Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa
File:                     b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa (raw, json)
Hash identifier:          iHC1MDuHqUVx1a7wx1fwpIZG6baJNks9ael8xhPLHXE=
Subject key identifier:   AF:CF:A4:96:77:31:63:7D:53:A2:0C:59:4E:A1:6C:BB:1F:4B:79:A3
Certificate issuer:       /CN=a89dfa66-11db-4652-8710-2a69de76abaa
Certificate serial:       010D0C9F4328584DEB1601FFCCC92726251D6F00
Authority key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     401947
IP address blocks:        2602:f447::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:16:01:ff:cc:c9:27:26:25:1d:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a89dfa66-11db-4652-8710-2a69de76abaa
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=7dd256cf-0527-451f-a593-718b41a50142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:de:8f:6a:e0:f2:1f:80:3b:bf:7c:18:c9:
                    ac:5d:7e:4e:13:54:d0:53:c9:bb:00:46:c3:4c:2d:
                    ab:5f:69:b9:c1:03:79:5a:76:b6:fa:c1:6f:c6:e0:
                    83:dc:a4:7f:0d:e9:8f:4d:60:bb:88:cf:b5:2c:3c:
                    2c:d2:2e:47:5e:cd:2b:46:18:8b:d9:9f:f4:1f:91:
                    51:73:c0:c9:b0:1a:a2:37:8c:e0:6a:e1:93:19:e5:
                    ff:89:51:d5:eb:a4:c0:7e:5f:3d:f8:ae:e3:9f:69:
                    67:d5:6f:93:97:86:37:b4:03:de:cb:eb:f8:c5:7a:
                    f5:c8:f0:6d:73:be:38:d6:19:08:3b:81:f1:70:86:
                    5b:e5:cd:ac:ae:2a:97:8b:6e:03:5e:97:c0:a0:81:
                    7b:73:05:0f:e1:03:e3:a2:d1:cb:66:7d:90:bf:08:
                    31:8c:1e:12:9e:52:ee:a3:de:ae:04:e2:75:0f:41:
                    97:56:9b:aa:7a:3f:6b:0a:08:f5:bf:55:b1:41:60:
                    b1:39:93:d7:82:05:f0:0a:a9:a7:b4:33:2e:e2:49:
                    f4:46:27:f6:6b:62:c4:b7:d7:20:dc:db:05:50:40:
                    0b:36:9f:0c:d8:be:82:68:45:55:83:51:6e:72:d8:
                    8b:7c:f7:d3:6b:f4:ad:ef:db:d8:3e:f3:88:58:4d:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CF:A4:96:77:31:63:7D:53:A2:0C:59:4E:A1:6C:BB:1F:4B:79:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl

            X509v3 Authority Key Identifier:
                keyid:45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f447::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:5b:56:b8:45:c2:c3:62:2c:b9:fa:8d:2a:b5:e7:1d:14:
         3a:5f:6b:d0:c5:a8:62:9a:a6:0b:37:64:25:55:09:35:1d:b6:
         af:26:28:19:78:2f:50:55:3c:03:8d:d5:32:0a:03:9e:d8:88:
         51:5c:59:02:b9:96:73:f9:62:ba:01:db:47:aa:0f:81:a8:a7:
         8a:43:8e:ce:28:08:66:a5:e0:57:5f:88:64:9d:b0:af:3c:f6:
         b7:20:f3:b4:4c:5d:e6:ac:6d:b4:65:f5:52:82:f9:e2:13:d3:
         83:0d:16:2b:b4:c4:27:d4:28:f7:60:a5:16:0a:08:13:00:90:
         cf:0b:4d:b8:ae:e6:94:8f:28:93:dd:8f:5d:56:b5:93:5e:14:
         2d:96:d5:93:0d:8b:b5:c7:5c:d8:27:5e:bd:c9:c3:c7:e0:38:
         6d:c7:d0:04:55:34:b9:3e:6c:85:6e:b1:75:c1:2d:a3:aa:03:
         61:69:7d:b9:f5:6f:cc:1b:6a:08:49:60:27:bb:48:24:e7:66:
         20:d8:a1:3f:4d:aa:80:3d:ad:71:f5:ff:91:8c:45:5a:58:9a:
         82:8a:a7:d7:fe:24:89:41:9c:f3:7b:77:a0:09:89:54:88:22:
         37:e0:1f:f7:c7:ce:77:58:94:11:13:84:f0:8a:65:41:76:5b:
         b1:2a:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:40:16 2026 by rpki-client