Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/a4a3d592-1985-30a2-b5ba-221fab12381f.roa
File:                     a4a3d592-1985-30a2-b5ba-221fab12381f.roa (raw, json)
Hash identifier:          Mi6gaQlwm4OI02sIQ9lbk39S1xhEFnMQIK3su6BGd38=
Subject key identifier:   B6:ED:01:79:38:3E:37:65:F4:AC:5E:9F:A2:F8:2C:C6:42:87:75:0C
Certificate issuer:       /CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f
Certificate serial:       010D0C9F4328584DF708859482954449984FB300
Authority key identifier: E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/a4a3d592-1985-30a2-b5ba-221fab12381f.roa
Signing time:             Tue 26 May 2026 19:43:24 +0000
ROA not before:           Tue 26 May 2026 19:43:24 +0000
ROA not after:            Mon 24 Aug 2026 19:43:24 +0000
asID:                     397170
IP address blocks:        2602:f6bc:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:08:85:94:82:95:44:49:98:4f:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f
        Validity
            Not Before: May 26 19:43:24 2026 GMT
            Not After : Aug 24 19:43:24 2026 GMT
        Subject: CN=572ad469-b02a-4a6a-9d59-b1803aebf35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:4d:58:40:35:d9:21:39:7b:0d:65:af:a3:
                    ed:e6:8e:09:a3:37:4a:d5:e3:d4:30:67:a9:44:d5:
                    2e:6c:89:63:b0:bd:b4:84:48:cd:e9:c7:19:6b:05:
                    67:28:b9:b5:38:24:ca:83:9d:b9:c2:c6:28:38:d3:
                    71:12:de:24:9b:d0:22:b1:d1:1f:c9:f9:e7:c3:28:
                    f5:ee:41:f5:b2:b1:b5:59:87:dc:4d:7e:a9:b0:9c:
                    31:e6:0f:95:9b:11:67:e8:83:01:7b:f7:4a:de:98:
                    53:00:b3:8a:00:70:83:56:ba:91:5a:d2:9a:69:57:
                    47:94:a0:9c:3b:e9:10:d1:af:27:ac:c6:db:a4:6e:
                    d8:cf:17:bd:13:04:a5:f7:82:a4:91:49:c6:2e:83:
                    68:00:51:b5:bb:92:30:4b:9e:89:b1:aa:d9:0c:d1:
                    f1:3e:f0:42:e0:99:ac:a4:76:12:58:2b:57:18:fb:
                    c1:6c:af:3e:96:71:d3:7c:1f:e4:0a:8a:34:cc:db:
                    1f:02:33:ae:9b:eb:bd:87:b4:7d:25:0b:7e:4b:3f:
                    e5:80:db:a4:e3:c1:07:9a:fb:24:11:36:a3:1e:7e:
                    40:94:dd:4f:e2:bb:15:f4:a1:82:6d:a0:8a:49:3a:
                    60:c1:48:e0:af:61:1d:ff:9b:6b:87:63:ba:5b:4c:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:01:79:38:3E:37:65:F4:AC:5E:9F:A2:F8:2C:C6:42:87:75:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/a4a3d592-1985-30a2-b5ba-221fab12381f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl

            X509v3 Authority Key Identifier:
                keyid:E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6bc:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:5b:d2:1a:ab:06:29:83:88:40:3a:0d:58:3b:c5:f5:6d:
         66:08:95:d3:80:27:aa:a5:a0:49:b1:b7:75:ba:52:43:ef:f2:
         ec:3d:1f:d8:3f:1e:21:a8:d0:3b:ad:f7:e6:a3:49:9a:ea:1c:
         9f:d9:24:5d:e4:dd:c6:a2:51:23:83:f6:0a:70:e7:df:e4:0d:
         cf:10:b1:ac:9b:e8:55:c7:29:bd:45:fb:9f:71:64:a2:fa:b0:
         2f:17:57:72:dc:33:a6:08:54:35:28:d5:3f:58:7f:d0:b5:ea:
         cc:15:05:c8:3c:2e:fd:78:fc:e0:b0:fb:1c:b0:f6:ff:9a:ca:
         4c:4d:c8:f0:1b:ab:71:0b:ad:53:8e:b1:ab:84:52:15:5e:e3:
         c5:e7:79:a5:9f:08:22:27:04:5a:d5:e7:66:6f:a2:45:8d:a5:
         a2:5b:1b:54:c8:a8:b0:f4:a9:6d:74:17:58:87:c1:0b:c0:0f:
         9b:76:ce:af:d4:e4:2b:06:5b:75:62:e2:07:0c:93:78:9d:96:
         9a:3b:f2:6a:87:38:b5:81:00:10:b6:c4:20:53:44:a3:07:9f:
         01:7b:87:e5:0f:34:fa:bf:88:df:8c:15:31:a8:e0:e8:b5:9c:
         5b:91:93:83:05:36:97:8d:46:88:fd:57:03:23:c4:b6:c1:ff:
         1c:3e:32:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:01 2026 by rpki-client