Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa
File:                     22824fc2-5847-3567-bb08-05cbc0ef7a80.roa (raw, json)
Hash identifier:          qZcUkAe8Zl/1mpl9ybDtgWdjAIU1SZ6V2JUUQesCjBk=
Subject key identifier:   2E:78:98:1B:4E:C7:91:B4:D1:7A:43:7D:5D:87:59:93:3E:79:15:E2
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584DA6B024AF775E0D50D5D01B80
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2602:fa70:390::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:24:af:77:5e:0d:50:d5:d0:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=40aa35df-3de2-4078-addc-01688d6e1a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:55:33:03:2d:9d:93:df:0e:72:35:3c:8f:
                    0c:8f:a4:47:61:f1:44:3d:8a:7e:ca:27:59:13:49:
                    68:4a:ad:41:ad:dc:11:f9:03:9d:7c:b2:69:64:52:
                    cd:d0:e0:6e:45:db:95:30:59:08:fb:9a:e0:b3:85:
                    a6:d6:45:81:ff:66:0e:74:03:6b:50:6b:22:2a:7f:
                    1c:ac:2b:9e:b6:a1:d2:e3:a9:d9:49:93:df:26:62:
                    66:1b:4e:fb:93:f8:5e:e2:80:7e:bd:f9:33:e1:ab:
                    96:c0:fa:51:56:17:0d:c2:73:7f:cd:6e:93:da:ea:
                    0d:6d:a8:1c:15:22:57:1a:d9:0d:38:44:ed:84:4e:
                    05:e6:9a:d2:be:b2:03:11:32:e3:ec:a3:d5:2e:2d:
                    76:a1:75:55:7b:5e:70:db:0e:fd:4c:96:49:15:72:
                    8d:e1:9c:41:e9:c0:d9:27:2b:14:66:c5:75:fa:2e:
                    4a:b4:1b:1b:f6:d3:b8:1b:42:70:a1:96:98:ab:a6:
                    60:31:a9:43:72:e7:40:62:45:a5:71:a8:18:fb:06:
                    f6:e5:9d:de:35:eb:a8:12:fc:16:a9:2c:49:dd:a0:
                    d0:e8:3e:5e:a0:7f:07:70:54:7b:91:43:7a:68:0f:
                    86:8b:ee:97:d0:7f:49:03:00:52:97:7d:1e:b7:68:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:78:98:1B:4E:C7:91:B4:D1:7A:43:7D:5D:87:59:93:3E:79:15:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70:390::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ff:56:2c:8f:93:07:88:48:97:e0:54:79:6f:e5:4b:5b:0c:
         cc:ad:b3:9f:99:cc:08:17:95:4e:02:c8:ca:6b:3f:13:1c:52:
         0a:bc:8c:c0:19:0e:78:85:33:66:16:78:6c:ba:ee:5a:f4:eb:
         35:1e:09:e7:47:10:2f:6d:55:c5:fa:fc:c2:8d:fc:fa:4d:10:
         0e:ee:2e:06:40:b4:2a:5b:5e:a7:79:c0:a5:1d:49:a8:a1:b3:
         2f:b8:0c:5b:49:80:2c:27:1d:5c:98:10:57:29:65:04:64:c0:
         72:c0:79:b7:ed:a9:fe:c0:9d:21:50:f3:15:b6:c6:55:be:b4:
         35:1e:36:26:3c:23:43:da:f1:49:b0:7d:04:0e:4c:73:d0:45:
         c3:bb:db:4d:61:b8:93:a9:bc:ed:bd:dc:67:f3:31:76:1a:1f:
         b6:6e:bf:18:6e:48:be:1b:b3:e1:b6:b8:e0:60:15:ce:58:6f:
         b5:19:15:e4:bf:2c:51:c1:b3:44:88:8d:55:7a:70:5b:8b:f1:
         1f:4e:7c:60:52:fd:1b:95:d6:28:6c:4b:d8:43:a5:62:41:d1:
         55:d4:37:79:d4:83:aa:e8:1f:49:5c:78:f3:21:d6:f5:fe:51:
         fa:cc:d8:24:e1:24:c2:27:c0:e5:bc:03:41:71:52:01:04:5b:
         18:26:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:03:45 2026 by rpki-client