Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
File:                     cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa (raw, json)
Hash identifier:          r81ONEKsWvslp8aehDcIC4IUkULB9lOuvMjIE4UcyWE=
Subject key identifier:   3B:90:D3:2D:DC:E8:F2:7B:69:46:65:4F:39:28:43:18:35:45:D3:11
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584E04360A4DCD990CB3AF850580
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     8796
IP address blocks:        2602:f7c2::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:0a:4d:cd:99:0c:b3:af:85:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=d25971b0-b476-4d5f-8316-79bd5b389a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:38:d3:b0:2f:b1:82:fe:c7:2b:3a:d7:3c:
                    7d:5f:a8:db:8d:ce:4d:4a:b6:ee:56:78:09:38:75:
                    ef:2e:af:85:38:6c:32:3e:30:2c:7c:95:f0:ce:fc:
                    4d:03:5f:ee:9f:26:26:e7:67:dc:22:ab:f2:4e:1b:
                    87:4b:00:49:96:b2:66:72:84:79:8b:cb:09:10:64:
                    62:8f:95:46:0a:ce:a2:07:03:ab:e3:30:20:af:f8:
                    b4:43:11:c6:2c:72:ce:d6:95:1a:d5:92:7b:2d:23:
                    0a:03:18:18:71:57:d6:ed:8e:73:b3:32:5d:d6:a1:
                    18:ea:cd:12:04:6d:df:24:cb:07:a2:01:32:f0:45:
                    87:0b:e3:07:45:7a:8e:48:47:da:e2:10:99:ae:96:
                    fb:68:85:d3:37:c1:ef:d1:90:aa:70:00:cf:cf:5f:
                    6d:06:77:e6:65:2e:ca:d5:13:7a:04:e7:4c:e4:68:
                    55:4b:f4:3d:00:2f:05:71:e9:eb:b3:3e:ec:63:ad:
                    6d:d3:1e:77:ac:7c:01:dc:bb:58:1f:da:35:6d:b6:
                    10:80:c3:db:a8:fc:b5:31:87:b7:90:fb:66:81:14:
                    c8:1e:50:68:d4:91:3e:89:85:7a:29:06:65:01:37:
                    73:3d:b7:91:d4:55:8b:49:b1:86:2c:e2:5a:67:6f:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:90:D3:2D:DC:E8:F2:7B:69:46:65:4F:39:28:43:18:35:45:D3:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:95:f0:e7:c8:0b:34:14:80:22:b8:7b:43:f3:f9:0b:99:69:
         9c:91:90:f6:ed:01:2d:40:36:90:ff:ce:d1:b1:cf:0f:c4:fc:
         0b:4f:29:45:33:94:0b:91:e6:57:66:7d:c5:e0:47:93:cd:a6:
         d7:46:81:a1:fe:76:83:b8:94:f1:d9:21:f0:97:ac:35:35:3b:
         45:58:ce:c9:d2:be:c3:9c:30:de:73:1e:e4:df:ae:32:93:46:
         10:9b:f2:9e:19:c7:dd:83:90:31:2f:9b:34:20:5c:f1:8a:3f:
         2c:70:a0:ea:9e:41:d0:e9:e2:97:f8:f1:af:ef:17:74:0b:50:
         40:37:4a:2a:d7:ec:ab:25:89:dc:9f:cc:0c:fc:d2:df:c4:49:
         8e:4b:3c:61:74:b5:5f:aa:e5:10:65:96:72:04:75:e1:f7:a6:
         f1:54:4c:30:80:f1:ee:46:0b:03:63:4d:4f:04:ea:fb:a5:8b:
         02:37:cc:9e:d9:48:5c:f7:af:ed:8c:5c:56:87:99:db:e7:f7:
         a5:52:08:a7:33:c6:3e:cf:9e:71:35:e5:82:22:37:83:14:b4:
         54:13:6d:02:e5:22:58:9c:23:70:c9:cd:79:ea:9a:f3:f0:49:
         a8:57:19:fd:ea:c2:1b:37:00:6f:41:b5:52:4f:84:09:6e:57:
         e7:09:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:28:21 2026 by rpki-client