Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/97f41919-c212-3c06-8ca3-6cea7d1d549e.roa
File:                     97f41919-c212-3c06-8ca3-6cea7d1d549e.roa (raw, json)
Hash identifier:          R1xmC8WQFjxD/kODO6s/yOi8L3bmFyPgD0EUFd7wYHc=
Subject key identifier:   5E:4E:68:A6:E5:95:FC:04:34:FE:45:B2:90:1A:FE:4D:C4:0D:CC:28
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584DFBD5E4DC3FA782D46C75EE80
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/97f41919-c212-3c06-8ca3-6cea7d1d549e.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     26768
IP address blocks:        2602:2a4:9c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:e4:dc:3f:a7:82:d4:6c:75:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=7aa704f1-fbb9-45e5-be21-3d061f820437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:0c:36:1d:10:fd:94:08:10:e3:22:c9:24:
                    25:1c:49:0c:36:15:db:f3:f3:c7:ff:74:3f:c3:74:
                    61:bc:7d:bd:c2:bd:6c:15:6e:a7:d4:ea:48:22:92:
                    ff:55:0b:b1:f1:71:23:12:07:d2:48:51:d6:8d:e7:
                    47:ee:17:e2:4b:b8:2b:eb:93:d1:15:8f:04:96:70:
                    0c:17:c4:05:44:ae:0c:41:73:33:41:8f:0c:de:34:
                    62:99:3e:fb:e8:49:bc:cc:be:7d:07:45:a6:ca:0f:
                    34:18:6e:1c:9f:d4:5a:fd:55:46:bd:4c:3b:3b:29:
                    b2:4b:47:65:8b:ec:67:0e:07:71:da:c0:73:f8:90:
                    7f:40:a6:10:cb:97:86:27:c6:9f:93:0d:d2:db:1e:
                    7f:09:26:a8:b2:e6:f4:00:6a:3f:65:95:e9:62:34:
                    86:fc:e6:c9:00:1b:ed:bd:74:e2:14:37:85:c2:ad:
                    e9:c9:dd:1a:b7:50:ef:f5:cf:2d:dc:ad:6b:0a:da:
                    7d:b8:53:cb:bc:4f:bb:a0:0a:87:09:c5:20:70:f6:
                    66:02:22:35:e2:43:11:f3:af:68:d8:67:30:f4:48:
                    1c:bb:41:9e:25:75:2b:67:7e:26:82:a4:67:02:b7:
                    d5:72:fc:68:73:d6:66:0c:3d:f6:f1:f7:b5:26:44:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4E:68:A6:E5:95:FC:04:34:FE:45:B2:90:1A:FE:4D:C4:0D:CC:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/97f41919-c212-3c06-8ca3-6cea7d1d549e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:38:da:ef:cb:96:8f:1e:ab:d0:9a:19:98:58:b5:51:c8:
         f1:d6:1d:09:72:c5:38:7c:0a:6d:f0:7a:dd:9a:7f:94:62:1c:
         5e:a7:60:e9:c7:0d:5d:ee:ea:9f:e3:b6:3c:f5:b5:22:f1:2f:
         c4:83:b5:ed:87:ca:39:0b:36:fd:19:17:3e:35:da:72:85:0d:
         87:25:f5:58:8e:ba:48:59:89:b0:ff:92:01:e6:4a:25:03:ee:
         5e:24:8e:ab:b9:6f:27:bc:b2:b3:98:c5:c5:51:a5:24:22:9e:
         67:26:fa:cc:11:4b:3a:ad:79:70:51:52:c6:76:a8:88:b5:54:
         a2:f4:f5:05:3a:8c:32:90:70:59:cd:80:64:1c:38:e8:77:ba:
         65:ba:c8:0f:bc:e6:50:41:31:f6:d5:7b:5b:ce:16:52:ef:0a:
         2a:b8:31:1a:8d:4a:7e:3d:b3:39:2f:e2:42:e6:d0:a5:94:91:
         3e:01:53:8c:63:90:e7:93:d1:6f:56:28:8b:a4:6a:f9:89:28:
         b9:b3:95:bf:e2:08:ab:4d:1b:05:1b:ad:18:48:28:d2:d6:3e:
         a1:e2:5c:20:34:28:7f:46:1f:e0:59:45:5b:91:56:38:68:e1:
         16:b2:3a:ca:ef:b6:6a:9c:63:f0:91:5b:fe:03:4d:1a:62:fd:
         0c:40:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:12:49 2026 by rpki-client