Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa
File:                     cb309b79-d534-378e-8391-a62dfccc86df.roa (raw, json)
Hash identifier:          yrRSzotqIy9fUYZ3UFATCuNIM3nW2DWuh3HCUILE9J8=
Subject key identifier:   4E:4C:12:A3:CE:7B:99:D0:08:8C:AB:AC:78:E8:CF:58:DB:4C:FA:8A
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584DD625ACFCC4D74DFD49DB7200
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     39618
IP address blocks:        2602:fd92:c30::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:ac:fc:c4:d7:4d:fd:49:db:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=7edc830e-ef9a-4c72-906f-ee2efab89596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:1e:a3:d4:09:23:d2:70:c7:34:ed:8a:82:
                    c7:64:4a:c4:40:5d:b4:0a:cf:4c:7b:4b:f9:6b:a0:
                    00:9f:39:3b:02:26:0b:7e:fa:d1:c5:63:fa:93:08:
                    d3:25:a3:ca:83:60:03:91:ee:45:91:93:56:f1:46:
                    4a:31:56:29:a0:4b:50:59:f5:b2:64:80:a5:0d:ae:
                    0c:04:31:79:a9:b9:7e:4b:00:6d:a3:55:4b:6c:ef:
                    79:b9:fb:cc:f8:7a:d4:5c:e1:51:67:e3:e5:17:39:
                    d5:bf:db:c6:97:e2:0f:66:78:01:7a:81:04:f7:c7:
                    2b:3f:82:5d:fa:76:de:5b:ae:07:02:a9:f7:a7:44:
                    40:b3:37:d1:34:30:a0:b8:92:e1:7c:e6:ee:33:65:
                    40:cc:6f:53:65:cf:4a:5f:b4:9b:31:28:fb:d9:f2:
                    d2:43:16:6a:c7:9c:ec:5e:6c:98:d8:81:64:1d:8a:
                    4e:6a:a9:30:12:b3:6a:9a:47:b5:89:b1:f9:2d:de:
                    4a:61:db:72:d7:14:9f:df:0c:0f:c3:c0:f4:a6:ab:
                    85:ec:93:32:13:fb:f7:ed:e0:13:a7:4a:05:bf:4a:
                    b2:72:29:75:61:50:ab:5c:d8:dd:21:99:02:ab:b8:
                    2e:bf:6f:cd:2f:59:c5:32:59:96:cd:7a:3b:21:66:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4C:12:A3:CE:7B:99:D0:08:8C:AB:AC:78:E8:CF:58:DB:4C:FA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:c30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:9d:46:59:a0:00:0a:ba:28:d4:a0:dd:91:fb:ad:4a:ae:
         d2:f1:61:11:96:6f:a4:81:28:f0:b3:9b:14:e8:90:87:83:a3:
         26:e9:ef:48:17:1d:f9:4e:6f:9b:66:c3:f0:48:36:d0:ce:51:
         d1:dd:9d:7e:fb:cd:0b:d3:69:a4:56:b6:c0:16:af:aa:4e:cb:
         81:d1:20:f5:42:09:2e:1f:8d:5f:c0:55:da:61:9c:90:a8:87:
         c4:bc:74:dd:8a:56:eb:b0:61:dd:d4:b2:23:46:03:ae:22:28:
         48:cb:5c:55:a7:db:fe:fc:d5:09:0c:52:17:14:2e:3d:77:c5:
         79:2e:16:04:51:59:84:4d:d4:5c:68:6e:60:45:a7:30:38:7e:
         73:f5:28:36:00:e6:76:89:c2:84:cf:5d:3c:06:95:ce:3c:d7:
         2a:75:68:cf:6b:6e:17:2f:bf:a6:23:12:56:e9:0a:c5:a3:b8:
         d4:33:31:49:4b:4f:f3:bf:c0:d6:87:ba:d3:35:64:62:fc:6d:
         4e:c6:f3:c6:40:ab:e9:7f:c8:51:e2:a4:46:43:23:48:56:2d:
         38:a0:c0:21:71:80:f5:f0:97:47:d7:21:2d:90:ba:c4:05:4a:
         c9:0e:a3:73:c7:66:86:3e:76:53:b7:ff:33:6c:ea:b7:55:f3:
         6b:a6:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:21:42 2026 by rpki-client