Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c/d697ef8e-0fa0-308e-9f52-582dd9ee1726.roa
File:                     d697ef8e-0fa0-308e-9f52-582dd9ee1726.roa (raw, json)
Hash identifier:          YQyuWUvMai5ou+uTT9M7z3PodOxfS1gqhgyzudc1Cts=
Subject key identifier:   72:DB:FA:E9:0C:3A:E1:65:BD:18:5A:4C:76:C0:C3:22:19:DE:89:A3
Certificate issuer:       /CN=c30512b5-dc1b-46cc-9116-bf1356e5556c
Certificate serial:       010D0C9F4328584D315ED000E785AE5EE5751380
Authority key identifier: 00:92:66:82:66:4F:BC:37:AE:E2:E0:60:E7:71:54:36:9A:08:37:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c/d697ef8e-0fa0-308e-9f52-582dd9ee1726.roa
Signing time:             Tue 17 Mar 2026 00:27:13 +0000
ROA not before:           Tue 17 Mar 2026 00:27:13 +0000
ROA not after:            Mon 15 Jun 2026 00:27:13 +0000
asID:                     154309
IP address blocks:        2602:f426::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c/c30512b5-dc1b-46cc-9116-bf1356e5556c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c/c30512b5-dc1b-46cc-9116-bf1356e5556c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:5e:d0:00:e7:85:ae:5e:e5:75:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30512b5-dc1b-46cc-9116-bf1356e5556c
        Validity
            Not Before: Mar 17 00:27:13 2026 GMT
            Not After : Jun 15 00:27:13 2026 GMT
        Subject: CN=441f178d-0f5f-4f92-ab31-c593bb2bf15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:ff:1b:73:60:8c:fb:00:0e:a9:23:99:27:
                    e0:f0:0f:71:d6:e7:6e:ae:89:ce:0a:5c:82:17:9a:
                    1c:99:a8:c6:e5:8e:47:25:0c:ac:50:e6:e3:91:f9:
                    c3:9e:97:78:69:44:d8:c3:74:1d:1c:a7:a4:7a:f4:
                    68:19:e5:eb:b3:d1:3d:bf:40:c7:47:f6:e2:c1:62:
                    e7:c5:bf:3d:eb:a0:ce:83:ec:fc:ca:eb:1b:23:5a:
                    29:25:a4:3c:0d:5e:84:31:78:75:88:12:dd:58:43:
                    7d:5e:71:d7:0e:b7:fb:0e:6b:48:0c:a4:4a:d5:64:
                    ef:a7:8a:b4:7c:fd:70:c8:ab:0b:d8:21:b2:89:63:
                    f8:98:52:77:ce:29:40:b3:d6:89:30:0d:7c:8f:29:
                    0b:0d:95:82:94:fb:17:c5:c5:eb:1a:82:e7:df:4b:
                    ae:d2:4b:f2:a0:30:85:72:b6:d5:4b:15:01:54:7d:
                    53:9f:6e:c3:a1:d3:fb:1d:1a:9e:69:65:18:58:f1:
                    c1:89:96:77:51:63:c8:f8:4d:97:75:a6:fa:80:51:
                    5b:92:97:ff:a8:39:63:6b:9b:0f:f5:3e:a2:36:0d:
                    c6:34:be:07:c5:4d:66:6f:ba:17:23:ce:ac:89:12:
                    de:7f:7f:5a:35:02:3b:ce:d5:a0:b9:ba:e8:02:fc:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DB:FA:E9:0C:3A:E1:65:BD:18:5A:4C:76:C0:C3:22:19:DE:89:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c/d697ef8e-0fa0-308e-9f52-582dd9ee1726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c/c30512b5-dc1b-46cc-9116-bf1356e5556c.crl

            X509v3 Authority Key Identifier:
                keyid:00:92:66:82:66:4F:BC:37:AE:E2:E0:60:E7:71:54:36:9A:08:37:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c30512b5-dc1b-46cc-9116-bf1356e5556c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f426::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:af:0c:ae:ec:19:b5:87:f0:6f:bf:f5:18:08:31:ac:9d:01:
         fe:b9:8b:04:1e:99:f8:84:d5:ab:5e:de:84:78:3e:ca:3e:e8:
         31:6a:9c:1b:1c:0e:13:6d:cc:08:03:c9:9e:d8:c1:24:24:e4:
         b6:7f:fe:5f:03:3c:ac:87:b8:48:87:0d:33:78:ec:9d:1f:28:
         68:ec:93:de:02:cb:68:65:70:6a:f5:80:11:5c:be:aa:ef:f2:
         36:06:bf:b6:69:91:5e:8f:f6:0d:a5:3a:c1:a7:cc:bd:57:34:
         2a:80:7d:be:13:a9:18:53:c6:80:a7:0b:55:6b:33:0d:69:8c:
         50:a8:f0:96:56:7a:2c:f5:24:8d:87:7b:6d:32:ee:cf:81:7c:
         f3:54:57:c6:a0:51:a2:38:ae:3d:8f:5c:6d:8e:05:40:c5:37:
         0d:dc:68:88:77:7d:b0:4f:40:99:48:3c:af:72:72:ce:9f:08:
         b7:d7:16:bc:a5:a0:e4:39:8e:97:63:23:18:d1:a6:7b:7c:5d:
         9e:9b:47:6e:a2:33:5f:a9:84:0c:dc:7f:d3:e9:87:c1:e3:3a:
         8e:01:01:0b:dc:a9:70:7f:92:6e:94:4a:94:45:44:d3:4a:49:
         68:4c:95:11:54:3b:06:06:8c:ed:40:95:7a:eb:f7:66:67:69:
         95:b8:f6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:15:38 2026 by rpki-client