Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa
File:                     eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa (raw, json)
Hash identifier:          aMY00rYeXH4K6H/Qyhth0gijwwMOp8HgT4xkVzSDua8=
Subject key identifier:   17:17:11:2C:1A:CF:F3:F2:B4:A2:A9:8B:05:95:87:BF:0E:C7:82:A0
Certificate issuer:       /CN=6e06ea72-258e-41f1-b216-af309f471233
Certificate serial:       010D0C9F4328584D47C4D82D638B36E152700930
Authority key identifier: B8:55:DA:F1:60:3E:8F:4D:17:5A:B2:71:D0:18:D6:F7:3A:DD:63:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     1405
IP address blocks:        2602:f594::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:d8:2d:63:8b:36:e1:52:70:09:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e06ea72-258e-41f1-b216-af309f471233
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=c3188428-7862-463e-9786-1cf3f45d90e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:4d:ce:09:a1:a2:fc:6d:e7:b2:d7:3c:d5:
                    dc:a6:98:9d:1c:aa:98:f5:47:a5:f7:5b:45:b7:79:
                    5f:76:75:5d:22:4b:8d:ae:31:60:d4:d5:68:40:9b:
                    51:67:d8:55:6a:42:84:0c:f0:bf:a4:68:af:53:63:
                    18:ce:68:34:48:43:ca:44:ec:d4:00:1d:e2:f5:81:
                    90:22:f7:d8:87:34:57:44:5a:49:6c:85:34:e3:68:
                    77:a1:89:d6:3e:f2:e8:81:65:11:3b:1e:2a:61:85:
                    73:15:6c:37:7f:fe:37:0b:24:77:c0:d8:20:58:30:
                    ad:6d:41:2f:c3:14:00:d3:d8:8a:03:04:5a:c6:16:
                    71:00:87:b2:60:14:fe:9d:57:5a:90:c2:77:82:60:
                    8e:e5:ac:7c:b9:95:db:0c:8e:4d:51:92:b7:bf:57:
                    44:8b:50:b7:54:61:db:6a:88:3c:ca:c9:62:8e:6b:
                    53:07:e6:7c:f0:8d:18:b0:e3:ff:2f:f2:67:1f:5c:
                    4e:a3:b0:57:f4:00:66:dd:98:c4:73:c0:a9:89:4d:
                    e8:90:fd:5b:15:87:1d:83:f2:6d:02:40:2c:b4:29:
                    0f:d9:c2:e2:ae:f4:19:fb:d8:bb:91:93:03:bd:33:
                    6e:92:49:91:80:4b:93:a5:c6:94:ce:a9:fb:18:72:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:11:2C:1A:CF:F3:F2:B4:A2:A9:8B:05:95:87:BF:0E:C7:82:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.crl

            X509v3 Authority Key Identifier:
                keyid:B8:55:DA:F1:60:3E:8F:4D:17:5A:B2:71:D0:18:D6:F7:3A:DD:63:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f594::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:e6:0e:ea:19:46:4a:cf:79:42:f2:4e:14:97:c0:fd:c7:
         00:4b:26:c9:38:fc:be:ee:a6:70:b3:7d:a4:48:d6:ea:00:33:
         36:a2:61:a4:4a:ee:86:fd:33:27:43:b2:f9:e7:7c:ca:00:fd:
         57:7d:be:f9:2f:f1:0d:da:a2:85:53:a9:7d:f9:c3:f5:9e:d9:
         dd:ba:d4:64:74:e1:37:18:a9:77:cf:03:50:30:3b:8a:c5:f4:
         23:0d:79:d7:23:96:00:63:dd:47:42:78:43:cc:50:d1:37:1e:
         d5:88:d7:74:8e:2a:21:38:78:2b:19:c0:ef:38:81:7e:f5:7a:
         51:17:4e:e5:64:24:11:3d:55:fa:a4:53:4f:b2:4b:63:18:23:
         0c:44:25:27:3f:99:51:6c:a4:d5:5f:28:3e:7b:a2:50:34:4b:
         63:f8:d0:60:b6:e4:a7:a2:ac:43:33:c4:c5:e0:c2:e7:e1:c2:
         c8:9f:8b:55:50:3b:42:16:5d:63:ae:83:52:a1:9f:26:17:14:
         10:71:89:0b:da:d3:00:6d:71:8c:1e:e4:0a:f5:7d:16:63:e8:
         66:08:af:87:11:d9:1a:82:97:3b:06:77:b3:ad:c3:d7:c2:70:
         36:91:81:a5:f4:53:24:cd:34:b3:3b:98:54:93:a9:91:b4:74:
         c2:e3:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:30 2026 by rpki-client