Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a7d5cadc-ad4b-37f3-a1a9-491a4fd67428.roa
File:                     a7d5cadc-ad4b-37f3-a1a9-491a4fd67428.roa (raw, json)
Hash identifier:          3m7rTj57Y8lgaMsPvAp6IQ6QNaplTLtzMW/DRgW+VVk=
Subject key identifier:   7C:12:DD:2B:3C:FF:EB:EE:4E:91:18:C9:DC:37:31:6E:B6:3C:CB:72
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584DF4DB989083B3362A834E5BE0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a7d5cadc-ad4b-37f3-a1a9-491a4fd67428.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     21859
IP address blocks:        2602:ffe4:c9c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:98:90:83:b3:36:2a:83:4e:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=b40a9e94-b7a1-47c0-aabe-2ed40f89fba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:be:92:51:34:79:8a:08:59:e3:d5:4e:c4:
                    02:1a:d1:b0:cc:e7:2c:1a:31:2a:6c:2e:9e:3a:56:
                    b8:e7:2c:ea:39:e4:20:67:d4:b3:22:74:eb:44:5e:
                    a3:d2:9f:46:6e:d2:1e:ec:25:1b:84:ab:d4:56:ad:
                    f5:03:9b:f5:8f:82:b8:a1:a3:6c:1e:f6:dd:99:7d:
                    08:06:08:06:f6:86:48:0b:b8:46:1e:98:5d:fa:e6:
                    fa:a0:1e:9a:43:e2:b3:d9:c4:51:ee:4c:d6:7b:af:
                    f1:f0:fc:88:ec:ac:dd:e2:a3:e0:9d:62:49:ad:3d:
                    b8:bf:c3:71:06:dc:c8:55:7f:59:c2:f1:09:a6:e4:
                    99:d7:a1:76:97:bf:d4:56:c4:e5:1c:9b:98:af:c1:
                    f8:1c:01:22:7f:f7:4f:53:53:a1:a2:82:15:ef:2f:
                    43:9f:34:1a:63:99:32:1e:a3:38:73:8d:fe:b9:7e:
                    50:50:81:5b:71:aa:5c:d6:c8:44:6c:86:8e:1d:65:
                    17:34:89:9a:e1:61:72:20:04:41:0e:81:b2:5e:db:
                    6c:d2:b4:07:5d:dd:e0:4c:52:3a:a7:8c:a7:1a:f8:
                    25:1b:b4:52:d7:ce:c1:fb:81:af:e7:59:4a:98:37:
                    47:16:86:33:31:43:c9:eb:18:50:1c:9e:42:1a:7c:
                    77:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:12:DD:2B:3C:FF:EB:EE:4E:91:18:C9:DC:37:31:6E:B6:3C:CB:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a7d5cadc-ad4b-37f3-a1a9-491a4fd67428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:87:0b:c5:06:b7:ff:d8:fd:67:a8:ab:f9:9b:32:36:8a:92:
         92:f5:5c:db:fa:21:e5:ce:90:87:9c:65:fd:c6:71:f3:ad:c3:
         8c:13:4a:5f:2c:6c:c3:2a:a0:2f:75:cc:36:a9:f0:84:67:b0:
         57:80:11:64:c4:08:81:13:11:ce:bb:20:c1:50:69:f2:d4:04:
         00:78:56:f8:37:2b:a1:1c:f6:e4:a4:37:63:11:98:33:31:aa:
         b5:99:97:75:c0:6a:e0:43:4f:98:f3:01:b9:f4:3f:ad:73:d9:
         22:52:2a:6e:0b:e9:f5:3e:44:ad:8b:ec:39:dc:21:35:36:24:
         6f:8a:54:07:0b:d4:ae:07:e2:aa:b7:6e:2d:0f:2b:44:b5:9c:
         0f:b3:52:28:7c:f9:ee:81:cf:86:1b:9f:8c:ad:2e:f2:c9:61:
         93:69:80:43:de:2f:01:6f:48:0e:2e:30:8a:10:e1:6c:c6:3e:
         86:41:24:0e:0e:d1:03:bd:0d:df:3d:e8:4a:01:f3:c8:ba:f4:
         d4:87:23:fc:8b:95:fb:3e:aa:77:bf:7b:82:67:d7:81:be:ce:
         de:79:20:98:e1:ca:c6:45:f2:52:a1:f3:2b:09:31:e7:7b:43:
         8f:38:8e:c5:21:40:ee:80:90:63:e7:45:12:63:9a:8e:3b:cf:
         60:a5:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:45:52 2026 by rpki-client