Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
File:                     ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa (raw, json)
Hash identifier:          x3jdY+37BTIeO7OLhiIf4EBWMccFq958m6JHxokKP8k=
Subject key identifier:   E1:3B:11:25:65:94:BA:34:BC:5D:08:F7:1E:EA:9B:E7:86:52:CC:F3
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584E104EE93C2ACABBAC4FAA0300
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     22296
IP address blocks:        2602:2e5::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e9:3c:2a:ca:bb:ac:4f:aa:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=cc1100ba-3dba-40e3-ac3f-c640f215efc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:69:7c:e3:ad:40:ff:a5:c0:18:17:f3:25:
                    f2:93:aa:e8:31:9f:34:4e:6f:f4:82:97:69:5e:d7:
                    6b:d0:19:1d:26:0b:67:54:65:af:f6:a9:99:53:e5:
                    a7:fa:5c:41:54:3f:b8:9b:4e:eb:54:1d:96:b0:96:
                    54:a8:07:e8:8a:38:73:67:9d:a7:91:9d:04:d3:1d:
                    d9:96:2c:b3:ec:be:41:d5:ea:bd:b2:d1:30:85:cf:
                    59:a2:11:77:e2:f6:ee:45:ab:ac:e7:4b:a4:cc:e3:
                    3e:c8:ed:4a:e6:15:80:ae:70:5b:cf:64:cd:8b:96:
                    c8:fa:a9:fa:0d:9c:64:76:b6:91:cd:cc:bc:50:95:
                    33:08:72:a1:ec:a3:ac:de:ed:3d:dc:a0:6e:88:aa:
                    0e:cb:02:51:f4:b4:dc:cd:dc:4b:55:83:bf:2a:a2:
                    f4:a3:a3:df:a9:ce:ad:55:8e:18:ee:97:c4:6e:8b:
                    f9:1d:26:ce:0c:90:7f:e7:88:8d:e2:a7:d2:01:d3:
                    6d:51:48:be:23:67:e1:c7:2f:8f:28:37:b3:c3:56:
                    90:de:f7:1a:1d:dc:9a:c4:23:4a:07:34:32:51:87:
                    d0:8c:bb:01:52:25:a0:cf:98:de:81:86:23:6c:bc:
                    27:c0:8c:d3:39:fc:da:95:31:14:cc:1d:1d:d9:94:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:11:25:65:94:BA:34:BC:5D:08:F7:1E:EA:9B:E7:86:52:CC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:01:e3:7e:7f:ce:2a:7e:0e:3f:3e:6e:f5:71:a2:c6:e7:5c:
         e6:8f:5d:18:78:a8:68:77:a9:e1:cf:9a:fb:96:91:b0:75:88:
         e9:59:40:f4:bc:09:95:dd:4f:98:70:3b:77:f8:a7:ae:ba:06:
         1b:58:08:89:b6:63:9e:98:21:9a:84:21:5a:2a:d3:43:c5:8f:
         9d:1e:3b:28:05:21:b7:0e:9d:47:8a:ce:69:79:6a:60:13:55:
         89:7a:a0:f9:d0:87:ce:0f:d7:28:66:06:44:b0:a8:58:b1:94:
         81:a4:e1:1b:98:3e:56:5a:67:7e:f7:f5:cb:22:9e:ab:2a:38:
         56:70:f9:da:cf:dc:34:8f:20:ac:f4:d5:a4:72:cc:a9:4a:b3:
         5b:bc:5b:03:23:a5:fc:6d:12:eb:eb:41:6b:40:e1:ae:f5:2f:
         bb:16:f3:ad:59:9d:c2:27:df:ea:c4:1e:60:f9:c8:19:04:da:
         d2:f7:f8:e8:57:17:47:4e:a5:5d:a0:0f:32:dd:4e:31:30:87:
         4d:6e:07:8c:3a:c7:0a:61:d0:63:78:1f:fe:f4:96:8c:8c:fd:
         ef:f6:cf:fb:a8:ca:e6:90:41:7d:af:f0:95:cd:18:9d:ee:73:
         27:4e:43:96:91:cc:41:06:cd:0d:b6:56:40:c2:6d:da:f3:57:
         51:1f:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:48:45 2026 by rpki-client