Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/99d8a592-4034-3bf7-a511-b0ceb7269297.roa
File:                     99d8a592-4034-3bf7-a511-b0ceb7269297.roa (raw, json)
Hash identifier:          JJvyNK7GfXJ1euhZ8wI0pHqL/WTEwafsQh1VY5WSPJ8=
Subject key identifier:   1C:2C:7D:0E:7A:89:23:91:27:5A:5F:F1:A1:9B:7C:1F:9C:C6:EA:6A
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584E0435EE4098DE591BCDA57F40
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/99d8a592-4034-3bf7-a511-b0ceb7269297.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     209542
IP address blocks:        2602:fa92:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:ee:40:98:de:59:1b:cd:a5:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=e5c63f93-fa10-4c1c-864e-6427ffdfb264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:e1:cf:f1:0b:da:74:fa:83:c5:0b:1f:38:
                    5a:e7:0b:94:1a:02:78:90:93:8b:6d:aa:ec:bc:03:
                    f5:a3:14:76:8d:41:e6:2e:6a:a8:d6:82:ac:db:29:
                    b0:2c:d5:11:8a:e4:f4:0f:15:1f:cd:7a:cf:e4:e9:
                    fb:3c:1b:4f:22:a6:31:4e:e9:77:c0:9e:d1:f3:c7:
                    df:be:ae:3e:17:41:92:c9:9e:03:ff:59:aa:1d:aa:
                    f6:e1:bf:7a:60:92:d2:6e:8e:26:d5:d8:06:a3:13:
                    61:4c:b0:48:5c:49:6e:1b:94:4b:c8:1b:19:29:78:
                    89:b1:61:87:ef:1c:d1:b9:eb:a1:c7:e8:7c:20:27:
                    95:22:6c:da:91:2a:a5:8c:65:43:72:e3:02:17:4f:
                    3d:ec:18:02:44:af:bc:17:f3:c8:03:4e:1d:d0:e2:
                    f4:af:84:44:e9:d3:ea:af:7f:dd:9b:cb:13:af:c3:
                    5a:51:7e:08:aa:24:70:22:cb:08:54:37:1a:f7:1e:
                    9d:9a:2d:c3:dc:fc:a7:6c:26:68:81:00:76:76:b8:
                    e6:ae:5d:eb:08:ff:a0:94:76:3c:4b:1c:e0:9c:58:
                    de:3e:6b:8d:04:36:18:b1:8e:07:4a:71:b1:6b:c2:
                    dc:7f:93:5f:99:40:1d:79:c8:10:b7:ea:d5:c2:16:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2C:7D:0E:7A:89:23:91:27:5A:5F:F1:A1:9B:7C:1F:9C:C6:EA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/99d8a592-4034-3bf7-a511-b0ceb7269297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:3d:16:6f:3b:a5:22:cd:79:c7:4f:6e:e8:eb:2d:18:fe:
         70:bd:ca:ae:64:12:93:3e:95:52:85:c7:a8:94:37:cb:a6:5d:
         80:ab:53:7f:b3:8d:18:26:fd:63:46:ba:0f:7c:09:8a:15:45:
         ee:04:39:7d:9e:b4:c1:ea:a9:dd:37:c8:b8:66:41:f6:39:5e:
         9f:d0:50:09:e2:54:cc:89:39:b0:6b:40:02:b2:f6:41:cf:4e:
         90:3e:d0:2d:49:e9:c1:ec:53:89:f5:c9:2b:70:ca:76:b6:77:
         e2:54:a6:91:c7:4b:7a:16:ea:80:9b:77:ab:a8:2b:7d:95:17:
         19:d0:66:b7:5b:db:e9:39:9d:a0:1a:eb:b0:62:03:df:00:7d:
         36:f2:36:ef:c6:80:42:7f:6a:a8:fc:67:06:db:4f:3a:fe:d3:
         a4:57:0b:31:b8:fb:c2:96:cc:f1:e9:d3:9a:2f:4f:94:50:96:
         ec:37:69:19:09:3c:b2:04:87:30:c1:28:4d:38:a2:d7:e6:53:
         e7:6b:83:dc:2f:18:21:22:c0:45:3f:78:c3:32:44:cd:f0:ee:
         a8:22:62:90:b4:b9:7c:4c:58:ab:c8:bd:37:3a:47:1e:9e:01:
         9c:01:ce:6e:3a:60:dd:d7:24:3d:00:1f:1a:7f:c3:0a:d8:9a:
         56:b9:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:11:56 2026 by rpki-client