Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/ce339a86-1cb8-3646-982e-df807d56cb9f.roa
File:                     ce339a86-1cb8-3646-982e-df807d56cb9f.roa (raw, json)
Hash identifier:          Iypj+f/r3Dwy6S0k/0Tcby0FsJjE+IrKom+1nsuOMak=
Subject key identifier:   13:8D:BA:CD:E4:9B:09:1E:05:32:FB:57:A5:C6:80:65:01:74:9D:88
Certificate issuer:       /CN=b566ac43-df42-44dc-a133-81ccff9cf2d5
Certificate serial:       010D0C9F4328584D2036F634EC6B3DD3CEA16280
Authority key identifier: 5C:13:B3:B2:FF:4E:AB:A8:24:80:B3:4B:8C:45:6C:A7:F6:7F:60:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/ce339a86-1cb8-3646-982e-df807d56cb9f.roa
Signing time:             Tue 10 Mar 2026 20:58:11 +0000
ROA not before:           Tue 10 Mar 2026 20:58:11 +0000
ROA not after:            Mon 08 Jun 2026 20:58:11 +0000
asID:                     36243
IP address blocks:        2602:ff87::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/b566ac43-df42-44dc-a133-81ccff9cf2d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/b566ac43-df42-44dc-a133-81ccff9cf2d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:36:f6:34:ec:6b:3d:d3:ce:a1:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b566ac43-df42-44dc-a133-81ccff9cf2d5
        Validity
            Not Before: Mar 10 20:58:11 2026 GMT
            Not After : Jun  8 20:58:11 2026 GMT
        Subject: CN=5f376f42-bb2e-41d2-86a4-08d6502e4ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1e:b1:db:fc:10:bf:91:07:40:e4:9b:f6:65:
                    98:c9:3d:26:e5:5c:c0:5d:5a:de:85:8f:77:2f:d3:
                    ff:7d:02:3d:e0:b7:2f:21:78:1a:71:45:4b:cb:58:
                    9d:cc:1d:79:b7:aa:90:c0:b0:44:35:65:ca:77:ed:
                    0a:cf:67:d5:09:e8:db:04:25:ea:a7:9d:cd:03:d6:
                    14:4c:1d:86:99:c9:98:c6:38:b0:17:e3:78:99:6a:
                    fe:e6:93:40:db:7c:32:65:fb:2b:b9:57:f2:43:1e:
                    62:6f:15:34:fa:ef:03:a0:40:44:fd:2d:69:2a:ba:
                    94:01:b7:f0:74:2c:38:d1:fd:4d:0d:81:1f:98:4a:
                    79:59:94:71:cb:fc:7a:01:12:85:79:33:1e:9f:58:
                    df:09:32:de:bb:77:b1:2f:e9:20:4d:bd:ca:66:2a:
                    eb:eb:11:60:2b:a8:45:50:6d:f4:e3:db:6f:a9:44:
                    bd:56:54:5a:cc:73:7c:b5:b7:34:57:6e:a7:25:08:
                    d8:af:4c:9e:5d:a6:e1:78:ee:82:fb:df:6d:71:d6:
                    a0:ad:9f:51:8e:2a:32:a5:bf:7f:8d:ac:6d:13:a0:
                    96:fc:a7:be:fb:d9:78:c2:b9:94:6b:44:a8:5f:57:
                    07:16:f5:c8:91:40:b3:c6:f9:01:47:5c:66:0e:10:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8D:BA:CD:E4:9B:09:1E:05:32:FB:57:A5:C6:80:65:01:74:9D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/ce339a86-1cb8-3646-982e-df807d56cb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/b566ac43-df42-44dc-a133-81ccff9cf2d5.crl

            X509v3 Authority Key Identifier:
                keyid:5C:13:B3:B2:FF:4E:AB:A8:24:80:B3:4B:8C:45:6C:A7:F6:7F:60:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff87::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:a0:6a:54:77:d3:18:b9:ea:25:b4:f3:12:ec:51:07:c6:
         fb:e6:05:e3:99:8c:be:d8:8c:2a:92:43:af:c8:4a:8f:7b:d9:
         90:a5:e1:5b:ce:50:86:86:73:18:2b:11:1f:58:2a:7e:e4:10:
         79:6c:8e:22:d2:20:26:dc:05:9b:37:2d:68:98:83:cc:63:e0:
         3e:84:88:f5:45:d6:d1:c2:5a:21:79:15:e7:be:2a:3f:81:ab:
         d2:c7:1f:4f:55:7f:ab:bb:19:9a:94:0a:e1:4e:15:88:32:f1:
         cf:0a:99:af:7e:0a:55:51:bd:3f:ea:94:b0:cd:da:74:68:58:
         f9:40:f1:13:a0:d6:50:55:75:99:e4:83:52:16:7d:d5:0e:6d:
         38:61:f2:dd:cd:78:18:8c:e2:1e:f4:35:90:82:34:1d:26:dc:
         c3:b3:48:65:f1:56:55:fc:4d:c9:bf:55:8f:61:0b:2e:a0:1c:
         40:98:5a:19:24:0d:1f:16:a4:a5:1f:d2:cd:3c:e1:c5:12:ec:
         2f:26:a6:9b:10:03:77:af:34:94:ff:51:d7:d5:b3:d4:11:b9:
         00:9b:47:8c:e9:f6:33:d9:3f:a9:cd:23:cb:f3:5f:0f:20:f4:
         09:bb:fb:a6:3f:a6:b3:1f:8f:a2:4e:7b:0a:72:7d:83:52:7c:
         ad:a4:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:47:04 2026 by rpki-client