Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa
File:                     ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa (raw, json)
Hash identifier:          t6ZuQyoa3hQ4tUQZiRHB3DROiAsZDA1fYivVRkH0+cM=
Subject key identifier:   AE:49:1A:75:F2:13:8C:41:2F:0A:53:7D:86:6B:BC:FD:6D:DA:60:FD
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F4328584D8EF566CDB62F3BB0CEC4C960
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     7721
IP address blocks:        2602:fbda:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:66:cd:b6:2f:3b:b0:ce:c4:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=75d62ff8-1651-41f6-8326-3402bb9e80b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:c9:09:1e:21:82:03:5e:59:92:03:dd:33:
                    a7:dc:d3:66:bf:de:55:ac:e5:2b:13:b4:d1:49:3d:
                    59:eb:69:b0:78:2e:ea:fb:0f:ef:a1:d2:5c:7c:bd:
                    cc:88:37:3a:67:31:aa:94:63:2d:85:15:0b:bd:ae:
                    d4:67:c7:7e:b2:ec:1e:1e:74:5a:46:d4:67:c2:55:
                    2e:dc:19:41:be:32:e5:ae:6e:af:a9:cd:b0:18:56:
                    63:b8:f8:7f:b6:b9:91:90:48:76:f4:60:cd:85:42:
                    71:31:9b:04:59:5c:da:96:0d:32:7b:d5:24:b2:78:
                    ff:99:1c:82:53:13:1e:4f:a0:78:93:63:e3:f9:64:
                    1a:16:d9:bc:a7:1f:21:83:e8:4a:a4:1b:31:cd:70:
                    43:c9:03:c4:58:90:a0:a4:d4:23:35:06:5b:56:0f:
                    b1:b1:69:7d:84:83:40:8e:d3:ef:da:13:0d:83:8b:
                    3e:36:3c:5e:82:4f:f2:97:75:70:1f:22:d1:a0:8c:
                    c1:79:7a:ac:de:97:2f:c0:2a:d1:bb:80:38:de:cd:
                    b1:89:3d:27:a1:89:b0:73:31:f0:f0:25:b6:29:cb:
                    21:96:67:2e:4c:eb:49:a8:1c:32:50:52:a8:48:1c:
                    c9:7a:13:06:26:bd:04:fe:96:a5:45:b0:68:3e:72:
                    2f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:49:1A:75:F2:13:8C:41:2F:0A:53:7D:86:6B:BC:FD:6D:DA:60:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:2c:07:b0:87:f4:df:49:25:76:26:14:cb:63:78:0a:aa:
         99:87:b6:7d:c1:27:16:24:4a:d0:a8:21:4d:84:6b:b5:ec:d4:
         62:c9:51:94:19:83:28:17:f9:a0:f5:d4:dc:f1:75:2b:92:07:
         ae:82:77:60:7b:16:84:56:6a:02:fc:d5:25:94:b6:88:ef:68:
         30:d8:4b:33:6e:17:98:4b:97:d8:54:6e:9f:06:ce:36:b8:03:
         8f:ed:a4:41:07:79:29:b2:06:78:41:f7:53:82:68:0b:8b:dd:
         f2:30:fb:2b:4a:32:aa:3d:59:ff:06:f1:51:18:28:0c:81:3d:
         38:d6:3c:d8:31:31:ab:2c:d2:89:d7:af:c5:e4:eb:0b:c1:c3:
         ef:b8:f5:04:a7:c3:ed:c2:66:be:9b:4c:cd:e8:28:17:7c:ae:
         14:2c:ac:34:4c:42:f4:9e:3a:97:52:fe:e7:7d:51:3b:6f:8e:
         00:4f:81:9a:50:79:d7:a0:24:18:b2:7e:0b:e3:1b:17:53:2d:
         76:cd:7d:e9:90:e1:30:5c:7e:0c:09:c6:79:7f:6e:2a:fb:fb:
         09:38:22:74:2d:84:48:fa:a1:d2:1f:0d:db:d0:81:53:5b:66:
         29:90:7e:10:21:65:f7:ca:d3:8c:81:00:6f:1d:11:65:77:02:
         0e:0a:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:40:18 2026 by rpki-client