Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa
File:                     ea26638a-da24-3af0-88f1-df23cd94335f.roa (raw, json)
Hash identifier:          Qtucy8W9T+bURZs7Oh+60ALjYusvMCnJuSb57MvY7aY=
Subject key identifier:   00:29:3E:A6:84:88:AB:38:B9:65:F0:82:30:92:B8:5F:60:E8:A7:DE
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584DD8F062F8AC045A26FCD24980
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     400097
IP address blocks:        2606:3d40:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:62:f8:ac:04:5a:26:fc:d2:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=5f1a060b-7505-498b-af87-c12ecb747606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:7d:84:b6:45:30:17:66:41:d9:c1:12:33:
                    c2:b3:b5:2b:e3:86:27:fb:b8:41:cb:02:ef:3e:c5:
                    c6:70:79:74:68:e9:a8:b0:ec:54:a8:6b:87:f2:9b:
                    ba:99:c0:7e:87:4b:41:bc:2a:43:4a:68:df:a3:5e:
                    bf:93:f8:93:9a:60:58:12:47:fb:91:45:d0:92:29:
                    15:99:03:be:c2:d5:10:69:94:8b:62:70:64:b7:2f:
                    10:e2:c5:da:4b:ab:0b:93:d1:0b:3a:c4:bb:55:51:
                    78:57:01:1a:57:c5:36:1c:bb:ff:61:88:41:78:bf:
                    d1:20:09:b3:0b:53:38:94:04:a6:08:38:07:0c:68:
                    0c:ae:20:6c:64:bc:7a:58:c3:44:04:9c:e4:32:a8:
                    33:d5:ec:15:b5:20:5a:6b:a4:6f:ff:48:c2:c5:8e:
                    0a:4a:8c:74:99:25:2d:2b:60:be:e9:f6:71:c1:c1:
                    0c:67:97:97:34:6c:24:05:35:8f:83:83:2a:f5:16:
                    d3:d9:c4:5c:12:29:47:90:6f:fe:4d:7f:a7:11:f2:
                    5d:ae:8d:f7:6d:e0:c3:ba:d2:46:39:55:58:ab:06:
                    53:46:01:5f:52:c6:83:61:23:73:33:2c:5e:69:23:
                    49:69:c5:c0:34:bf:64:19:7d:0b:74:b8:d8:69:13:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:29:3E:A6:84:88:AB:38:B9:65:F0:82:30:92:B8:5F:60:E8:A7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:91:72:e0:bf:87:f7:6d:db:31:98:52:7c:10:63:44:c1:0c:
         1e:bf:23:36:76:b8:90:6e:b6:a3:4b:e2:31:51:c5:5f:bc:23:
         64:75:98:17:f4:27:28:f0:08:02:26:62:61:a0:f2:49:4d:d7:
         02:9b:ec:1a:13:2a:0e:f9:4d:28:20:d4:b7:8f:f9:9b:9d:b9:
         11:18:ef:be:d0:44:bf:81:3f:d3:29:5b:71:35:d3:bb:9c:1c:
         b8:c7:23:60:db:06:f8:e4:ec:b7:29:b0:45:37:75:44:4e:60:
         62:ea:10:72:b7:19:23:d2:b4:34:13:73:73:69:e9:93:32:0d:
         65:74:4c:38:e0:ab:64:09:21:8a:9d:6b:8d:90:b0:f7:86:11:
         29:9b:ab:d6:9f:70:a6:f6:82:35:eb:b8:e1:bc:ed:a2:9e:4a:
         21:cc:d2:23:ac:30:f6:bc:77:bc:a1:43:92:a8:00:dd:5d:4c:
         40:e2:33:8c:e8:a1:23:33:2f:42:e9:e0:ed:a6:ff:b6:c0:10:
         9c:8b:54:91:a9:98:41:31:5a:b2:eb:33:1c:68:3c:0d:0a:f4:
         83:ed:7e:be:1e:26:0a:26:8c:a9:76:54:2e:f5:28:90:fc:73:
         8c:35:b8:42:da:49:1d:c4:20:e1:b1:69:a9:2d:03:ab:eb:07:
         6a:54:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 02:56:49 2026 by rpki-client