Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa
File:                     bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa (raw, json)
Hash identifier:          p+xJnbykrqJ911Tujep0tC/tpb9JBHO3VLFf0Hz+RvA=
Subject key identifier:   3A:7B:78:BA:AE:77:AF:B4:11:E4:08:B5:2F:2C:DF:A9:23:F8:40:B4
Certificate issuer:       /CN=e8253a5c-5822-44df-8846-56b6c0450bbe
Certificate serial:       010D0C9F4328584DD8F06461B4727467CE82D580
Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     23036
IP address blocks:        2606:d1c0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:64:61:b4:72:74:67:ce:82:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=38d91c0b-f238-4973-8d3d-4644d06b9940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:2d:11:98:3d:ba:4e:83:e7:3c:0d:53:2e:
                    d9:5c:7d:42:4c:f2:c4:49:7f:14:b2:81:86:79:38:
                    be:be:ce:f3:62:70:c1:8d:ab:a8:59:4f:1f:39:d0:
                    8d:63:fb:25:59:1f:28:c6:c3:f8:de:85:16:5f:46:
                    37:78:48:e0:43:46:f5:ab:c5:9c:c8:8d:57:56:57:
                    7c:73:0f:67:aa:ce:5f:7a:a0:6e:c9:0e:9b:81:9b:
                    70:ea:b5:95:da:ff:d1:a5:ef:ba:59:f8:63:04:bd:
                    b4:9c:eb:17:f8:b8:82:52:76:e0:f1:72:b8:9a:ed:
                    2c:7f:8d:b8:ac:64:f2:b8:7c:67:f4:43:7b:6d:86:
                    1e:db:cf:60:2e:f3:29:6e:bd:e2:a9:f7:4e:3b:6f:
                    2d:99:22:95:fa:da:e5:be:b7:09:52:0c:5b:e2:d5:
                    f6:e3:81:ac:b8:e9:f0:cb:c3:5d:25:6a:3d:ce:54:
                    94:e9:e7:7f:bf:32:f6:af:85:e7:24:67:c4:56:0a:
                    51:21:77:6c:1e:0c:a3:c9:fb:49:9c:f1:ac:b2:ea:
                    cb:33:e8:a3:50:27:46:89:1f:5f:8d:7f:0c:6f:6b:
                    e4:8a:32:d3:a7:0a:4b:56:d3:bd:33:3f:a0:32:b8:
                    43:02:d0:55:ec:26:53:fc:b1:8f:2c:fa:1d:a7:b9:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:78:BA:AE:77:AF:B4:11:E4:08:B5:2F:2C:DF:A9:23:F8:40:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/bd2f8980-4c4c-3136-a65b-5108f8aa4e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl

            X509v3 Authority Key Identifier:
                keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d1c0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:20:b2:49:82:f6:8f:d9:ae:fb:0a:ad:a4:b6:32:8d:81:
         91:57:9d:f2:12:ad:8f:ce:cd:5e:1a:49:e0:c0:61:3b:52:bd:
         52:da:6b:2f:8b:dd:ba:b0:f5:00:f1:a1:48:d7:a8:74:81:cc:
         1d:54:c2:43:6f:c0:99:9d:91:54:f2:b7:6e:3d:62:c2:d2:a1:
         82:fe:11:28:dc:44:80:73:76:71:28:18:c0:f1:f9:e1:9a:a7:
         6e:eb:09:6c:bc:18:9a:6c:54:b3:07:19:42:9d:d9:92:e1:c9:
         1b:b8:91:dd:2c:d4:43:91:9b:9e:0e:01:8c:09:69:99:e6:9e:
         53:88:36:55:dc:16:92:87:e4:0c:0c:48:7f:69:2b:7a:a7:eb:
         b0:da:4f:30:dc:f2:b7:c9:4e:fd:73:67:f3:f7:ef:17:f1:e9:
         54:9e:11:a8:c1:8d:c8:08:30:19:3e:66:c0:93:d5:30:47:c8:
         3a:a1:2a:29:55:e0:cd:75:78:a9:52:18:fc:c7:25:fe:f8:97:
         01:63:26:25:05:eb:7b:69:ac:5a:90:29:b2:fe:33:8a:bb:02:
         a1:da:3a:9d:18:a9:1b:ca:02:12:4a:dc:15:80:b0:36:2c:de:
         6b:c2:13:f8:0d:5b:46:d2:09:4f:ab:b1:a3:22:16:3e:b1:07:
         8c:5c:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:28:14 2026 by rpki-client