Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
File:                     d62afe2a-7630-31f0-9e51-d97ded7730a9.roa (raw, json)
Hash identifier:          a6o+8LrRs2nzePsvw0L2StgJ65Z45LgMj3j1bNzFWDY=
Subject key identifier:   2B:DF:E6:C4:5E:1A:C6:BE:FB:74:38:3F:8A:1F:31:D4:36:8E:8C:89
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584DE9B08726384E3C85D4223E80
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     395567
IP address blocks:        2602:fead::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:87:26:38:4e:3c:85:d4:22:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=a827d0ea-d737-406e-bf57-08c4454100f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:cc:b2:1f:49:dd:78:ce:cb:a3:e5:60:78:
                    94:db:8a:47:d6:89:43:90:36:2d:f5:6a:11:32:0b:
                    4d:7b:da:16:02:bd:10:22:6b:69:b9:1d:7c:3b:a0:
                    94:37:2a:76:c6:08:3f:32:24:09:21:82:12:49:e2:
                    31:ae:1b:f2:42:14:56:45:29:88:45:20:3d:8b:38:
                    2a:24:51:08:25:d7:8f:a7:9a:81:51:b9:4d:6d:6c:
                    88:dc:93:1a:95:9a:d3:fc:48:f7:97:3e:3b:a0:de:
                    b3:1d:7f:cf:dd:2b:00:02:0f:98:84:fa:91:17:2b:
                    61:32:58:1f:61:4c:47:99:33:b0:2c:39:a7:6a:38:
                    49:78:65:29:75:f7:73:70:01:20:d1:1a:ea:a5:bc:
                    79:c9:da:0f:9f:e7:e1:59:23:72:1b:ae:df:cd:7c:
                    ce:47:e2:1f:5e:0f:fe:a0:da:55:8b:5e:fd:9a:bc:
                    bd:93:00:3c:ce:e8:50:17:c7:39:49:68:c6:a4:1d:
                    e9:5e:94:7c:d1:ec:aa:e3:69:a9:f1:f8:83:14:57:
                    a5:76:a3:18:76:32:9e:18:76:35:21:cc:50:fc:5a:
                    31:0e:66:19:d9:e5:2e:81:32:0d:48:1e:40:64:55:
                    62:34:03:06:6c:63:ee:d6:93:64:5a:fb:3e:0a:9f:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:E6:C4:5E:1A:C6:BE:FB:74:38:3F:8A:1F:31:D4:36:8E:8C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fead::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:82:98:86:cb:bb:3b:b4:b8:38:df:f3:4c:8e:37:47:06:63:
         35:3c:34:d1:c6:85:88:3f:5f:5b:37:ad:8e:17:18:48:de:fb:
         75:90:05:5e:d3:61:b7:31:12:1a:f2:07:1d:8e:ca:df:58:7d:
         17:2d:69:6b:76:0b:bd:0c:be:a4:b3:d5:29:63:28:32:bc:53:
         33:5d:4c:7c:f3:2c:12:83:27:06:56:0d:20:24:ad:7c:40:67:
         6c:ea:ab:20:e4:13:8e:75:a0:3c:b7:4c:7a:1c:75:43:f0:2c:
         a0:a6:b2:95:8b:f2:e2:36:46:14:20:de:ec:d5:1a:4e:a5:66:
         87:a8:2f:18:ab:83:d2:0f:b8:48:cd:29:41:02:fc:6d:63:7a:
         ba:6e:a2:68:1d:8e:35:4e:39:b7:9b:2a:3d:20:6d:18:fd:0e:
         68:50:f7:9c:e6:cb:92:92:2c:e7:86:cc:68:5a:17:f8:ad:a0:
         87:44:03:ed:82:e9:79:fa:22:38:9c:43:a4:7e:17:7d:fe:67:
         1a:b1:53:de:be:8a:37:5c:ff:95:09:90:37:63:aa:b6:8d:3b:
         6e:5a:25:0e:98:84:36:4a:73:cc:21:0e:b7:32:02:bb:79:79:
         b8:99:eb:6c:34:35:34:a4:87:e5:97:5d:d8:b2:a6:05:dd:df:
         b2:70:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 17:29:48 2026 by rpki-client