Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
File:                     5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (raw, json)
Hash identifier:          tHgVgifYoPvKLojjrDbbOmVsjarBGzlg2N4Z+J2APN8=
Subject key identifier:   C8:F3:08:F7:F3:13:F4:1B:57:50:80:0F:53:31:EE:E2:52:A6:17:DA
Certificate issuer:       /CN=ac870f3e-b014-4387-bb59-63f4192b5665
Certificate serial:       010D0C9F4328584E482487123C6CC82BC4AB2800
Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     395400
IP address blocks:        2604:49c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:87:12:3c:6c:c8:2b:c4:ab:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=a02f8d2b-94f3-48f7-b51a-e07378ef5038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:f2:9d:77:26:d5:fd:42:a5:3f:ca:5b:5a:
                    ca:70:ca:35:5c:5a:a1:20:26:ba:5e:f7:93:ec:2c:
                    b1:df:2e:96:7e:ef:fc:29:55:f2:ff:90:e7:5f:e9:
                    22:5a:04:19:fb:1b:0d:4b:7d:a5:0a:49:2e:b6:94:
                    5a:de:c0:21:e1:bb:da:f2:00:75:90:43:ad:03:f7:
                    50:e6:94:02:7e:05:1d:af:f1:c9:43:df:f7:5a:ca:
                    02:29:b8:e9:43:e5:2c:10:57:2e:38:5c:94:76:ea:
                    0b:b3:80:4f:91:ad:73:ea:b7:30:d8:0a:e3:80:4f:
                    91:60:ad:71:f9:aa:2d:c1:b3:4f:1a:68:25:3e:ce:
                    17:63:ab:95:cf:16:fe:b9:8b:34:9f:bd:f4:db:3f:
                    64:5b:1e:25:40:b7:c7:ca:61:c6:ce:50:68:14:59:
                    e6:39:ad:fe:d6:e8:d9:2c:cf:3b:9c:24:ed:91:f6:
                    b8:dd:c6:75:f7:4e:c0:14:5e:a1:66:db:9b:5b:7a:
                    ee:c1:39:d0:ef:9f:a6:9c:94:90:27:69:2a:74:3b:
                    be:66:74:2d:b0:0a:0b:91:40:65:b7:c8:ac:14:f5:
                    6a:ab:ae:a8:a9:22:29:85:21:67:30:a5:6a:55:d6:
                    57:39:34:2d:38:94:49:29:82:7b:47:08:6d:61:81:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:08:F7:F3:13:F4:1B:57:50:80:0F:53:31:EE:E2:52:A6:17:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl

            X509v3 Authority Key Identifier:
                keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:49c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:52:c1:5e:a7:59:02:5c:d1:f3:95:e8:ea:f6:8d:94:21:
         a7:a0:7b:06:59:03:94:f9:a9:07:41:36:57:5a:b1:87:27:fb:
         fa:a4:3e:ad:48:8a:fd:3b:cb:75:88:30:c9:0f:08:71:9d:2b:
         ce:f9:02:ac:37:dd:a9:01:13:92:62:61:89:c1:94:7c:92:f2:
         f4:ae:23:9c:50:2b:ed:67:b7:14:19:72:21:51:c2:31:c5:4f:
         bf:15:87:54:9d:4a:0e:00:00:1a:28:2b:c8:4a:7b:8c:fe:59:
         7d:61:c6:db:f4:8c:49:50:b1:b7:8c:f9:6a:98:64:e6:7a:f3:
         19:bb:1a:1b:f7:2c:fd:60:70:9b:12:a7:66:23:62:dc:ab:cb:
         65:b2:14:86:4c:ac:6f:82:a9:ca:5c:23:ac:7a:a6:8a:03:57:
         f9:ef:85:69:66:df:93:75:ca:52:67:07:18:ac:b2:9c:46:85:
         96:ab:79:44:27:f6:7f:e6:e2:76:13:3d:d7:67:95:e7:8b:4e:
         28:96:ee:99:a1:a2:54:3b:6d:6d:c8:53:8b:9d:91:a4:0c:1b:
         ba:11:b7:54:53:67:ea:33:bc:5f:cb:61:79:35:d7:76:da:26:
         86:fa:0d:41:c1:ec:21:73:06:b8:a1:fe:df:fe:20:6c:81:15:
         43:4a:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:17:37 2026 by rpki-client