Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/0a3683b6-8e35-33cf-96d8-c23e21ea6d4f.roa
File:                     0a3683b6-8e35-33cf-96d8-c23e21ea6d4f.roa (raw, json)
Hash identifier:          G43vCJ0SzmB7W9pyw/I96tIdW2bQrCoAUJCzkeWXxio=
Subject key identifier:   0B:41:34:A2:B4:4C:C9:93:7E:81:84:14:29:8C:D0:60:79:1C:38:0B
Certificate issuer:       /CN=3d677108-5bec-47ac-8782-e1b85707e0dd
Certificate serial:       010D0C9F4328584DF53FD2D19AC806AF9C2A4A90
Authority key identifier: C3:96:08:F5:A0:63:43:E1:0D:84:7B:50:F8:8D:D5:4E:31:23:1B:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/0a3683b6-8e35-33cf-96d8-c23e21ea6d4f.roa
Signing time:             Tue 26 May 2026 04:23:13 +0000
ROA not before:           Tue 26 May 2026 04:23:13 +0000
ROA not after:            Mon 24 Aug 2026 04:23:13 +0000
asID:                     402537
IP address blocks:        2602:f3b5:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/3d677108-5bec-47ac-8782-e1b85707e0dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/3d677108-5bec-47ac-8782-e1b85707e0dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f5:3f:d2:d1:9a:c8:06:af:9c:2a:4a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d677108-5bec-47ac-8782-e1b85707e0dd
        Validity
            Not Before: May 26 04:23:13 2026 GMT
            Not After : Aug 24 04:23:13 2026 GMT
        Subject: CN=a98dbae6-3b5d-459c-9b4b-90917dd3d989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:9f:97:d3:77:ee:b6:b6:bf:35:e6:2e:1e:
                    0c:b8:60:d0:5d:36:28:ca:0d:29:1e:05:b4:c4:d6:
                    dd:0f:c2:96:75:ca:4c:05:44:85:dc:34:35:4c:11:
                    e7:53:24:66:3a:56:d2:d6:c4:a4:dd:65:61:ad:05:
                    6c:e2:8e:e4:19:4f:bd:6e:36:f3:99:61:87:db:f5:
                    1e:f0:16:39:45:05:a6:4b:3e:24:6b:f7:e3:cb:08:
                    61:b4:79:fb:0e:25:be:77:88:ce:84:06:dd:a3:a1:
                    c9:70:0e:eb:7c:62:26:eb:17:62:59:57:30:71:fe:
                    d7:6e:44:cf:e8:cc:74:9d:a3:11:22:c6:57:18:d9:
                    e8:da:91:2c:4a:02:01:74:28:b5:f0:aa:49:a2:9e:
                    28:cf:a7:ba:1b:1a:9f:be:cf:dc:4a:f9:49:f9:4e:
                    bc:ce:2f:20:de:d7:3a:8b:ef:e3:be:78:88:cc:ad:
                    27:f2:61:7e:88:19:2f:c1:38:18:6c:10:1d:b0:c6:
                    27:3d:60:81:73:7b:a7:8a:94:c9:21:23:91:0e:98:
                    31:f6:17:1c:7a:86:8f:c1:a1:47:e7:4b:e5:ef:29:
                    63:66:a9:89:8d:f9:b1:a0:29:1a:c3:d0:5b:2d:f3:
                    89:b5:8e:f5:ea:62:a9:69:0b:f1:aa:44:87:71:2e:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:41:34:A2:B4:4C:C9:93:7E:81:84:14:29:8C:D0:60:79:1C:38:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/0a3683b6-8e35-33cf-96d8-c23e21ea6d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/3d677108-5bec-47ac-8782-e1b85707e0dd.crl

            X509v3 Authority Key Identifier:
                keyid:C3:96:08:F5:A0:63:43:E1:0D:84:7B:50:F8:8D:D5:4E:31:23:1B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3b5:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:88:64:3f:36:54:2d:82:b9:01:53:24:6b:7c:70:d6:d6:
         15:eb:dd:55:77:22:cb:9e:4e:6f:84:a8:3a:e5:ba:29:39:7a:
         0a:6a:2e:2c:e2:ad:d2:02:b8:f2:88:91:26:6a:9c:40:23:c7:
         06:2f:fb:dc:07:c1:23:94:19:e5:cc:2c:24:db:27:3e:c3:33:
         a8:fc:e6:56:13:1a:3b:2b:e2:22:25:60:b6:ac:ac:8c:1d:62:
         5c:a7:f0:d5:ac:a1:1b:55:68:60:27:cf:27:c6:45:29:cb:e8:
         18:0e:40:2d:5c:9b:e1:be:4c:58:3b:95:ee:b1:42:21:cd:19:
         75:05:2d:ed:6e:68:c5:65:9e:fa:48:53:e6:0d:85:4b:87:0c:
         8d:9f:b4:ca:ec:b1:d4:38:fb:b8:6f:d4:7b:fb:f1:90:c6:4e:
         48:7d:c0:2c:0a:d8:f9:f2:9a:b4:7f:37:cc:61:b6:ab:43:a8:
         2b:52:0d:ec:19:ba:50:22:5a:d9:d0:ab:d2:a8:11:68:a0:2c:
         8c:50:31:db:a5:33:1f:60:81:74:79:79:01:0e:4a:52:4a:92:
         36:9a:41:e4:62:94:bd:91:92:4f:49:4b:ff:4d:05:ae:8d:58:
         b6:01:41:f1:cd:b3:38:3a:7c:f7:15:82:30:67:be:51:53:d7:
         dd:75:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:34 2026 by rpki-client