Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
File:                     cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json)
Hash identifier:          6jDxk23xN90YW61oqd2NQGREjeIdhdwp/wMtfAvvlZU=
Subject key identifier:   30:5C:4F:BE:E1:69:80:40:64:33:D8:B7:C1:AE:18:E1:99:7C:AE:EA
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584DD625B17B1A552D83833D8A00
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     32604
IP address blocks:        2602:fa9c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b1:7b:1a:55:2d:83:83:3d:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=51b91ddc-d1d7-47ca-ba5a-40290d3e2d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:94:3a:13:66:1f:11:35:0c:8a:67:98:dc:
                    c0:73:9b:71:38:65:d6:f1:02:a7:79:a4:84:77:ee:
                    bb:6f:e5:1c:83:c0:b0:49:22:9e:a6:d8:5f:97:92:
                    88:d6:d9:1b:8c:da:c3:39:8f:5e:19:a2:6b:47:c7:
                    02:fe:ce:f5:ec:f7:e2:ec:30:de:f2:6b:0d:f9:22:
                    9b:ad:62:7c:5e:af:1f:f3:5a:86:20:73:26:52:8f:
                    df:41:37:04:29:e7:0b:37:31:0a:e3:ab:75:e2:d3:
                    2b:55:47:9c:30:27:45:49:4a:57:25:e5:80:bd:59:
                    b1:f5:be:47:1b:73:77:7d:52:0e:6b:72:0c:8b:5c:
                    39:d7:f3:29:be:cd:fc:0b:2a:55:62:c8:5b:84:5b:
                    39:4f:2a:83:c9:02:e0:cc:49:f2:6c:d2:96:82:7b:
                    eb:96:5f:4a:ed:2e:d0:42:b2:f8:d5:ec:32:50:64:
                    c7:5c:70:ae:c9:5c:c4:ad:42:bf:db:8e:67:74:6c:
                    97:10:43:74:a9:01:f6:25:c1:98:43:5d:59:68:2d:
                    92:b5:0c:5f:44:4c:16:87:f1:bb:e4:72:cf:21:37:
                    a6:2c:49:92:b9:44:84:12:d1:85:2e:f3:70:0b:ae:
                    d9:87:37:fb:60:23:32:d3:e4:d0:ec:a0:f9:2d:bc:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:4F:BE:E1:69:80:40:64:33:D8:B7:C1:AE:18:E1:99:7C:AE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:98:2b:54:39:a6:cb:ea:9c:6c:23:1d:cb:ed:60:5a:3f:ba:
         c0:60:f3:4d:f3:d1:6e:f2:1d:07:30:32:4c:f0:c6:93:73:9d:
         4f:5b:88:3a:0d:33:84:76:5f:a8:42:c3:af:8a:3f:68:cc:70:
         de:16:0f:10:06:7b:86:58:3d:2b:32:e3:0f:7c:5a:18:41:54:
         82:6a:c7:b0:31:7b:ba:5f:39:95:73:21:e3:90:88:b1:d7:cc:
         a6:6a:33:44:31:0f:85:f2:31:07:7a:67:40:46:b6:28:ea:9d:
         fd:8c:b9:b1:0d:90:b0:74:b5:93:f4:f0:2e:86:07:1f:02:03:
         22:e4:e6:84:48:a1:a6:0f:2a:2a:1c:22:4e:6b:1c:ae:c5:a1:
         ff:a5:76:9c:99:6a:b1:86:a6:94:19:df:49:d4:e7:2f:02:71:
         f1:85:58:26:09:8e:7d:c1:7c:08:90:be:24:46:6e:1a:3a:6f:
         1d:c4:c4:ea:21:f5:20:5a:70:95:4a:0e:fd:3b:1f:57:ec:cd:
         24:70:b2:3a:8f:cb:e8:e2:da:56:46:4f:6c:59:15:ec:27:01:
         07:3c:f7:7a:95:f3:34:01:b6:4f:9e:10:50:74:df:b7:54:ad:
         54:2a:02:c1:df:1d:e0:02:7e:55:61:11:ab:5e:d3:fd:ad:20:
         df:28:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 16:05:40 2026 by rpki-client