Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa
File:                     43aa77de-9b48-39e6-802d-8a9a94c7551e.roa (raw, json)
Hash identifier:          EmWFXxDteMpCVHfTeWY9d0PPvTicxr8zgj5Y7KOJcgc=
Subject key identifier:   AB:AA:5B:49:11:99:9B:D2:62:06:73:3D:0F:20:DF:D7:59:E8:09:21
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584DD625B9D156A66F70FE8D1F80
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:815:3003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b9:d1:56:a6:6f:70:fe:8d:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=af57d155-9144-493d-bdb0-1c78f582d8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:7e:96:5b:9f:25:fa:30:8a:8e:5c:67:f5:
                    db:e9:e5:f7:04:48:7a:59:37:d6:89:67:a5:d5:17:
                    f6:b9:d1:ae:83:98:40:d8:3d:8d:43:72:07:f1:fc:
                    f1:35:63:86:53:22:f9:1e:e6:a0:8a:e8:9b:e2:3f:
                    bb:bf:00:bf:b4:4f:88:5a:ee:1a:0a:15:09:33:05:
                    96:45:80:e8:93:12:b3:4f:98:c6:80:02:26:88:d4:
                    01:cd:d6:45:ad:21:e3:8a:ff:0c:56:d8:8f:49:1b:
                    cf:da:08:d2:71:1a:b1:16:f6:33:97:a3:95:55:e3:
                    c9:74:cc:41:85:0f:60:e4:32:84:2d:a6:3c:5d:c9:
                    ae:ac:1f:f9:94:f1:7a:1c:5a:ac:80:94:1b:51:01:
                    d9:64:fc:45:b9:1a:13:81:11:45:55:46:f0:bf:88:
                    cd:ab:c2:8c:c8:ad:23:c2:42:d5:34:c8:55:8c:92:
                    6f:27:78:70:70:af:b2:1f:1b:e1:d1:c0:b4:b1:58:
                    40:63:e1:9d:91:fa:b6:78:e9:7f:26:7f:51:bd:2b:
                    83:1b:53:1f:8e:83:57:8c:1f:01:62:8e:2c:73:8f:
                    f4:7a:9e:da:a4:7e:8b:a4:52:d3:f4:7d:6c:0b:e2:
                    1d:a9:9d:53:d1:90:ea:ab:42:a1:a6:8a:c4:22:5e:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:5B:49:11:99:9B:D2:62:06:73:3D:0F:20:DF:D7:59:E8:09:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5e:6b:f6:d1:83:f4:9e:8b:ce:ea:9d:dc:23:d5:94:63:e0:
         6a:3f:c1:3e:62:11:db:d7:36:68:8d:37:9a:f6:01:c7:9a:24:
         ac:9a:1a:9c:3a:75:a9:ca:6d:f3:fd:22:9b:a3:98:06:8e:20:
         8b:40:2e:23:d8:7a:62:5a:81:2a:d2:fb:95:67:b0:e8:4f:b7:
         0e:d4:52:64:4d:0f:6d:09:77:b9:88:07:72:26:5d:84:8c:38:
         8d:ea:fd:b7:f2:df:79:73:2e:3b:fb:45:2b:11:2d:69:23:15:
         2a:6d:42:f6:01:cb:0c:73:69:2c:6a:d3:cf:db:84:d9:be:8b:
         1d:c8:81:6b:56:2b:5a:8c:8a:68:1f:bf:75:e0:5d:11:a4:8c:
         ba:1d:71:eb:cb:d9:89:0f:56:5b:41:49:2b:7d:bb:d9:63:56:
         cd:6b:21:5a:d1:d8:87:66:e7:01:ea:01:71:e2:38:0f:60:fc:
         c0:fd:f3:a2:4e:70:6b:53:8e:e2:fb:89:ea:f1:66:c7:87:72:
         d4:9b:bc:94:8f:75:b8:75:53:30:e8:4d:9d:1a:8e:19:14:83:
         27:0f:3f:0d:d5:35:1b:71:87:67:5b:7c:4c:ec:2f:00:93:e8:
         f5:1f:72:68:bc:af:e1:48:89:12:27:d7:56:81:0b:f0:da:39:
         5c:83:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:35:01 2026 by rpki-client