Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa
File:                     e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa (raw, json)
Hash identifier:          xu5dL6mMYCsqPd+M34xOBdjjR/5lvPptfiQKomUjwtQ=
Subject key identifier:   2D:B7:1F:D4:B9:2C:FF:4C:84:B4:FC:5F:AC:8B:32:D8:17:B8:8B:26
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAFD66AB888CD109F94640
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33588
IP address blocks:        2602:10f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:fd:66:ab:88:8c:d1:09:f9:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=f2eb0d33-e006-4f2f-a408-ac5a1c07fa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:fa:7f:5c:3b:8c:6f:6d:73:b9:82:0f:eb:
                    cd:07:18:ba:c7:02:52:63:1c:c6:fa:c2:82:ff:4f:
                    7f:ca:13:04:36:23:47:58:6d:51:64:6a:28:86:a9:
                    5b:4f:79:89:40:68:09:cb:e7:e5:c1:11:a4:90:59:
                    f7:27:5f:20:3a:49:8c:40:e5:c4:d6:a6:ce:32:dd:
                    4b:68:e1:d0:f2:42:87:14:c9:a6:36:51:85:4f:c7:
                    c4:c8:be:a6:9b:65:20:b0:05:22:d2:36:00:49:02:
                    fe:a2:01:01:c2:65:05:a4:5a:fa:b8:d1:28:ce:80:
                    c9:94:da:2e:7b:dd:8e:ab:d4:8c:e3:b4:4b:cd:36:
                    48:24:42:c3:2b:73:25:4f:02:db:f3:95:52:f8:1b:
                    04:f8:49:31:db:cf:25:ff:4a:e6:b0:9c:79:4d:c9:
                    9f:49:85:9e:b4:77:e9:8f:c6:5d:68:9b:1b:66:20:
                    a5:d2:c0:3d:81:22:20:b2:90:e2:f3:cd:87:12:c8:
                    4c:3c:a2:c2:ca:77:45:83:cd:53:4e:91:4e:eb:0b:
                    c8:23:b8:d1:e6:0c:d6:02:d8:35:67:bb:be:4d:63:
                    67:54:fe:1f:80:2d:80:44:95:90:92:e8:14:ab:ce:
                    ef:05:84:a9:ce:65:5e:3e:2d:08:7f:93:9c:3c:d0:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B7:1F:D4:B9:2C:FF:4C:84:B4:FC:5F:AC:8B:32:D8:17:B8:8B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:c3:1e:0e:ff:f3:87:f9:c0:8a:bb:c5:14:23:a5:31:75:
         36:dc:68:7a:34:0b:b3:c3:64:e9:36:3c:61:94:aa:e0:0a:1e:
         f1:5a:b5:b9:2a:d3:1e:e2:b0:0d:4e:11:2e:ce:27:06:f4:26:
         28:94:b4:c5:9c:ad:6f:25:c4:3e:9d:2a:6c:dd:21:1b:ac:1f:
         6a:c6:f5:4b:69:e8:03:23:e2:c9:69:1f:ed:94:4c:31:00:29:
         84:f1:ee:91:a5:af:08:d2:8e:8b:f0:0e:35:d8:6b:4e:be:d1:
         c3:f4:c5:0b:37:55:e3:08:1e:fb:09:7e:c9:dd:e8:44:00:85:
         9b:b7:77:e4:63:ed:67:4b:f3:b3:8f:1a:8f:48:46:8f:39:19:
         55:60:ed:c1:2c:34:88:ee:36:e7:68:29:d8:43:f7:cb:3d:50:
         42:94:d4:ee:94:89:7d:2a:9b:1c:ec:c5:bb:ae:78:60:d2:34:
         9b:39:91:57:1f:7b:e5:8e:26:c8:8e:cc:f9:3d:8b:5f:77:a0:
         91:3f:5a:5e:83:0b:83:5c:ed:7f:31:c2:43:63:b3:87:ab:16:
         50:be:fc:c8:65:e2:e9:5c:55:16:16:6c:a8:6b:d0:68:be:a9:
         8b:41:0d:75:28:b3:16:aa:8c:63:d3:f8:c0:39:34:9f:30:cc:
         7a:28:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:12 2026 by rpki-client