Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/148717e5-6ab2-3da8-a725-5570f49c12bc.roa
File:                     148717e5-6ab2-3da8-a725-5570f49c12bc.roa (raw, json)
Hash identifier:          h9l39Sblfi9DnHT6zzftd3eP0vKjRUaGy/VMoqo+Uc0=
Subject key identifier:   BB:58:46:84:41:11:6D:81:4A:89:CD:AD:34:AF:3F:87:B5:1D:1E:8F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D905A950538855D25BBA78700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/148717e5-6ab2-3da8-a725-5570f49c12bc.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c96::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:95:05:38:85:5d:25:bb:a7:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=d16c94ee-6e0e-440b-aaca-c84fb4df5765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:aa:30:97:e7:eb:e5:46:ac:5b:7e:ea:5a:
                    58:fc:51:15:5c:24:6b:59:6e:d0:94:9f:34:85:6f:
                    a4:70:76:3a:aa:75:d3:65:fc:0d:aa:88:ef:b4:74:
                    47:af:69:1b:06:61:c0:64:d9:ef:a9:67:31:11:d4:
                    d7:a8:09:ee:13:fe:ec:83:f3:29:0b:27:94:3f:05:
                    25:cb:7e:2f:b2:fa:d2:28:8e:c1:fd:ca:bb:40:27:
                    ea:0e:42:02:33:a7:7f:c3:8d:f3:51:d2:02:e2:46:
                    d8:50:85:e2:31:3e:9b:fe:43:ea:1f:1c:74:8c:4f:
                    a2:5d:8c:fb:ff:04:50:f4:e8:bc:67:e4:e5:d1:e9:
                    9b:4a:44:0a:b0:52:d4:e9:db:b3:24:de:75:1f:f9:
                    29:b4:da:91:cb:27:29:3e:2c:02:69:b9:4d:b2:bf:
                    53:ca:d5:3a:eb:42:1d:69:f0:ea:1a:6f:02:0a:f8:
                    92:cf:07:f0:41:e3:a4:8b:1f:d5:5f:3c:c2:a9:9b:
                    8e:72:f2:9e:0f:45:3d:1b:d6:e4:ac:24:24:35:c1:
                    dd:fc:48:57:26:7e:51:be:4d:96:03:ec:87:86:03:
                    29:6e:be:19:02:6f:29:99:e2:de:85:b7:30:8d:49:
                    0d:fa:be:88:81:db:c4:08:73:4f:fc:dd:91:e5:c6:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:46:84:41:11:6D:81:4A:89:CD:AD:34:AF:3F:87:B5:1D:1E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/148717e5-6ab2-3da8-a725-5570f49c12bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c96::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:34:51:d2:43:ee:f7:25:bf:7f:17:cd:b7:2f:1d:5d:2a:
         68:ba:17:12:26:62:80:20:a8:4f:71:80:fc:98:97:b9:ff:eb:
         b1:88:7f:b8:a8:56:62:b2:48:d9:c7:65:40:8c:01:61:f8:a1:
         ab:a8:2a:eb:d3:59:36:0b:20:7a:32:6e:8c:bc:65:70:65:53:
         a9:3c:cb:81:0a:69:0d:a7:13:ea:40:f2:cd:1a:3f:d0:35:03:
         75:51:24:d9:81:5b:c7:c3:9d:46:ca:b5:3e:df:8b:6f:17:62:
         4c:de:f0:32:3e:c6:8b:83:cc:03:a1:83:75:eb:67:e9:fd:a0:
         32:9f:40:fa:39:d3:f5:e1:c3:e9:b4:e3:93:0f:70:88:84:f1:
         79:c3:1b:af:71:cd:b4:9d:73:72:de:20:66:02:c0:d9:db:75:
         59:1f:6e:25:5b:84:aa:52:2e:40:b2:c1:36:a7:3f:d2:fe:c6:
         22:b6:56:6a:a1:ae:25:c7:29:93:44:97:2f:dc:7e:cf:46:bd:
         7b:38:42:cd:72:90:9f:2c:42:53:30:8c:7f:d5:c7:13:cb:0e:
         da:62:f6:06:61:66:c6:fa:ad:9c:d9:a2:1a:4a:4e:02:9d:a8:
         00:cb:45:b3:40:45:48:cf:86:ff:ab:df:65:ff:1a:e6:cf:aa:
         17:e5:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 15:23:25 2026 by rpki-client