Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/3c9997a6-d86f-3f56-bd3d-70a8073777b3.roa
File:                     3c9997a6-d86f-3f56-bd3d-70a8073777b3.roa (raw, json)
Hash identifier:          MDklbyWNGfaOIMvg449NNaWPqVPdkRZj9tXukr+Ex2c=
Subject key identifier:   0E:D8:3E:BD:9E:27:FB:47:FC:F5:36:F1:ED:30:D9:D0:DE:EA:94:13
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584DEC7B3882A75028036770DB20
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/3c9997a6-d86f-3f56-bd3d-70a8073777b3.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     401776
IP address blocks:        2602:f864::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:38:82:a7:50:28:03:67:70:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=917b6dc5-6163-4cc0-8984-43980a1d68ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:6f:40:62:39:ba:a0:ff:70:ee:e6:4d:c0:
                    77:d6:f1:23:92:a6:14:64:90:97:34:bc:a3:a2:8e:
                    bb:ed:fc:c4:7c:eb:3b:2f:5b:6b:ea:f0:94:34:a9:
                    a7:62:88:74:94:f6:13:f0:f3:00:c3:e8:dc:fe:45:
                    35:71:4a:59:31:62:80:d6:3c:75:56:44:de:c3:fb:
                    cd:9b:d5:fb:61:cb:6a:e5:14:85:64:5e:04:9a:09:
                    29:92:6a:69:fb:97:93:9f:15:06:47:00:2e:16:50:
                    6c:10:f3:fd:bd:9f:7d:20:bf:74:c1:dc:d1:a5:c6:
                    1d:08:75:06:a6:5b:21:03:7f:53:b4:09:96:65:53:
                    a1:43:2e:0d:44:c3:f2:3e:c4:50:48:de:4a:6c:a5:
                    28:e4:e6:43:fb:cf:90:46:f3:19:4f:d8:59:63:59:
                    81:ea:b8:15:00:1d:b9:9d:f6:49:5a:c3:17:bc:e9:
                    eb:bf:a9:8f:a0:37:2b:15:36:2d:20:e9:27:87:00:
                    52:f9:72:5c:d0:f9:c7:46:f2:2e:4d:67:38:6d:ba:
                    25:d1:8d:bb:bd:da:df:cb:ac:98:8b:08:b7:da:36:
                    00:5b:e8:56:dc:8f:5c:52:9c:2a:c0:25:d4:ce:de:
                    cb:7c:2b:10:9e:ce:7d:b4:b6:bf:b1:60:f0:41:4e:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D8:3E:BD:9E:27:FB:47:FC:F5:36:F1:ED:30:D9:D0:DE:EA:94:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/3c9997a6-d86f-3f56-bd3d-70a8073777b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f864::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:a6:e7:15:cc:d9:30:6b:e9:8d:7d:d9:f1:60:bc:ef:b2:
         37:53:4a:a0:e7:6c:3e:53:f9:e5:7c:dc:88:a2:e2:cb:6f:40:
         fc:63:9b:64:98:27:23:1c:01:e6:a3:b4:f6:96:fa:c1:96:c8:
         50:9c:b9:8a:9c:a2:44:32:72:60:f8:ab:4b:8c:cb:c2:c3:ec:
         ea:a7:a1:64:3d:2b:a6:03:98:87:18:05:0a:c7:e8:39:cf:4f:
         f4:41:fc:58:99:2d:03:cf:fa:41:6b:d8:3f:aa:c6:55:65:3b:
         7f:ba:dc:cd:47:80:20:52:c6:1d:92:51:7f:0d:15:25:e3:f1:
         66:28:88:e5:ff:9f:8f:b7:5d:88:1b:1b:18:9b:12:de:72:b0:
         6c:a2:88:e0:b7:dc:78:76:b4:ff:ff:87:a3:f1:5e:9f:1f:42:
         ea:df:26:23:a0:e6:98:b1:1c:e8:5b:98:f3:35:f9:ff:75:c7:
         9d:ae:47:40:f0:55:89:b9:39:df:a3:58:cc:91:3f:b2:2a:36:
         19:ab:59:5e:c0:2e:97:7d:0a:21:a9:7c:1e:4a:01:d6:f7:d5:
         5b:0d:6e:e6:1b:cd:e7:4b:09:93:f5:70:67:95:06:c7:a6:1a:
         37:b8:66:a4:16:ec:11:13:00:07:e9:fb:9e:cd:45:d9:8f:cf:
         58:f5:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:40:41 2026 by rpki-client