Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa
File:                     2824194e-8305-35b7-934a-dfe3c0b4c203.roa (raw, json)
Hash identifier:          bNoMTu2RigC8gVDBi2dXuCOgR+kTcZh3K2ufOmTaXRM=
Subject key identifier:   92:66:DD:07:8A:00:35:19:BA:5B:E1:A6:7F:3D:E4:0D:A0:33:AA:7D
Certificate issuer:       /CN=3e7444b5-1f39-42b3-8603-6480a7a61609
Certificate serial:       010D0C9F4328584D2644CFD714F7DAD1C3539D30
Authority key identifier: 10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     20473
IP address blocks:        2602:f533::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:cf:d7:14:f7:da:d1:c3:53:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e7444b5-1f39-42b3-8603-6480a7a61609
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=78fd094a-ab41-4f0f-8e6d-ce4c42adcd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:67:e1:82:b7:0f:2d:d9:58:26:ca:d2:2f:
                    6d:72:a0:01:bc:72:33:77:51:f9:27:cb:a4:78:cc:
                    92:ae:9f:41:70:01:37:d7:dc:35:98:af:a0:bb:a7:
                    68:9c:bc:a5:65:f9:2a:8d:ed:75:94:ec:ac:d4:08:
                    80:9b:85:d4:fd:a0:23:63:65:5b:f7:0b:fb:20:7b:
                    96:9a:84:2c:f9:d7:63:e2:51:57:d0:db:0f:1d:3c:
                    a4:d7:bc:10:e5:7a:b5:a9:b7:1d:18:84:2a:44:27:
                    31:f1:fb:c3:8b:82:42:a5:5d:d0:8d:6b:f4:16:a0:
                    37:a2:84:91:9b:ed:81:a2:9d:86:93:81:b9:33:a4:
                    c3:41:de:aa:1c:65:8c:65:2d:c1:65:69:42:38:14:
                    87:4b:06:c9:2a:eb:7d:86:5a:98:55:73:fd:2f:67:
                    41:16:3e:7c:b8:5e:aa:5f:c7:ef:1b:dc:c1:43:23:
                    fe:3d:bc:f6:f3:e9:47:da:f3:8c:c4:96:74:26:06:
                    7b:09:a0:e6:3f:c5:9b:9a:70:1c:68:10:be:4a:7a:
                    64:27:d3:0a:43:2e:59:2a:0d:1b:02:f2:3f:60:9c:
                    14:db:62:dd:86:c4:d2:f7:e0:8b:9b:90:ff:15:f7:
                    02:ce:50:c1:91:17:9e:d7:b7:4a:fd:ea:e9:d2:a3:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:DD:07:8A:00:35:19:BA:5B:E1:A6:7F:3D:E4:0D:A0:33:AA:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl

            X509v3 Authority Key Identifier:
                keyid:10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f533::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:7c:41:d2:ee:9e:18:4a:62:30:27:91:b4:5b:cf:0b:93:
         d8:ec:cb:95:db:e2:07:84:ff:7b:ac:38:24:ab:1f:22:b7:e7:
         95:90:bb:75:d2:69:cf:23:48:b6:49:89:e9:2d:8b:01:54:70:
         bd:5f:2c:eb:fa:b8:9e:d1:d6:37:1c:1d:6c:42:9c:85:4c:be:
         ad:84:5a:06:f7:60:b5:76:ea:fc:27:7c:b7:1b:61:f6:38:ea:
         c9:6d:e7:7e:28:f4:e5:43:6a:ba:3e:ab:7e:fd:3a:d8:93:50:
         1b:88:b3:33:dc:14:fa:24:1c:89:31:9c:6d:21:6d:e8:86:04:
         88:50:3d:86:7a:e9:7a:9f:6d:c1:36:f7:f7:44:9f:ce:41:70:
         10:28:d5:39:10:cf:a5:24:d8:24:3c:71:65:45:1f:e0:ae:e8:
         10:a4:70:6c:81:d2:e4:1c:db:4a:4f:f9:e4:03:41:32:86:ca:
         86:49:63:f7:f8:23:b9:e5:86:b9:55:80:da:5f:17:30:21:49:
         b5:6c:ae:16:45:8b:06:cb:a0:4b:f5:f7:1f:17:37:4d:86:1e:
         5a:ce:91:f0:ec:cf:ef:f0:61:e1:8f:3b:6a:ca:ca:4a:7e:c7:
         0f:89:08:89:21:f5:ee:ca:7a:20:48:0c:ff:5a:de:fa:f0:50:
         f2:9e:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:48 2026 by rpki-client