Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/d38094cd-02e9-344d-ac31-85024e3543d7.roa
File:                     d38094cd-02e9-344d-ac31-85024e3543d7.roa (raw, json)
Hash identifier:          CB0bMJJYDD+VtoEQKrC+Jxgoog6Mvo5kpUQENw/G4H0=
Subject key identifier:   DD:C3:06:06:75:55:67:8C:EC:67:6E:66:8C:1D:39:80:5E:39:2B:B9
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F4328584DE150851A64E7910659AA0E80
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/d38094cd-02e9-344d-ac31-85024e3543d7.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     46474
IP address blocks:        2602:819:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:85:1a:64:e7:91:06:59:aa:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=f726ec9e-a336-4dd2-870f-00440a0d46b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:e9:79:26:0f:39:02:94:e8:f8:8c:df:73:
                    df:ec:0b:04:bd:a4:83:75:0b:0b:a8:3d:07:15:dc:
                    9f:0c:dc:93:00:f0:37:a7:c7:b7:83:37:8c:88:7e:
                    5a:18:00:ae:f8:de:a7:c1:d6:b4:9c:3f:77:11:69:
                    4c:14:c4:24:ad:88:9b:ac:1d:06:51:b2:56:3f:b8:
                    d6:4f:2f:c8:e9:ed:59:b2:4a:27:45:e2:fe:1f:08:
                    80:d9:0f:6c:39:b1:28:3c:c4:54:cc:c4:cf:f1:b0:
                    72:83:04:7a:cf:37:5e:9f:81:99:7c:7b:dc:c5:cb:
                    48:6d:de:5f:31:b2:22:7c:2e:70:10:b2:dd:70:05:
                    33:b3:33:04:a8:28:63:33:94:1a:92:29:71:ce:36:
                    97:82:2b:b4:90:87:d1:03:7b:e4:da:5e:60:88:e0:
                    85:1a:bd:93:25:e7:83:fc:c9:bb:32:00:23:2b:f7:
                    23:0e:76:99:f0:c8:3e:2e:11:e4:0b:62:09:03:ba:
                    a3:5f:2f:ba:8f:be:8c:14:f4:f2:0c:47:c3:c4:50:
                    34:26:23:70:8e:c4:22:39:4c:a8:d7:8b:ab:f0:45:
                    09:25:3f:7c:12:87:cf:25:86:9f:9d:5e:ab:05:eb:
                    8f:6e:57:be:21:47:0c:50:55:ed:ea:fa:9d:0d:10:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:06:06:75:55:67:8C:EC:67:6E:66:8C:1D:39:80:5E:39:2B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/d38094cd-02e9-344d-ac31-85024e3543d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:99:e6:f9:83:d7:9b:cf:33:ac:1b:28:33:ad:33:08:da:42:
         2f:c0:fb:02:06:1b:4a:93:e0:96:da:92:12:6b:40:81:9b:cf:
         2c:c2:0b:02:ec:66:e5:9b:4b:e7:68:a4:c0:73:ad:2a:8c:ed:
         d8:a3:0a:00:0e:45:d3:2b:28:7f:09:2c:cc:e8:f0:c9:ea:f0:
         be:4b:ea:73:9c:2d:fc:45:cf:4d:c1:a0:bf:cf:3e:fd:72:c7:
         a7:c5:ee:54:d3:37:3e:f6:f1:8b:00:ce:f4:9d:68:14:54:b8:
         fe:ee:20:c3:b3:66:54:2d:9c:0c:db:27:7e:4f:64:51:e8:5b:
         ce:de:76:8b:f6:74:1d:6f:ff:5d:0e:9e:10:c2:40:88:c0:ff:
         1a:d9:4a:95:21:17:4e:58:8b:83:54:ae:26:bf:80:dd:30:d8:
         74:f4:20:7b:47:88:fa:94:f1:e9:32:9b:e5:9a:9f:3b:4f:77:
         33:f5:58:d4:8a:62:61:d6:84:1e:71:af:54:85:a6:d3:23:3f:
         d7:c6:85:8a:f9:53:81:ba:2a:89:27:34:f0:b9:87:ac:a1:d8:
         ce:7e:c8:8c:26:c3:df:bb:22:ec:2e:37:d2:0e:39:ad:d1:84:
         6e:4c:76:db:fc:5f:fa:4c:64:5b:aa:77:1d:1d:77:f3:6a:b0:
         ce:c4:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:57:28 2026 by rpki-client