Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/021d487d-15a4-3e8f-9359-38b62ee33f0a.roa
File:                     021d487d-15a4-3e8f-9359-38b62ee33f0a.roa (raw, json)
Hash identifier:          y6HNoEKvs8YVEUVANI3KPYADsafxKwvvPCadRf8V6hU=
Subject key identifier:   F2:AB:1A:9E:EA:98:8A:E0:0C:19:9A:F7:63:9F:CF:FF:71:A4:0E:67
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584D67DFFBDF8787A2BD7394CEC0
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/021d487d-15a4-3e8f-9359-38b62ee33f0a.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     399870
IP address blocks:        2602:f7a5:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:fb:df:87:87:a2:bd:73:94:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=08447a6b-c526-4a0c-9774-d7695af05ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:1d:3b:17:c8:e1:2e:25:5a:9d:a1:b7:04:
                    27:1e:98:85:79:a0:c3:48:69:ad:93:23:c2:a1:22:
                    a9:d9:ec:bf:e0:f7:9e:40:a6:9f:82:e1:4b:fd:55:
                    cd:58:ad:c0:2a:48:75:c4:18:d6:e7:89:61:84:e6:
                    1b:70:bb:b2:33:db:35:4f:4e:99:0f:95:a1:d7:27:
                    f6:df:ed:c3:32:65:d4:48:a2:b1:e1:92:14:4a:c8:
                    7f:58:35:c5:57:11:1f:1b:ce:39:9a:88:7a:c6:50:
                    bf:b0:7f:69:c7:40:91:37:ec:80:c2:dd:77:6c:71:
                    70:af:c4:56:c7:08:ef:b8:85:c1:1e:84:47:8d:53:
                    d2:bc:53:0a:40:9a:3d:b9:3a:a2:b0:81:2e:00:d2:
                    b8:34:95:d3:76:f9:ba:8b:b3:40:7f:cb:e0:66:a0:
                    13:9d:d0:fe:56:c7:34:0f:c1:be:3c:75:35:7f:6a:
                    80:16:c9:a4:ca:bb:88:eb:fc:cf:33:99:7b:7e:6a:
                    7f:96:ea:25:45:ec:de:af:2c:fc:3f:7a:52:3e:6e:
                    01:76:48:60:8d:71:06:a1:29:9f:af:e7:fa:b8:19:
                    1b:97:7d:59:88:a6:25:2f:33:25:e1:31:9c:c5:6d:
                    69:36:73:27:69:d1:a3:cf:40:87:75:70:95:8f:51:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AB:1A:9E:EA:98:8A:E0:0C:19:9A:F7:63:9F:CF:FF:71:A4:0E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/021d487d-15a4-3e8f-9359-38b62ee33f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ac:c6:ce:5d:16:b6:50:d7:5b:e1:67:b5:4e:26:1e:a4:60:
         55:a2:66:9c:6e:cd:c3:9e:5e:30:f6:77:63:cb:8d:b2:12:0f:
         5d:64:e7:ff:c3:6e:eb:39:66:e5:d2:dc:ff:55:e6:fe:d8:37:
         55:2e:c2:a9:f9:24:bf:1e:4e:78:72:d2:a2:6f:44:09:50:09:
         bb:26:fc:80:1a:d6:b4:6d:ce:1b:40:f7:56:de:f3:a9:ed:55:
         4b:77:08:59:6c:b9:7f:0c:96:f3:d8:44:a2:8a:be:7f:9c:27:
         96:4b:a6:3c:68:bf:a5:c0:b8:ba:1a:cc:88:83:a8:a7:11:b1:
         e0:1f:d9:b1:8e:9c:94:1a:e2:a4:6a:e8:54:6f:dd:ec:27:ca:
         59:45:e8:80:a4:a2:0f:d4:7f:27:97:46:f1:09:5b:f2:e4:a2:
         47:42:d9:04:bc:2a:47:78:45:5c:2d:c4:d0:81:31:cd:e3:de:
         01:8b:59:c5:02:58:fb:cd:b8:b3:1b:d0:a5:f3:a3:d6:db:14:
         8a:f5:54:36:f0:9f:31:09:dc:00:19:19:81:e4:b8:b8:b0:6e:
         35:1e:48:77:d4:d4:c8:56:3c:3c:b8:d4:03:ae:e1:8d:f7:0f:
         aa:a2:36:0a:2e:b6:81:ad:f5:99:d3:7a:b2:c2:6a:0d:b4:92:
         8a:8d:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:30:49 2026 by rpki-client