Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
File:                     1e64ffdf-9888-3fb9-9826-b212648077cd.roa (raw, json)
Hash identifier:          R9fGPpzjpEtHR6BfOW/RDwOxq80/lYXvTJtuSiEc9/E=
Subject key identifier:   FC:09:67:F2:07:8D:FB:0C:BD:20:DA:3A:09:80:B0:85:77:34:09:E9
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584DE84B42A51DCE41622C5FDF00
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     21991
IP address blocks:        2602:fbcf::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:42:a5:1d:ce:41:62:2c:5f:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=ba33aa44-6579-4be1-bbe9-ca6d4d45b7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:1b:c1:34:49:69:22:2e:e7:a6:af:ff:ed:
                    d0:6f:70:ae:37:65:e9:87:ea:f0:2b:2f:2b:cc:2c:
                    08:83:3a:26:c6:78:32:74:39:c6:dc:10:e8:11:3c:
                    b4:d6:7c:81:0e:62:ef:8d:17:98:31:17:03:e1:4d:
                    9e:12:d3:47:ec:84:f8:84:1d:9b:f5:1e:4a:9f:aa:
                    35:2f:3c:ba:4a:29:d6:c8:d7:05:f1:b6:a0:ab:d7:
                    60:ce:f0:30:a4:37:bc:b6:16:0e:f5:d4:2e:0b:95:
                    8a:d1:7e:7d:d1:27:96:d5:0c:a3:98:be:de:27:2e:
                    7d:6a:06:91:1c:a5:c8:56:65:21:82:42:97:9b:41:
                    0b:f4:a1:62:5d:ba:47:91:49:27:0b:e9:90:d8:fc:
                    6b:14:0f:8f:5f:4b:a7:43:02:44:34:e8:8e:28:7d:
                    43:48:21:e5:d6:1f:e3:44:ff:f2:e5:65:82:c0:be:
                    33:eb:9f:eb:96:b0:89:dc:d2:1b:f9:f9:80:76:54:
                    6c:51:69:c6:b4:46:89:f4:9a:4f:55:4d:5d:af:cb:
                    5b:ba:90:e3:d7:c1:36:06:0f:4c:2c:80:a9:41:dc:
                    7e:a3:bd:8f:46:2b:c4:78:b7:d5:0e:29:73:e7:65:
                    ed:27:0c:8a:de:26:e7:e3:ad:f6:bf:91:97:9f:fb:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:09:67:F2:07:8D:FB:0C:BD:20:DA:3A:09:80:B0:85:77:34:09:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:e0:3a:cf:d5:be:b6:d1:f3:d8:9f:74:c9:1e:29:fa:ef:
         a8:43:f2:71:2f:48:41:ab:91:37:d0:cc:1c:33:43:54:96:cb:
         8f:7d:e3:15:e8:4d:4f:47:46:a2:f6:07:81:36:51:6a:e6:92:
         77:8b:7e:66:d2:75:c2:15:ec:a0:d7:62:13:94:4b:33:5c:e0:
         80:b3:2b:a4:7c:2d:93:9a:6b:ed:5a:95:ad:a0:6b:25:d2:bf:
         46:a2:d1:2b:73:e9:19:b1:68:26:61:0a:6a:88:d9:9f:0c:31:
         19:ab:ca:fa:7b:e6:69:c5:cb:b9:05:3a:f0:f9:33:42:82:e7:
         34:9a:d4:cb:98:86:5a:eb:0b:81:d7:bf:8c:0e:2d:1d:76:95:
         12:62:ef:b4:cb:5f:61:c2:cb:4b:05:25:38:e4:aa:c6:46:70:
         18:00:31:ff:00:c5:96:6a:6a:46:1a:c8:b9:08:c9:8a:1d:d2:
         32:c6:83:e5:ca:bb:a0:cc:04:a5:02:51:f5:b6:9a:ea:af:61:
         1e:c9:75:d4:dd:aa:34:5f:d8:ec:cd:cf:24:9a:0d:07:d6:08:
         32:b9:fd:fd:99:18:56:9b:b7:81:6c:aa:45:d9:99:99:62:07:
         39:18:cb:c3:df:c7:b1:9c:bb:87:be:6b:95:b4:95:16:2a:71:
         58:7d:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:33:20 2026 by rpki-client