Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa
File:                     43d41a34-62e7-3694-95c2-94d2452f5f65.roa (raw, json)
Hash identifier:          W79U8RbOBNO/5e9eNMV7oyJgk3s92uOC9aUuFrPeXjc=
Subject key identifier:   0B:29:F2:1D:3C:50:1B:DC:F7:F6:1C:7E:79:B3:2D:45:A5:AF:17:CC
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584DE41B337E4D5FC8A5F13B5000
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     401009
IP address blocks:        2602:f919::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:33:7e:4d:5f:c8:a5:f1:3b:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=e3bee4b2-ed6a-422d-930b-af273166fad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:36:ce:94:ae:29:60:21:6d:db:ee:78:3a:
                    28:72:c6:43:d7:1e:e9:fc:91:40:21:53:1b:d3:22:
                    71:ac:d1:1f:9b:f9:8a:fd:7f:44:eb:c9:6c:db:92:
                    57:42:7b:b6:38:13:70:a8:df:13:59:ba:75:8e:88:
                    a8:05:4a:2f:7b:cb:2f:bd:8a:9c:53:c8:f0:ec:0e:
                    9f:59:b9:70:93:b2:0a:a7:92:f9:c3:5c:29:16:de:
                    ba:3f:cb:f2:f2:88:0a:cf:3a:5f:21:af:34:db:56:
                    cf:47:56:f0:2e:d4:60:3a:e9:95:9f:2b:03:c4:80:
                    84:37:5e:57:d2:ab:99:da:83:f1:b3:a8:07:6e:8b:
                    cf:db:1b:df:ef:12:2c:df:5c:6e:a9:53:ad:6a:74:
                    8d:d2:25:0f:31:4f:0c:56:5b:47:ac:21:78:d0:ba:
                    d4:0e:d2:8e:2d:3b:72:fa:6a:56:6c:09:9d:fd:74:
                    34:e7:76:79:59:d8:4a:27:e6:bf:05:a2:3c:76:ef:
                    51:e3:d1:80:10:88:d8:2f:24:46:6a:dd:e7:ef:c8:
                    59:c5:7b:31:96:42:f9:96:0c:6c:71:2a:da:af:53:
                    07:a3:8e:43:f6:ec:62:63:2a:fa:42:ae:13:ce:94:
                    7c:ee:c1:cc:d2:a6:aa:a1:0f:47:8d:18:7d:e7:45:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:29:F2:1D:3C:50:1B:DC:F7:F6:1C:7E:79:B3:2D:45:A5:AF:17:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:09:eb:73:24:b0:da:c8:80:81:90:40:03:9f:f1:cb:e6:9d:
         df:2b:41:a0:31:09:bd:ec:9c:36:31:9a:74:08:93:52:28:25:
         84:dc:a1:56:79:40:75:90:27:3d:91:72:ed:44:f0:37:17:be:
         00:d4:8c:d0:f2:67:0d:e6:02:4a:d1:ed:aa:a9:68:4e:e3:93:
         1e:c1:d7:3f:2b:2f:c4:fb:ff:df:98:af:1d:c6:64:fd:b4:33:
         4b:46:f9:09:f9:4f:4e:af:8f:7e:0f:f0:c8:7f:cd:be:3a:46:
         f3:f1:55:8c:a0:bc:0b:a6:f8:4a:1c:8f:df:82:e6:f6:33:5d:
         fb:4d:07:f7:25:7e:4e:83:fd:a7:3f:0d:16:1b:61:d4:89:e3:
         5c:02:73:ab:b5:b8:94:79:d6:bc:3a:36:ae:13:4c:e1:49:25:
         2e:23:c2:d0:1b:9f:a3:0d:04:4d:45:df:85:df:b4:65:a0:c5:
         62:d4:f4:97:da:bd:32:99:af:89:fb:aa:8f:45:f1:dd:9d:7b:
         1b:dc:25:09:33:b5:aa:98:fe:02:92:38:a4:1a:aa:35:85:54:
         16:69:a4:0c:dd:84:a9:00:91:36:88:1a:c0:b4:35:c1:4a:fa:
         90:77:cc:46:89:0e:46:e4:09:47:7b:5c:79:73:83:30:db:63:
         06:9a:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:57 2026 by rpki-client