:47:bd:bf:6b:53:26:43:b5:
         52:68:9f:e8:80:6a:c2:5c:3a:d2:b2:53:98:4e:d7:47:9a:67:
         43:04:9d:e0:39:bd:10:86:69:93:8a:9b:a4:bf:41:9f:bc:98:
         62:2a:d2:89:64:3e:4c:37:49:c6:f1:4f:e5:31:9c:ed:fe:c8:
         94:b1:7a:e7:1b:f1:31:86:ea:5a:d9:98:65:54:22:a3:34:1e:
         55:f7:4d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:52 2026 by rpki-client