Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa
File:                     3765e690-a0b2-35d2-83fa-36c840834e2c.roa (raw, json)
Hash identifier:          8Q4NOkh8Jyzjgw7qbyyJiAlqGseZ3EM8PijWc+YbpPA=
Subject key identifier:   6B:D1:55:46:BD:36:AF:9F:77:FA:F7:26:BB:28:BE:84:62:DC:90:04
Certificate issuer:       /CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
Certificate serial:       010D0C9F4328584DA3E55FB24681F2B1DF14DB80
Authority key identifier: EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2602:f883::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:5f:b2:46:81:f2:b1:df:14:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=557cacab-8219-42d6-a05e-babd0f4d85af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:35:67:a2:8c:49:33:83:e5:95:ca:bd:61:
                    09:54:ef:f1:73:83:49:10:78:30:4c:db:fe:b8:70:
                    1a:a0:f6:f1:1d:4c:b9:54:f2:a5:68:00:00:26:60:
                    be:a8:58:76:33:41:d5:01:03:76:e7:a8:9d:81:21:
                    ec:2a:3f:d8:53:02:5a:05:b4:08:71:5a:53:df:21:
                    ed:31:f1:08:49:28:7d:5e:73:c2:9c:ea:ac:b1:72:
                    3e:80:8b:57:38:a6:c1:92:e0:9e:0d:9e:e7:40:4a:
                    ef:1e:fd:1c:aa:49:29:a7:f5:53:49:c8:94:63:f6:
                    e8:6f:74:de:b1:c0:1d:dc:73:b9:de:a6:d5:f8:fd:
                    d3:66:46:35:d5:9f:af:30:40:26:58:b1:75:81:ea:
                    15:fa:65:a7:b9:7c:1c:a1:7d:af:1a:c5:53:8b:94:
                    d4:72:42:62:0a:a9:75:53:c6:d4:bb:bf:24:07:01:
                    7f:e2:bb:bd:70:64:68:00:37:9d:31:c4:d6:68:32:
                    32:c4:73:aa:46:84:06:c6:bf:12:50:5a:e0:e8:cc:
                    7f:6f:ea:7a:b7:79:7f:ab:05:dd:00:c6:ca:d9:8d:
                    ad:61:13:07:7d:b6:84:75:b6:17:86:c7:a5:48:9e:
                    9d:59:f1:f5:1b:6a:a5:ec:ce:27:85:d8:4e:93:39:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D1:55:46:BD:36:AF:9F:77:FA:F7:26:BB:28:BE:84:62:DC:90:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl

            X509v3 Authority Key Identifier:
                keyid:EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f883::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:dc:f2:80:b6:2f:41:c8:48:27:e7:82:ab:ad:02:32:e3:
         78:a7:91:ac:88:83:d7:8d:a6:59:3b:44:ae:4f:6f:c9:d0:15:
         5d:16:c4:b0:27:f3:c3:fe:31:51:18:1f:a4:d0:a9:bd:79:93:
         a0:65:b9:85:19:00:f1:d1:0f:2c:0c:11:ae:31:bf:32:04:37:
         45:ec:4b:7a:a5:ad:ce:b1:30:93:db:9e:cc:13:c3:6f:e1:73:
         e4:9a:98:bf:cd:8c:bd:7d:ea:65:4f:f4:87:26:34:e9:43:34:
         72:a7:de:a8:ed:a4:ad:4d:75:ea:40:24:a1:2f:1c:0b:e9:97:
         a4:bc:1e:18:6c:1c:e8:3e:ad:b4:f2:9c:a7:3f:31:8d:7f:99:
         81:97:c6:d8:82:fa:cc:d2:9a:42:40:00:ce:f9:74:99:e5:be:
         24:78:f0:a3:ad:d8:60:37:08:4c:ad:72:a1:2a:b1:4e:c1:d0:
         68:e9:f3:76:36:14:7b:e1:f8:e8:63:9b:47:f6:cc:cf:86:f2:
         e4:61:87:a8:28:a3:47:f6:61:d4:33:eb:6a:fd:7d:bc:0c:1f:
         ff:9d:41:81:83:d7:74:0d:d4:af:30:5d:32:37:04:82:4d:0f:
         e1:fa:e7:3e:83:54:37:3c:55:da:29:80:bc:f7:82:f1:a0:54:
         4b:75:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:26:55 2026 by rpki-client