Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/133eba74-e3e9-3b71-9c06-ec65304fddfa.roa
File:                     133eba74-e3e9-3b71-9c06-ec65304fddfa.roa (raw, json)
Hash identifier:          8ROhO3wGvivdjuaU2A741xNLgLWvCSTotS7OZKqIw1o=
Subject key identifier:   12:4A:45:B4:79:82:5A:48:4F:E0:D3:65:A5:A0:87:D2:9E:64:5C:7F
Certificate issuer:       /CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
Certificate serial:       010D0C9F4328584DE2B5ECD44047CAA5F8964240
Authority key identifier: 6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/133eba74-e3e9-3b71-9c06-ec65304fddfa.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     152697
IP address blocks:        2602:2e0:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ec:d4:40:47:ca:a5:f8:96:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=8031fe1f-230a-4670-ae5d-b52fac8dc91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:60:70:36:77:2d:d7:f7:cb:42:8e:18:56:
                    d9:b5:ae:ab:80:1e:c8:2c:b1:0c:72:82:30:a6:db:
                    7b:a9:08:92:3b:1f:e0:f0:98:ae:b0:da:4c:ca:67:
                    76:0f:46:6a:b8:3e:68:f9:d7:dd:29:c4:f7:dd:5d:
                    d9:c2:46:ea:b0:c2:0b:04:ba:b2:29:85:fa:93:ad:
                    5f:93:d4:5d:a8:74:65:05:13:59:87:9d:59:51:ef:
                    42:14:3a:66:3d:39:20:39:74:74:b9:dd:25:fe:e3:
                    9a:9a:ee:01:32:a4:b2:0a:7f:43:95:4e:1e:02:65:
                    0c:2b:54:ad:83:f1:3d:8a:08:a3:c0:dd:e5:c2:91:
                    30:7d:67:6c:50:95:1e:b7:1d:d1:c0:7d:f7:bb:2b:
                    a6:35:ad:c3:54:4a:60:7d:78:32:6d:83:99:08:6b:
                    18:04:cb:6a:8a:99:99:7c:b7:9f:8d:d7:95:6c:00:
                    67:69:62:0c:9e:45:fa:c6:65:55:4c:71:17:ed:8e:
                    4a:da:c3:cd:0c:b8:27:d2:1d:84:e3:2e:e7:6f:5e:
                    a0:5f:4d:56:6a:4f:86:bf:26:50:7f:f7:dc:26:3f:
                    f5:ad:33:4f:3f:a7:22:ee:5c:9c:92:a2:87:91:d0:
                    f3:69:f9:ed:60:42:21:a9:c2:fe:2e:93:fe:f5:4f:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:45:B4:79:82:5A:48:4F:E0:D3:65:A5:A0:87:D2:9E:64:5C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/133eba74-e3e9-3b71-9c06-ec65304fddfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e0:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:de:66:10:00:7f:3c:21:6e:5f:37:5f:f9:24:c2:d3:cb:2d:
         54:9f:38:9f:d6:d1:25:17:db:96:b6:6e:c8:69:90:cb:1d:69:
         a8:13:ba:17:ab:9f:1d:31:89:ee:c1:e8:1f:7b:50:6b:3e:fb:
         b8:fb:b9:0a:4a:ff:53:fb:14:e3:09:2e:3a:c7:8d:46:3a:f6:
         7e:cf:24:33:fc:ab:93:a2:43:c0:19:08:bf:ff:31:d5:39:9c:
         48:c8:1e:b6:89:ee:bd:e6:c4:fa:18:ea:99:c8:3e:1a:45:0b:
         e3:5a:20:db:26:36:18:65:a1:ac:de:b4:c7:ec:aa:93:23:d6:
         ce:6e:7b:4a:51:17:67:54:99:d6:e0:0d:74:63:bd:4d:6c:13:
         6a:9d:e1:f1:fa:d2:e4:9a:b9:92:5a:9f:bf:6b:89:f3:55:a3:
         23:93:9a:f3:c2:4b:4e:48:7b:2f:6c:d8:51:d0:8d:09:c5:0f:
         e3:3a:de:52:e2:07:56:f5:50:bb:31:c5:50:82:27:6c:49:ec:
         83:10:d8:0b:7c:1d:75:54:00:1d:a3:45:66:a0:3e:68:d2:3d:
         70:35:1b:71:88:fe:33:8a:d6:37:77:87:29:8c:11:2e:49:43:
         dc:d6:9e:cc:b5:53:5c:68:f9:67:95:da:d3:30:94:39:7f:b8:
         ad:68:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:38 2026 by rpki-client