Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/b81e7ed8-99b4-3933-9463-ecc508546f72.roa
File:                     b81e7ed8-99b4-3933-9463-ecc508546f72.roa (raw, json)
Hash identifier:          5PA7oVrh5ZrSCi0Es1ajQK5NGxzH55qL1OUK6P+SmxM=
Subject key identifier:   BC:27:A8:11:E4:AC:22:98:4F:7B:C2:C6:03:73:3E:20:28:11:54:ED
Certificate issuer:       /CN=f7cdccfc-98d6-46cd-9ca4-09360de8cb55
Certificate serial:       010D0C9F4328584D38AD336CF12251880C394200
Authority key identifier: A7:9F:8B:CF:D6:99:D3:A1:DF:98:3B:AF:4A:5D:2F:70:A2:21:20:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/b81e7ed8-99b4-3933-9463-ecc508546f72.roa
Signing time:             Thu 19 Mar 2026 15:15:49 +0000
ROA not before:           Thu 19 Mar 2026 15:15:49 +0000
ROA not after:            Wed 17 Jun 2026 15:15:49 +0000
asID:                     402294
IP address blocks:        2602:f424::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:ad:33:6c:f1:22:51:88:0c:39:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cdccfc-98d6-46cd-9ca4-09360de8cb55
        Validity
            Not Before: Mar 19 15:15:49 2026 GMT
            Not After : Jun 17 15:15:49 2026 GMT
        Subject: CN=fad74abe-4846-4157-894a-2b79ac296989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:1b:5e:8c:ab:a7:76:9a:87:d5:1e:d8:74:
                    85:e4:68:7a:a8:ab:71:59:ae:36:27:28:14:f5:c0:
                    f9:90:94:b8:fc:8a:ba:a9:8b:16:21:dc:34:21:93:
                    a2:f5:3c:00:79:d7:94:2d:32:68:ea:e1:b1:20:93:
                    b9:64:c7:3f:da:9f:8b:b0:36:36:29:b7:17:a6:bc:
                    25:44:3c:58:16:05:a4:d0:6b:23:4a:2d:6c:70:35:
                    a0:1f:9f:48:aa:bb:38:d6:77:66:36:60:de:ed:81:
                    b7:ab:cf:76:6d:16:7b:7a:3c:64:57:dc:f5:4a:35:
                    c9:03:c9:a0:6f:c4:37:05:20:60:c4:62:ee:be:65:
                    29:68:79:3a:e3:04:97:e3:73:62:66:2b:da:99:d3:
                    c8:7a:32:9b:cd:31:00:7e:64:80:51:86:52:72:e5:
                    21:03:73:f5:9c:c3:05:03:80:87:74:96:5b:3f:3b:
                    c2:ab:37:5b:2f:05:d0:ab:5a:f8:68:48:27:9b:38:
                    ea:a7:56:2d:7f:3d:b1:45:dc:29:64:ca:59:80:fa:
                    7e:ca:81:7a:c1:8c:c7:b1:87:16:11:d3:a6:dd:35:
                    e3:ba:2a:23:65:67:83:ca:05:85:51:e1:f6:c4:1f:
                    92:fd:25:28:0a:0a:14:25:a3:dc:71:d0:f4:0e:a5:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:27:A8:11:E4:AC:22:98:4F:7B:C2:C6:03:73:3E:20:28:11:54:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/b81e7ed8-99b4-3933-9463-ecc508546f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.crl

            X509v3 Authority Key Identifier:
                keyid:A7:9F:8B:CF:D6:99:D3:A1:DF:98:3B:AF:4A:5D:2F:70:A2:21:20:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f424::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:df:e1:24:e2:c1:7c:8d:b5:5c:b7:bf:3d:cf:b7:84:3b:
         cc:18:ad:ba:94:75:c8:36:55:e6:2b:24:fd:47:3e:d6:01:2c:
         bc:17:1c:f8:b0:f1:5d:c1:86:64:4e:d7:5a:02:20:3d:18:13:
         88:e7:4f:bf:78:c4:4c:ac:db:79:89:6e:3a:3f:98:cc:64:d3:
         7b:f9:79:81:9b:40:e7:45:8c:28:88:fe:aa:86:d0:90:3a:ae:
         9b:e8:49:8e:da:cd:65:86:ad:20:b1:7e:3e:e3:8d:f6:3f:4c:
         6f:df:38:8e:ea:29:66:49:06:06:2c:cc:1a:1e:3f:fa:ea:29:
         ac:3c:11:70:c8:38:3b:c7:cc:fd:51:9a:ad:e2:80:b6:ee:16:
         49:76:43:64:1d:56:7a:4f:a7:80:45:93:12:9b:f5:1e:70:52:
         11:7b:f8:cc:21:74:00:33:75:fa:5d:c6:90:b9:7f:49:c8:77:
         83:ec:64:c7:a4:28:0c:36:0d:ad:d5:a9:8a:3c:db:4a:ac:d1:
         e3:0b:3f:56:5c:de:d4:8a:2d:52:01:e2:36:5c:a5:44:d9:c4:
         8b:5e:43:5c:8a:db:81:7e:0d:1b:22:8d:1e:62:af:20:5f:1d:
         d4:2c:e6:df:54:0b:68:11:5d:08:96:d6:c3:e7:a0:8c:b7:64:
         ab:1f:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:10 2026 by rpki-client