Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa
File:                     abb857cf-60e4-323e-bd82-a61588882d93.roa (raw, json)
Hash identifier:          QuCm25Gyhv+INW2zksCfBQ7UynINgwrV5MVTwIh6SxA=
Subject key identifier:   68:9F:D6:AC:B7:FD:B8:19:3C:B1:8C:4C:4D:70:FA:95:73:DE:0F:90
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F4328584D932550A0EB6533638A195740
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     23459
IP address blocks:        2602:f90f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:50:a0:eb:65:33:63:8a:19:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=a17a5948-87dd-4244-b3d6-4f208c051a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:17:d4:54:b2:8f:d8:49:1a:1b:d0:4d:a5:
                    86:e0:e7:eb:5f:39:98:0b:d5:f8:2b:6a:b1:93:df:
                    75:7d:30:a9:e5:3b:e7:1b:9a:b7:41:e0:b5:27:1a:
                    57:76:78:60:6e:7d:d5:1e:75:b3:ba:b2:bf:78:12:
                    35:b9:68:10:b3:a7:7d:2c:1e:40:ca:23:c4:f9:93:
                    14:dd:ca:14:03:e5:74:cb:79:75:1c:18:c6:15:bd:
                    36:95:7d:88:f7:fc:59:de:6a:6e:10:ad:b1:55:86:
                    98:45:88:0d:04:cb:3c:4b:45:8c:4c:e1:1d:79:d8:
                    68:b3:f9:bd:b5:8e:35:37:cc:ca:cb:86:f4:3d:b4:
                    c9:37:08:1d:99:e8:ee:6c:ab:59:1b:0c:2c:c7:bb:
                    3a:c7:4b:51:6a:76:c2:f1:2f:6c:35:69:f5:7f:5a:
                    08:76:4d:d0:93:d2:57:ff:2c:6d:96:f5:c6:31:53:
                    d2:23:6e:62:6c:60:27:3f:49:5e:aa:d4:e8:6f:c6:
                    6e:53:2d:c7:86:5c:93:30:df:9d:3c:54:7e:8f:0d:
                    ac:fc:6e:4d:29:4e:25:e3:f4:3e:7c:8a:81:8c:33:
                    e4:c3:fe:48:5f:72:40:4f:bf:35:d5:e8:ba:db:7c:
                    5a:7b:0a:0e:af:68:03:03:87:d6:a7:0e:a1:19:35:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9F:D6:AC:B7:FD:B8:19:3C:B1:8C:4C:4D:70:FA:95:73:DE:0F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:6c:79:f4:43:61:08:e1:6c:4c:e9:9f:db:ab:fe:28:3c:94:
         70:53:98:bd:d1:40:cd:c5:fc:2d:46:47:52:32:e4:d7:de:73:
         f0:6e:4b:76:99:e7:fb:b3:0c:a8:e4:82:ab:b5:15:82:3d:98:
         63:82:a4:ed:95:79:e8:22:27:f7:bb:0b:07:32:27:67:f1:37:
         25:ab:8e:a6:27:71:48:79:0f:77:92:f9:14:a7:0a:6f:79:92:
         ec:1d:43:e4:76:2b:71:4e:27:06:bf:f0:f1:f3:c8:78:e4:74:
         10:f4:85:2e:84:2b:a1:98:7a:18:c8:5b:a8:ca:4d:f4:55:bd:
         de:15:27:ac:02:7b:2c:b7:e2:ee:74:45:0b:ed:b8:c2:e2:4b:
         1f:b8:bc:17:28:84:89:4a:8d:af:a9:e1:4d:80:88:9c:93:28:
         c4:7b:61:4c:b1:eb:d8:1a:7d:25:df:2a:01:d5:d3:c4:ad:8e:
         a5:fd:44:14:59:22:11:a2:96:c9:a8:27:61:c8:9f:70:61:e8:
         3c:cd:f9:b0:34:0f:3b:e2:a4:70:3c:f9:42:bd:1a:d6:50:0a:
         9a:54:cf:18:84:45:65:18:32:a8:35:c1:76:e0:1a:be:17:c8:
         60:e1:8c:67:e9:fc:44:5c:dc:ce:2f:3d:da:72:a4:6e:cf:19:
         69:96:d1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:34:02 2026 by rpki-client