Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/75c20892-bea3-3bae-9909-3c7cf46164e7.roa
File:                     75c20892-bea3-3bae-9909-3c7cf46164e7.roa (raw, json)
Hash identifier:          sPqm1fGZFHn7IDi/2B/9G4rfqy60CFfQ068kXDVepkY=
Subject key identifier:   70:09:79:20:5F:EB:EA:9C:49:C8:26:25:E5:2B:4A:55:1E:A9:FD:80
Certificate issuer:       /CN=845a7397-7971-43f9-8d64-19e915943e4e
Certificate serial:       010D0C9F4328584DF843D7DA0BF9AD493C1CDD00
Authority key identifier: 02:41:1C:8C:C7:21:8C:34:39:08:07:D6:F5:56:38:0A:3B:CC:7A:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/75c20892-bea3-3bae-9909-3c7cf46164e7.roa
Signing time:             Wed 27 May 2026 06:18:44 +0000
ROA not before:           Wed 27 May 2026 06:18:44 +0000
ROA not after:            Tue 25 Aug 2026 06:18:44 +0000
asID:                     401839
IP address blocks:        2602:f3af::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/845a7397-7971-43f9-8d64-19e915943e4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/845a7397-7971-43f9-8d64-19e915943e4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f8:43:d7:da:0b:f9:ad:49:3c:1c:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845a7397-7971-43f9-8d64-19e915943e4e
        Validity
            Not Before: May 27 06:18:44 2026 GMT
            Not After : Aug 25 06:18:44 2026 GMT
        Subject: CN=7967ff99-aa9d-4123-8862-978c2f854d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:3b:17:6b:49:75:02:66:75:b1:b7:c9:c1:
                    93:17:be:2d:98:d2:15:bd:39:b9:e4:8d:24:50:b2:
                    fe:77:53:2f:ed:4f:fe:90:b5:8a:61:7e:5b:a2:00:
                    30:06:a2:51:2c:3d:4f:23:b6:66:06:d1:58:1c:a4:
                    00:ea:37:8d:81:16:be:c3:52:5f:ce:ef:0a:bc:e6:
                    6a:b1:fe:e5:62:ea:1b:9b:12:bf:b6:df:f0:43:ac:
                    a1:13:46:54:ff:73:2c:03:7d:d0:93:96:75:68:4f:
                    7e:12:6a:18:18:40:27:6b:af:76:82:59:26:c6:d0:
                    50:38:4d:56:ea:f9:11:16:55:f2:03:4e:68:64:88:
                    34:d2:69:39:50:5d:25:d6:1d:73:4d:61:67:c7:bc:
                    5d:f1:ec:d9:a3:67:de:69:c9:61:54:d9:ee:48:4f:
                    68:5d:23:5d:5d:53:8a:23:ea:11:bf:0d:da:23:18:
                    0d:7a:91:51:69:9a:2b:8a:3e:9e:21:f8:d2:82:9b:
                    74:a3:10:cc:8b:d9:e5:f6:51:d3:c1:73:a7:d2:26:
                    16:2c:c6:91:4a:59:6a:95:8a:27:16:e6:d3:dc:bf:
                    03:e5:43:69:eb:f6:d2:56:09:75:fa:11:96:b1:51:
                    84:3e:e1:93:6d:24:fb:cf:f7:53:11:64:fb:e2:9a:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:79:20:5F:EB:EA:9C:49:C8:26:25:E5:2B:4A:55:1E:A9:FD:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/75c20892-bea3-3bae-9909-3c7cf46164e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e/845a7397-7971-43f9-8d64-19e915943e4e.crl

            X509v3 Authority Key Identifier:
                keyid:02:41:1C:8C:C7:21:8C:34:39:08:07:D6:F5:56:38:0A:3B:CC:7A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/845a7397-7971-43f9-8d64-19e915943e4e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3af::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:21:86:97:5e:5c:f7:f5:c5:9d:e0:4f:c4:4d:2c:09:da:
         84:33:ce:0d:21:f1:45:26:1d:b7:bf:0d:d7:71:4b:e7:8d:ce:
         d6:df:bb:a1:04:6e:d3:2e:a0:53:86:8d:77:5c:32:0c:12:23:
         d9:b9:a2:8c:b0:00:ef:93:27:90:0b:a1:88:11:ef:d2:c9:63:
         d5:e3:90:46:23:b2:30:3f:71:a7:a1:21:f9:4c:09:65:70:38:
         34:71:3d:90:ef:7d:73:02:06:4f:03:db:80:26:ae:85:2b:ef:
         97:a2:99:20:31:2c:7b:d4:37:05:0e:c7:f3:ba:bb:f5:ce:5e:
         b9:d0:3c:d4:78:5b:b5:ba:04:83:9d:05:e0:59:e4:81:02:ca:
         ea:6b:76:7d:d1:3b:26:bc:e3:7f:17:31:e0:3e:a8:b5:bc:02:
         ea:96:97:92:90:4c:e5:cc:21:85:c2:46:cc:6b:d4:ab:87:bb:
         60:ed:4b:72:4c:54:f0:67:78:3c:ef:6f:f3:76:a2:f9:01:f9:
         3d:51:ba:1d:a3:08:96:35:49:74:09:4e:37:99:10:2c:6b:fb:
         be:69:56:3c:d1:55:af:ab:5b:86:3c:f9:88:b2:10:42:89:90:
         06:84:38:a4:83:7b:6b:49:b1:2d:70:46:9c:06:b5:54:ba:58:
         8e:c8:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:32:45 2026 by rpki-client