Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa
File:                     5df2f2dc-f00c-33b4-a473-55bf6827f226.roa (raw, json)
Hash identifier:          QJVS2ymimlgOqV2tvz5AtpAaiR8w9CDCAGHA0uS7vas=
Subject key identifier:   EB:91:C2:72:76:C5:BE:A1:31:2C:21:DE:F2:7B:69:35:55:F9:93:40
Certificate issuer:       /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
Certificate serial:       010D0C9F4328584DD4C0802DC13A7AFB1A542780
Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     401612
IP address blocks:        2602:fb87::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:80:2d:c1:3a:7a:fb:1a:54:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=ffdf5464-811d-4ed4-83cc-e50810270685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:51:35:ff:03:67:c1:65:e0:9b:69:d2:63:
                    5b:80:d1:7a:f0:d9:17:9e:00:9f:36:66:8d:38:a3:
                    19:03:17:79:af:53:97:89:c2:c1:1f:cf:3a:f5:51:
                    5a:c7:2d:a3:b2:0a:1a:6a:68:8b:da:82:76:c3:7c:
                    66:5c:d7:48:62:83:20:f3:f7:7a:49:c3:96:34:16:
                    b9:43:4f:c6:3c:a1:ec:2b:d3:d6:1b:c3:8b:54:a0:
                    2f:29:a6:a6:be:3f:27:3d:58:32:cc:b4:fc:fe:1f:
                    d3:9c:b0:38:4a:11:51:26:4d:79:a2:1b:a2:f4:52:
                    20:55:0f:61:04:09:4b:b8:8a:58:76:b6:82:84:36:
                    b5:b7:ff:35:5f:0c:5f:16:b6:0c:f7:cb:51:b6:a7:
                    de:04:e5:58:84:72:6b:a4:e9:de:5a:1f:71:7d:ec:
                    46:60:ea:fa:63:3a:ec:4d:59:26:8d:75:ff:48:a3:
                    5d:66:5a:79:6d:a6:c9:55:79:38:86:0e:56:48:11:
                    8c:d2:4d:3f:cb:21:98:49:ab:f1:55:73:43:e6:a1:
                    dc:02:38:55:d8:26:23:b0:20:2f:47:fb:d2:64:00:
                    12:3d:17:b9:d3:f6:c5:7d:7d:9c:85:ae:2e:7b:d2:
                    7b:62:a4:11:68:7b:37:ce:15:b4:5c:28:52:bc:73:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:C2:72:76:C5:BE:A1:31:2C:21:DE:F2:7B:69:35:55:F9:93:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl

            X509v3 Authority Key Identifier:
                keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb87::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:16:e9:2a:e0:95:dc:af:a5:ed:eb:40:fc:86:fa:67:af:91:
         1b:65:a7:95:a8:38:87:1b:7a:60:13:e6:8f:e9:d0:f1:85:14:
         16:72:e1:ae:57:30:40:f4:7d:17:c0:13:4a:d4:ff:a2:d4:26:
         f9:ac:c3:5c:75:b2:32:89:cd:15:39:ef:2d:3f:4c:53:28:54:
         09:7d:43:93:52:eb:d0:4e:63:f6:c8:a6:aa:97:5d:57:52:7c:
         af:66:ea:44:ba:cc:97:f7:eb:7d:96:e3:2b:8d:02:39:37:30:
         af:8b:bd:32:66:d6:f3:f5:ec:95:8f:a4:58:03:d4:c1:11:f3:
         7d:71:a9:26:aa:23:84:75:2e:97:d3:26:4d:9d:a9:eb:c6:e9:
         55:18:09:c3:08:b2:42:1f:35:64:63:48:01:34:fa:02:c9:6b:
         a5:70:c8:56:f6:d1:94:6b:db:d2:e3:49:90:9f:d2:fd:cd:d4:
         c9:25:8f:c0:64:2d:2c:72:8f:5b:f5:96:0f:29:4d:c5:f8:02:
         67:08:d4:5c:3c:a0:29:1e:ca:90:84:2f:20:02:98:87:67:14:
         81:ad:ed:21:8d:05:d4:d9:6f:04:4a:bd:2a:95:ad:d7:53:b0:
         45:f4:0b:e3:ab:36:65:c8:eb:c0:cd:e2:17:6c:9b:55:7e:7f:
         5c:4a:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:30:43 2026 by rpki-client