Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/204a0cb8-e687-349e-a1cb-d21fdfecdf32.roa
File:                     204a0cb8-e687-349e-a1cb-d21fdfecdf32.roa (raw, json)
Hash identifier:          SxTXmR7Om5TJfOfZg23m+Ht88y/dkOSS8891NF4dbtI=
Subject key identifier:   9F:BA:81:89:4B:63:57:A5:74:4D:3D:DE:0E:3A:F8:6C:BD:96:FA:0A
Certificate issuer:       /CN=cae112c4-38cb-44c3-a8df-43152814a899
Certificate serial:       010D0C9F4328584D44335E96B62DBD2FB6361D80
Authority key identifier: 8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/204a0cb8-e687-349e-a1cb-d21fdfecdf32.roa
Signing time:             Mon 23 Mar 2026 18:20:03 +0000
ROA not before:           Mon 23 Mar 2026 18:20:03 +0000
ROA not after:            Sun 21 Jun 2026 18:20:03 +0000
asID:                     63019
IP address blocks:        2602:ffce::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:33:5e:96:b6:2d:bd:2f:b6:36:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae112c4-38cb-44c3-a8df-43152814a899
        Validity
            Not Before: Mar 23 18:20:03 2026 GMT
            Not After : Jun 21 18:20:03 2026 GMT
        Subject: CN=8e190400-3aa8-48b1-8f81-1088db3cd7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:30:fe:f3:14:0b:68:bf:20:bd:81:99:cc:
                    81:84:71:f7:af:9d:f8:d7:2c:e5:18:47:7f:08:11:
                    c7:aa:c6:68:77:b7:df:83:c6:09:c5:6d:ba:f0:92:
                    bf:67:99:5a:83:80:ec:25:78:0d:f8:02:4c:c4:f8:
                    f9:4b:33:3b:82:c3:51:51:cf:d4:f4:d9:65:98:08:
                    55:a2:95:ca:c1:77:5d:64:31:bc:28:67:e4:24:f9:
                    22:c0:57:8e:96:34:f9:1c:36:5c:7d:ce:d2:74:4e:
                    06:85:e5:78:01:5d:f1:67:fd:bf:80:46:ff:27:60:
                    83:1d:71:5c:04:a9:66:a1:a7:2c:dd:20:9f:79:97:
                    29:d9:08:d1:fd:91:24:a2:be:9e:62:f7:70:cc:01:
                    74:74:a2:0e:ba:29:5b:1b:99:9b:0b:d1:34:1c:f1:
                    b0:99:42:58:82:c8:70:41:5d:ab:8f:19:38:8b:bd:
                    5b:f2:02:68:ab:a1:9a:cf:9b:42:ee:f5:59:8c:19:
                    7d:f3:71:f5:fa:af:af:97:4b:bb:da:0c:d1:9c:39:
                    41:aa:d4:dc:48:3c:a8:f9:26:05:eb:33:3f:3d:02:
                    08:40:b9:0c:b3:cc:6c:4f:55:d2:69:3d:c9:48:a0:
                    58:94:63:50:6f:32:71:67:e0:83:c5:d9:14:48:0d:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BA:81:89:4B:63:57:A5:74:4D:3D:DE:0E:3A:F8:6C:BD:96:FA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/204a0cb8-e687-349e-a1cb-d21fdfecdf32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl

            X509v3 Authority Key Identifier:
                keyid:8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffce::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:79:d1:69:7c:08:69:c9:de:3d:12:46:f9:dc:62:05:75:b8:
         9f:fc:3d:2d:c9:14:b2:9d:d5:95:de:4a:6f:5a:12:e6:1b:0d:
         76:b2:53:48:12:b4:c2:71:5e:a4:b2:a8:63:dc:d4:09:81:0d:
         d9:05:5c:f6:b8:8e:7c:c1:59:5f:dc:f1:f2:b1:e8:5f:7b:73:
         90:a5:63:ab:0e:f8:87:fa:fc:57:5c:57:29:65:e9:5c:53:b4:
         06:4b:8b:95:90:13:9d:0d:e2:8e:b9:11:c7:90:da:75:c6:43:
         54:29:11:07:73:2b:30:b5:27:d9:a5:54:86:d5:95:be:a6:bd:
         3d:20:e2:bd:f8:59:d2:2a:b1:40:8c:af:4b:5d:10:e9:58:e3:
         18:34:a3:a0:7a:15:eb:9a:80:9f:56:b3:cb:fb:61:47:04:ac:
         9b:80:bc:8a:65:80:56:dd:42:b6:d1:ba:ce:11:07:dd:41:19:
         61:e2:17:d1:3e:8d:f0:45:8b:0a:52:ec:3a:96:c2:ea:20:44:
         69:64:89:0a:ab:52:11:94:e8:74:8e:a2:22:00:d9:03:1e:1a:
         4c:5f:f9:47:e1:05:3a:cc:82:55:e0:97:d1:04:e7:a0:41:a7:
         1b:f2:b9:d6:c8:fc:d1:6b:a6:19:ec:33:12:1f:a4:6a:77:ba:
         be:05:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:28:34 2026 by rpki-client