Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
File:                     b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa (raw, json)
Hash identifier:          A6ZDryNwodhmjF/6BS/qHjrv7l3D5Rti93Rd+5m8QM0=
Subject key identifier:   23:74:62:81:14:20:38:EF:9A:D3:9F:BF:B4:9B:CD:E3:62:21:91:18
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584D4A8F8275A1FE5D6F339D58C0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     401659
IP address blocks:        2602:f5c1:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:82:75:a1:fe:5d:6f:33:9d:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=36c664dd-8821-4080-be51-6c318f93b561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:a8:f3:4c:f0:fa:9b:92:70:a7:1d:b5:8e:
                    e5:c4:59:23:0d:78:fa:dd:b5:d6:d3:48:c2:10:74:
                    18:78:b5:52:e2:45:d2:c3:e7:ce:6b:9e:84:12:94:
                    3d:9c:c7:d6:15:41:94:33:aa:53:9b:ba:0d:f5:bc:
                    68:da:46:c6:be:bc:c7:56:f7:db:2d:ff:c0:31:96:
                    52:f0:21:04:24:3a:9f:e5:4b:7e:52:d7:a4:d0:a6:
                    6b:58:63:31:9b:dc:22:13:5c:ff:c5:d8:c7:d5:bc:
                    c9:11:92:f1:77:10:e2:d4:f6:54:71:76:98:4c:c1:
                    56:62:17:35:f4:a1:14:8d:1f:f9:49:5b:4f:c8:7c:
                    8a:c9:04:aa:a0:b2:45:be:35:f4:86:27:36:29:e3:
                    a5:11:57:58:75:5e:f5:0a:fa:28:69:66:99:cd:62:
                    a3:44:7a:9a:00:69:54:56:f8:68:0d:4e:2c:11:c1:
                    9e:6a:28:59:08:f4:c2:fa:38:55:c7:04:66:18:4c:
                    11:cc:fc:3c:58:31:04:20:ac:f9:28:f2:97:f0:b7:
                    e6:18:5a:13:71:cd:ee:27:cb:ed:ba:67:10:87:58:
                    0e:bf:92:b0:4a:e6:82:b6:30:b1:a3:e0:e8:42:fc:
                    0d:a8:65:e4:38:54:70:dd:d4:60:50:8c:b6:c5:5b:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:74:62:81:14:20:38:EF:9A:D3:9F:BF:B4:9B:CD:E3:62:21:91:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:70:00:c0:45:6c:6c:e6:fd:af:8f:56:29:2b:e4:bf:01:1b:
         4a:1f:66:43:a8:2a:cf:92:ad:d1:8b:8d:1f:e0:4b:d9:3b:dc:
         77:07:73:ac:85:43:30:d9:2c:05:99:5f:21:81:1e:41:07:d8:
         76:1b:e7:bf:23:2a:01:c6:86:53:7d:ef:0f:8b:fd:67:b5:97:
         d7:f2:2f:d7:47:e9:d3:45:9c:43:32:58:9a:15:a0:a4:36:a9:
         81:69:9d:75:5e:b0:67:46:72:f1:f6:57:8a:8d:04:37:04:26:
         c1:45:6e:c3:82:97:87:a9:56:25:d9:66:57:b9:01:95:68:86:
         12:5b:e3:8c:0d:84:76:25:cb:91:e9:ec:5c:57:2c:e9:d1:eb:
         1a:f3:b5:f1:8a:ea:98:c4:eb:0c:d2:fe:d1:c3:94:af:90:4b:
         ba:5e:a7:dd:b8:cc:0d:b4:7b:fa:24:0d:37:d1:97:41:95:78:
         f0:59:7f:bb:25:ea:00:e8:7c:e0:bb:d1:bc:73:68:0d:43:6f:
         1b:c2:ff:8c:81:16:3f:b7:1f:89:b4:7f:d5:7b:48:4f:a8:5e:
         e1:8a:09:0b:07:14:10:c0:22:27:19:ec:33:d7:a2:cd:52:6f:
         26:31:04:b8:14:36:2d:19:57:23:94:e2:62:cb:e6:57:23:96:
         c3:65:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:46 2026 by rpki-client