Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/361564d0-5b63-32d7-8a34-2f98d61ab1a0.roa
File:                     361564d0-5b63-32d7-8a34-2f98d61ab1a0.roa (raw, json)
Hash identifier:          B9rN/82uHVt8nanjWotXZMT8DoZd4DF6hEF3Nz68V04=
Subject key identifier:   8C:40:F2:41:47:6B:D2:AF:81:09:55:4E:53:28:2A:38:03:30:6A:5C
Certificate issuer:       /CN=855273ae-c64b-4ba7-b8f8-0ba6b82fe531
Certificate serial:       010D0C9F4328584D9500F16C8F946044EBEFAC50
Authority key identifier: DA:FA:4D:64:2A:51:D5:A8:BD:56:99:D0:AE:B1:FE:4A:7D:C7:D0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/361564d0-5b63-32d7-8a34-2f98d61ab1a0.roa
Signing time:             Tue 21 Apr 2026 16:58:55 +0000
ROA not before:           Tue 21 Apr 2026 16:58:55 +0000
ROA not after:            Mon 20 Jul 2026 16:58:55 +0000
asID:                     400922
IP address blocks:        2602:2f3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:00:f1:6c:8f:94:60:44:eb:ef:ac:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855273ae-c64b-4ba7-b8f8-0ba6b82fe531
        Validity
            Not Before: Apr 21 16:58:55 2026 GMT
            Not After : Jul 20 16:58:55 2026 GMT
        Subject: CN=83853320-7d3a-4cf1-9f12-320b56b0f0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:84:be:6b:b7:fd:a6:23:28:aa:22:9b:ea:
                    84:6a:f6:46:d9:61:2f:55:b8:b2:a0:55:1b:85:c3:
                    d0:f6:24:50:13:ab:5d:5c:de:66:70:f7:da:13:07:
                    33:4e:8c:34:a4:b6:b0:d2:7d:f0:72:ab:a4:70:c4:
                    c5:41:c7:13:e8:2f:76:5a:70:3a:33:65:1e:a1:89:
                    ec:43:c9:85:99:1d:34:52:82:86:c5:bd:74:c0:4a:
                    43:cf:a8:e7:0c:8e:b3:36:53:db:78:d2:ec:6e:01:
                    43:ae:e7:bd:13:ed:b0:b7:18:4e:0a:04:cd:16:84:
                    39:82:6b:5a:c2:b6:15:7f:4f:fc:d8:9c:5e:d4:a0:
                    70:03:65:c2:98:58:4d:c1:5e:32:9a:98:70:2d:9e:
                    4f:b0:ed:48:94:e4:c1:d8:cf:da:f3:05:69:ec:1f:
                    e1:5a:39:a8:c3:7d:3a:f8:55:9f:b0:20:93:85:a3:
                    fc:f9:6c:9e:69:37:ee:af:c9:d0:46:da:44:68:2c:
                    a1:b0:30:c3:29:9c:1d:6b:0d:69:47:0c:e5:f0:eb:
                    24:96:7c:98:8f:b4:ae:9e:71:49:50:cd:bb:54:c3:
                    ff:87:42:a4:9f:81:2b:d3:c9:38:3c:df:c0:f6:dd:
                    d2:ea:07:00:65:e1:32:6b:74:dd:d3:b1:1f:59:97:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:40:F2:41:47:6B:D2:AF:81:09:55:4E:53:28:2A:38:03:30:6A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/361564d0-5b63-32d7-8a34-2f98d61ab1a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.crl

            X509v3 Authority Key Identifier:
                keyid:DA:FA:4D:64:2A:51:D5:A8:BD:56:99:D0:AE:B1:FE:4A:7D:C7:D0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2f3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:9e:77:b1:e9:aa:3c:c8:6a:3b:28:d6:51:62:51:5f:b8:
         41:4b:67:68:17:9d:62:0c:6c:ee:8b:ea:f8:87:62:7e:d8:d4:
         4d:bb:e5:07:cd:e5:1c:e9:11:f9:88:73:ba:bf:8c:3b:73:05:
         ea:f6:9b:57:ea:38:e8:50:7f:5f:12:13:89:e5:52:4f:25:e9:
         93:56:8c:f0:2d:4b:f2:e5:98:88:4a:4a:8e:b3:1f:e0:72:eb:
         67:7f:8d:34:14:32:28:0b:50:68:28:03:6e:10:86:73:2c:36:
         67:6e:9c:dc:db:1b:ea:37:44:be:f5:93:ad:b7:39:3a:c5:0d:
         c3:68:22:f3:15:2b:88:5c:55:0d:d6:42:87:9a:e0:fa:3e:b8:
         74:05:9b:52:7e:f4:a7:1b:04:9b:b1:e9:a6:1a:01:11:1b:65:
         80:ad:4e:88:b6:52:f6:b5:d4:5a:2d:f6:a7:af:ba:9f:81:67:
         55:0b:c4:b3:52:1c:ff:38:aa:99:19:83:1f:fc:8c:03:e8:6d:
         4d:e9:b2:e6:69:0d:e3:5f:0a:c8:08:bc:06:19:50:7d:aa:d0:
         42:b4:74:a1:1e:c0:ea:05:bc:9d:96:f1:af:a0:f4:82:ad:6a:
         22:ef:da:30:08:e1:e4:28:57:5d:af:b1:0e:ea:40:85:57:2f:
         e9:e6:a4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:18:55 2026 by rpki-client