Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa
File:                     2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa (raw, json)
Hash identifier:          ZpcI305My8W+ozQnX1oWrpn9k5XhVrj/SmouEvxaH7A=
Subject key identifier:   66:45:38:89:9B:66:82:40:E8:29:FA:F9:0F:F2:C3:31:59:2F:ED:2A
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F4328584D9A20181163DCA24D67492128
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     393227
IP address blocks:        2604:7300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:18:11:63:dc:a2:4d:67:49:21:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=90fd8aa2-7eb3-4afc-93ea-787202582e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:da:db:e8:9d:5d:b8:72:42:fb:fc:b9:e0:
                    a0:93:95:11:7e:59:e7:8b:47:12:9c:ba:2c:ec:aa:
                    9e:5f:c3:36:13:0e:87:d8:b3:82:ef:9a:5f:1f:72:
                    1b:40:63:35:50:2c:e1:c8:07:4d:19:83:e5:69:09:
                    e7:f6:d0:12:37:5c:72:5b:2c:67:dd:9c:da:11:6f:
                    72:86:f1:4b:72:e9:77:4c:61:15:b9:e5:86:cb:c5:
                    43:c6:e7:0a:f0:66:19:aa:02:7c:78:0b:a2:dc:ee:
                    5c:03:bd:fa:be:6c:87:4a:22:ee:c8:23:21:b4:52:
                    d9:6d:1e:54:d3:3e:81:92:c2:d0:c3:be:64:93:4e:
                    ed:f4:c1:77:26:34:a6:e4:8b:3c:4b:7c:6c:e5:b9:
                    61:9c:b2:05:38:e9:ef:f7:dc:5f:d1:b8:57:05:97:
                    c9:a8:47:70:d3:d9:f3:96:cb:c3:1f:a9:8e:ed:4a:
                    0a:87:e2:eb:3d:ba:5d:e0:0d:f3:1f:f4:66:5e:3e:
                    21:25:7b:aa:8b:57:88:b7:5c:66:61:e7:72:72:16:
                    6a:1d:65:a9:2e:4a:11:09:79:fe:d6:ee:8c:7b:2b:
                    3a:be:4d:b4:fb:92:7d:4e:27:a7:cd:28:ad:78:27:
                    c5:5d:05:4e:31:b9:9c:fb:1b:8f:66:11:7b:03:74:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:45:38:89:9B:66:82:40:E8:29:FA:F9:0F:F2:C3:31:59:2F:ED:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:ee:ba:ba:f4:27:b1:16:4a:8e:ad:c4:5b:b3:d4:80:bd:34:
         c9:9c:3e:44:b2:c4:12:49:91:bc:b0:19:1b:9b:a1:de:bd:3f:
         a1:29:eb:a7:1b:c3:ef:94:dd:39:a1:be:2f:11:f2:00:47:15:
         3b:8a:4e:30:ef:7d:cb:4b:59:89:dd:90:8d:a1:8d:b4:03:5e:
         bc:fd:75:8d:85:a2:3d:77:5d:20:f7:82:c5:01:17:f3:d8:9f:
         bc:57:0f:6f:43:cb:bd:2d:7b:9e:34:75:ad:dc:f5:a8:9c:f1:
         af:18:30:0a:cf:ef:fc:e7:69:ba:a1:44:c0:3c:d2:9b:60:d9:
         21:14:53:fd:17:1f:5c:98:e3:a6:6f:63:28:86:f5:16:8f:e9:
         8a:04:ad:50:90:d9:92:70:e1:52:df:2b:a5:e4:aa:0f:9d:c8:
         b1:65:85:5c:ed:05:7d:c3:70:3b:4c:15:28:26:56:37:fd:42:
         b8:1f:8c:53:a2:02:fc:f7:42:4e:b0:23:55:67:fd:c3:4f:d5:
         05:4c:a4:7e:fa:54:8a:57:a7:f2:d2:82:f1:e6:17:0f:62:7d:
         9a:7b:59:52:6d:02:9f:46:fe:35:79:68:35:bb:49:f8:9f:37:
         9c:7f:f5:2c:68:3b:9d:43:3b:0a:e9:b4:3f:40:04:4a:a0:2a:
         bb:1a:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:28 2026 by rpki-client