Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/49aa4e57-a2ba-30c7-a715-feac39e2b023.roa
File:                     49aa4e57-a2ba-30c7-a715-feac39e2b023.roa (raw, json)
Hash identifier:          AZONbuKI97cpyvCNmPsRWgTpKCocZptGEB9s4oihywo=
Subject key identifier:   AE:2D:A2:EA:85:41:93:49:A8:CF:90:A2:B7:EE:EF:97:52:31:38:B7
Certificate issuer:       /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial:       010D0C9F4328584EA786E392AB609722175BB280
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/49aa4e57-a2ba-30c7-a715-feac39e2b023.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2602:fb10:40::/44 maxlen: 48
                          2602:fb10:50::/44 maxlen: 48
                          2602:fb10:60::/44 maxlen: 48
                          2602:fb10:70::/44 maxlen: 48
                          2602:fb10:80::/44 maxlen: 48
                          2602:fb10:90::/44 maxlen: 48
                          2602:fb10:a0::/44 maxlen: 48
                          2602:fb10:b0::/44 maxlen: 48
                          2602:fb10:c0::/44 maxlen: 48
                          2602:fb10:d0::/44 maxlen: 48
                          2602:fb10:e0::/44 maxlen: 48
                          2602:fb10:f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e3:92:ab:60:97:22:17:5b:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6343484d-a075-48b6-a747-b9b35f1a013f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:f2:72:0d:46:6d:bd:5c:0e:b9:df:eb:16:
                    74:d5:b8:cf:66:7c:9c:1c:c6:3b:e8:1a:3e:8c:c5:
                    48:6b:8d:1f:b4:f1:ef:35:20:af:ca:40:d7:1b:52:
                    72:23:e3:17:c2:a2:2a:23:d5:23:17:8b:d5:e0:8b:
                    81:c8:1e:4d:3e:b5:50:08:73:e7:7c:45:e6:c1:c1:
                    bb:c1:c0:88:aa:05:d1:4c:d0:10:13:3c:22:2d:19:
                    89:47:c3:75:e1:74:7a:13:a2:23:89:da:8a:56:75:
                    42:bd:60:ef:77:71:74:46:aa:9a:4a:59:61:e4:57:
                    2a:ea:99:de:81:e5:f1:54:81:5a:b1:14:62:f5:7d:
                    78:5a:0e:5b:bf:d1:75:f2:88:e8:06:34:3c:e9:a6:
                    49:61:08:3e:37:f3:1c:a0:e8:1b:40:85:52:4b:75:
                    e5:5d:e1:36:41:8a:df:88:20:aa:2e:96:62:b9:61:
                    9e:e2:28:d2:6a:7c:fe:92:1d:6e:0a:c1:d0:7d:a1:
                    60:8d:86:d8:1e:b9:18:9e:fe:55:10:2c:3b:16:72:
                    8e:e7:99:a8:f7:8c:a6:bd:b7:f8:fc:be:94:1f:ef:
                    75:02:91:ee:e5:4f:2b:3b:3b:2a:a8:1d:42:ef:61:
                    02:fc:0e:7d:08:07:82:dc:94:b5:22:d1:3a:4b:e9:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:A2:EA:85:41:93:49:A8:CF:90:A2:B7:EE:EF:97:52:31:38:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/49aa4e57-a2ba-30c7-a715-feac39e2b023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb10:40::-2602:fb10:ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:eb:90:2c:08:e5:55:10:e5:73:51:64:94:5d:69:97:80:b0:
         cd:f7:2f:04:15:7a:60:ea:7a:93:a4:86:eb:67:34:01:46:7d:
         91:17:cb:21:74:bc:0f:d9:d3:81:31:cc:09:2a:09:02:0d:f6:
         d6:ab:1c:59:56:72:5c:da:1b:3f:12:83:9e:25:cb:e3:13:06:
         37:93:b9:fa:3c:81:4b:01:93:7e:38:e9:bc:bd:e4:93:c7:4b:
         47:84:5e:26:87:ac:d4:40:b2:81:b8:cd:e7:11:5a:b9:35:71:
         e5:c4:d7:3e:0a:f6:bb:62:34:d8:d4:dd:2e:db:fb:d8:45:f3:
         8b:42:9e:87:dc:fe:ed:19:ec:68:09:7d:c3:3d:ac:ad:d5:d2:
         ac:f2:cd:c2:38:59:ba:4d:f2:c4:b4:63:75:ba:51:09:d3:33:
         fe:18:94:75:9c:bf:d7:d4:10:75:fe:b7:9c:f7:76:a2:fc:c6:
         84:e2:f7:dd:1d:84:cf:77:23:6f:48:98:08:a4:be:b4:f8:2c:
         22:70:64:75:21:57:cd:d7:f2:aa:3b:af:45:7c:77:11:92:5b:
         06:b0:d6:2f:2d:38:e4:cb:e3:66:73:8c:e6:91:b0:1b:b4:94:
         a6:a8:0c:be:b8:cd:f5:2c:fc:9f:55:08:bf:2f:03:c1:30:7c:
         76:17:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:31 2026 by rpki-client