Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/37688526-9f75-3ce0-bac2-ee8bac7d9cf0.roa
File:                     37688526-9f75-3ce0-bac2-ee8bac7d9cf0.roa (raw, json)
Hash identifier:          Q35fck1o364nfhX6tLq1jKkjZm8Q1ZumVSZLZfEzrAU=
Subject key identifier:   F0:A2:C8:94:1B:44:74:2F:CA:96:A2:61:22:86:ED:7C:14:45:AA:C0
Certificate issuer:       /CN=31fac4cc-3a65-47b9-af79-9162c3f661fa
Certificate serial:       010D0C9F4328584DF9912D5A0AB65166AA646200
Authority key identifier: 58:E4:28:BD:5F:8B:80:8C:66:52:63:0B:BC:0C:E6:DF:8E:0C:DF:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/37688526-9f75-3ce0-bac2-ee8bac7d9cf0.roa
Signing time:             Wed 27 May 2026 17:30:22 +0000
ROA not before:           Wed 27 May 2026 17:30:22 +0000
ROA not after:            Tue 25 Aug 2026 17:30:22 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e510::/44 maxlen: 44
                          2602:fc3b:e520::/44 maxlen: 44
                          2602:fc3b:e530::/44 maxlen: 44
                          2602:fc3b:e540::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/31fac4cc-3a65-47b9-af79-9162c3f661fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/31fac4cc-3a65-47b9-af79-9162c3f661fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:91:2d:5a:0a:b6:51:66:aa:64:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fac4cc-3a65-47b9-af79-9162c3f661fa
        Validity
            Not Before: May 27 17:30:22 2026 GMT
            Not After : Aug 25 17:30:22 2026 GMT
        Subject: CN=873999b7-79fb-4f09-896c-40ed0b661c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:ee:e4:e0:3f:f5:8f:d8:05:28:12:d4:0b:
                    aa:d6:fe:26:6a:3b:17:1f:f2:ca:95:93:e7:04:76:
                    b7:a4:f8:21:bf:68:22:36:4c:39:94:db:07:1d:e1:
                    1a:e6:5a:1a:c8:f9:65:71:26:32:47:e6:1c:be:fc:
                    27:c2:4b:29:60:52:14:31:e1:c6:4b:bb:cf:79:85:
                    a1:6c:ba:36:68:cd:47:13:a4:5f:b6:08:af:f3:35:
                    f0:36:09:be:1f:68:36:03:bb:ee:05:a6:3d:fd:ae:
                    8e:3f:e2:1f:47:5d:b5:55:d9:39:10:93:f5:70:f7:
                    de:fa:88:cc:03:6e:10:ab:43:4e:32:e2:12:d5:c6:
                    e5:c5:8f:a9:3a:ae:06:06:b8:26:1b:bc:d1:34:16:
                    3e:d4:a5:67:10:69:b0:3c:a6:c5:d4:73:05:8a:38:
                    7b:3b:97:ee:bc:06:c3:03:be:ee:a2:56:28:8e:06:
                    12:65:b9:45:eb:40:75:72:92:13:14:ff:c7:74:d1:
                    dc:7a:34:4e:25:c6:e8:f2:3d:8f:11:cd:0d:20:88:
                    c2:49:4f:39:4b:ff:fc:2c:c7:f1:1f:a2:bc:9d:6a:
                    74:34:62:9c:b3:d3:a0:c2:89:e6:91:00:ff:79:5b:
                    7f:36:da:12:26:ae:eb:8a:5d:10:62:23:8c:f5:8f:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:C8:94:1B:44:74:2F:CA:96:A2:61:22:86:ED:7C:14:45:AA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/37688526-9f75-3ce0-bac2-ee8bac7d9cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/31fac4cc-3a65-47b9-af79-9162c3f661fa.crl

            X509v3 Authority Key Identifier:
                keyid:58:E4:28:BD:5F:8B:80:8C:66:52:63:0B:BC:0C:E6:DF:8E:0C:DF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e510::-2602:fc3b:e54f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:2c:56:88:9e:49:d9:80:9a:14:e8:21:e5:b7:44:bd:9a:ab:
         e7:1e:57:83:27:f6:31:f1:6c:a3:53:18:4e:30:41:91:da:4b:
         28:1c:78:88:0a:f0:24:59:6a:eb:9d:0b:04:c4:0d:3f:ae:ea:
         58:0f:88:b8:1e:c1:ee:f3:81:ac:c3:a2:77:69:77:ac:3a:9e:
         39:51:a9:4c:02:44:77:34:1d:d3:16:b1:97:4a:96:ed:06:be:
         5c:b6:60:5a:d8:f5:fc:d1:ef:95:4d:bf:02:96:2f:09:cd:8a:
         18:90:44:fc:23:0b:c9:f0:6a:7e:79:2d:b0:41:83:12:6e:63:
         59:73:e5:a4:23:9d:ba:ee:ba:5c:4c:78:ed:c5:93:c7:83:ce:
         5a:09:5e:49:0c:e6:15:db:6a:22:07:55:76:84:3a:07:9c:cf:
         f6:83:47:b2:b5:56:aa:2b:09:c9:c4:b5:40:aa:ef:32:83:37:
         08:96:31:13:71:ca:ab:49:b3:fd:ad:98:2e:85:6f:43:42:01:
         77:d5:02:02:86:02:a0:db:3a:ec:77:72:1b:47:f7:ba:08:a7:
         87:86:31:aa:58:fe:b3:57:bd:32:f3:a2:85:ed:42:c9:6e:6b:
         69:11:ab:2f:f7:24:99:64:56:e4:58:c5:2c:a6:50:ba:64:d5:
         91:d2:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 22:40:39 2026 by rpki-client