Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
File:                     4a1e23e9-0d4a-3576-945b-33f4492039a8.roa (raw, json)
Hash identifier:          Q1PMAVc5ouWDocyGz263kXVdJta6JEeY3HPCvqI+13I=
Subject key identifier:   82:7D:A7:4F:C8:83:0B:76:D8:44:CE:F9:D3:B1:07:C6:02:BA:C7:56
Certificate issuer:       /CN=bfb32325-5962-452d-81bb-2eb68992a5df
Certificate serial:       010D0C9F4328584DE9C79B53265F4699838D0C00
Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
Signing time:             Fri 22 May 2026 01:47:06 +0000
ROA not before:           Fri 22 May 2026 01:47:06 +0000
ROA not after:            Thu 20 Aug 2026 01:47:06 +0000
asID:                     14618
IP address blocks:        2602:f4a8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:c7:9b:53:26:5f:46:99:83:8d:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df
        Validity
            Not Before: May 22 01:47:06 2026 GMT
            Not After : Aug 20 01:47:06 2026 GMT
        Subject: CN=740477b7-6d3c-4bc5-b1f1-9f46a61cb024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:df:2c:ce:e5:48:32:53:e0:de:0d:e0:f0:
                    ee:e6:4e:68:89:eb:7d:d4:07:23:71:7f:8c:50:32:
                    34:95:b3:e1:50:98:c1:68:45:dd:e9:fa:51:1f:dd:
                    90:aa:4c:4c:f3:1c:a9:87:1f:71:e2:fc:b1:5e:c1:
                    a1:53:0a:37:e4:41:45:14:57:30:05:84:d0:9d:4c:
                    6c:9c:46:ab:2f:63:81:a6:56:52:1a:97:8a:ce:2d:
                    6a:5a:ba:12:ff:f6:fc:18:9d:93:9b:49:85:85:64:
                    86:49:fe:8f:14:d5:20:d7:28:1f:a3:de:75:54:af:
                    7f:7f:16:2e:57:99:41:84:81:39:6f:a3:c6:91:3f:
                    db:3f:6a:98:bc:78:0d:60:50:39:4e:f1:2b:78:c1:
                    77:a3:2f:01:55:db:9d:34:5b:16:2d:2d:2c:ab:1a:
                    16:4a:4a:13:f8:44:4d:73:22:c4:d3:48:8a:d8:aa:
                    5d:95:f6:5e:b8:3c:de:31:c3:f2:79:90:91:1e:d6:
                    04:61:9a:1e:01:9d:ee:ee:0a:b1:51:df:16:7d:52:
                    4a:55:55:d7:88:03:13:f1:91:1c:70:c5:17:62:ae:
                    08:c5:41:e9:d2:7f:43:dc:82:7a:a7:89:bd:ec:ab:
                    73:77:12:bb:36:44:ab:77:9a:af:01:d0:78:9f:1e:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:A7:4F:C8:83:0B:76:D8:44:CE:F9:D3:B1:07:C6:02:BA:C7:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl

            X509v3 Authority Key Identifier:
                keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:41:f5:86:2f:71:a7:da:68:c7:4e:cd:16:78:54:96:99:
         9e:ed:86:98:de:fa:f6:30:a9:fd:c0:2f:38:6e:4e:b3:8d:e7:
         5b:44:f3:f8:a3:8d:d1:3f:6f:e7:ec:ff:cd:81:a0:f2:57:79:
         5f:a7:b7:1f:01:c3:4c:0a:ea:38:d5:be:a6:91:4f:61:b1:c0:
         b1:de:1f:23:c8:01:70:1e:4b:f7:0f:79:eb:ef:3e:77:e4:59:
         8a:e1:18:9a:fd:33:30:c7:fd:d3:14:37:ad:86:d9:af:04:4c:
         ae:4b:8f:a5:54:8d:0f:81:49:bd:32:be:fe:4c:86:b2:3f:48:
         92:37:bc:26:52:b2:4a:f7:0d:fc:97:ef:22:20:c4:63:0a:45:
         93:ec:ac:28:a9:86:a7:97:60:aa:08:18:6c:82:3f:e4:c3:04:
         53:3a:99:6c:df:d0:f9:76:50:30:24:ca:83:f0:9f:20:79:24:
         c6:43:6a:8e:c8:b6:df:6f:b9:dc:78:df:53:03:05:1f:d6:8a:
         da:1a:2c:6a:5a:c2:86:8c:1a:75:77:ca:b1:22:7b:20:d0:88:
         e4:7a:09:c5:dc:e0:7a:8e:6e:82:4e:c8:e2:7e:f7:12:81:04:
         e6:87:f4:d4:42:b2:ec:22:11:89:6b:1a:c5:e8:9d:a3:05:90:
         c0:37:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:35 2026 by rpki-client