Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa
File:                     8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa (raw, json)
Hash identifier:          6FfMMon+teYR9ulUGLI+PBh5CQXPZyM0W24hih+FbfY=
Subject key identifier:   5A:D3:47:05:25:41:5E:9E:4F:11:BA:E6:1F:77:7C:25:7F:33:DF:52
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584DD4C06CB52D761CE3B603E600
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     40806
IP address blocks:        2602:f4d9:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:6c:b5:2d:76:1c:e3:b6:03:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=a5c5d34d-56dc-4f16-a5bb-55ca002fa9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:76:b0:f6:f9:96:0e:13:e1:71:89:86:16:
                    39:fc:f7:b1:be:5b:2e:9a:50:08:ce:6a:a5:f1:3a:
                    cd:85:a3:26:54:2e:b6:05:da:08:b8:13:ac:8c:2a:
                    73:77:6d:8e:39:53:47:5c:8b:72:a1:fb:6d:a3:3a:
                    14:e5:e4:fb:0e:98:19:57:27:46:ab:2b:4a:6d:27:
                    95:55:b3:55:ef:cd:e8:b6:4e:11:e1:9d:c7:80:9e:
                    c4:1a:a4:42:bd:3e:e6:52:c1:bc:b1:cb:1d:fc:04:
                    68:6e:87:ff:0b:c8:34:ba:85:3b:8a:15:41:1d:b5:
                    82:a3:aa:54:45:65:9b:df:e2:df:c3:e4:ed:6b:86:
                    33:6e:c2:e3:69:e9:e9:8b:90:a0:53:df:9d:1e:5e:
                    79:28:8a:3d:96:aa:81:0b:cd:16:df:ad:3a:9b:b6:
                    d0:df:aa:42:96:ce:ac:88:bf:f7:ed:06:03:3a:8b:
                    f9:ec:3c:a0:ab:43:1b:2c:61:a9:33:39:f9:77:8c:
                    0a:e2:39:25:d8:cf:00:21:bd:8e:23:b2:af:23:99:
                    2e:43:e5:10:24:28:27:12:3c:16:52:d2:b2:a7:f6:
                    d2:fc:b3:f1:95:e9:10:ac:cb:cd:cd:71:dc:5d:2e:
                    ac:aa:6f:7f:45:57:8a:c4:10:a8:f6:42:fa:c6:39:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:47:05:25:41:5E:9E:4F:11:BA:E6:1F:77:7C:25:7F:33:DF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d9:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c7:28:52:33:2c:16:61:fb:b3:3c:63:24:c3:17:28:20:1f:
         9b:57:5d:fd:c2:62:9b:19:70:d4:83:be:60:34:82:5e:46:79:
         7d:bc:93:de:51:4b:4c:5a:b3:57:a4:45:8a:4b:35:2e:fa:9e:
         3f:80:4e:c7:ec:48:23:93:ba:13:35:90:6c:0e:d6:20:bd:82:
         55:39:e2:34:53:a0:bf:fa:93:af:88:89:a1:94:81:58:7c:39:
         13:55:8b:fb:09:d4:25:75:22:cd:75:ec:89:3d:37:fd:bd:6e:
         52:3a:92:a5:66:79:42:9b:41:0a:90:be:9d:67:f0:7d:f8:5c:
         a8:e0:9e:63:fd:16:84:c2:5b:e6:0f:15:10:22:cf:e5:21:28:
         ef:ed:df:b1:1b:4a:ee:fa:8e:eb:25:86:a2:df:10:fe:fd:60:
         12:d5:19:89:00:c2:6c:6e:93:40:1f:72:f7:bb:ed:95:71:be:
         70:56:9a:03:bc:fe:80:f8:87:8d:f2:ee:4e:9a:25:4d:a7:ed:
         e0:23:a8:6d:7c:4e:4a:6c:bf:a5:51:d5:fa:d6:6b:e3:48:90:
         26:fc:2c:38:a0:03:3a:74:14:42:a6:e6:30:1f:4c:76:93:39:
         44:a9:ca:bd:cd:16:d1:ff:20:7b:44:ca:7b:11:d3:84:9f:ec:
         dc:60:2b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:37:27 2026 by rpki-client