Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d39e056f-6636-3559-a9d5-8a3dfccc7c16.roa
File:                     d39e056f-6636-3559-a9d5-8a3dfccc7c16.roa (raw, json)
Hash identifier:          qbVH1ln5Ch0I4qOl6U4F0zN8FAKtEi2fg3kggjZi1OA=
Subject key identifier:   2E:96:34:3E:57:13:FA:0A:BB:E3:F5:5F:15:DE:3A:8D:0D:0A:F0:3A
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584DE41B5B7A410EE4FF85C13D80
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d39e056f-6636-3559-a9d5-8a3dfccc7c16.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     401243
IP address blocks:        2602:2b5:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5b:7a:41:0e:e4:ff:85:c1:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=92368c22-bd8b-496a-9754-4c823cc05e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:be:eb:a4:9b:20:d1:53:a0:fa:47:d3:4f:
                    dc:31:d0:f8:3b:d3:54:f0:ef:a6:eb:c5:9b:3c:d3:
                    17:bb:bf:da:5b:5e:d8:11:8f:be:31:ce:2a:a0:9a:
                    10:c3:ad:7e:c6:58:18:66:18:2a:57:97:34:6d:be:
                    39:24:d3:d7:c9:45:32:83:66:89:6a:d7:1d:52:41:
                    e0:26:4f:d4:8d:a6:5f:6f:db:b4:72:58:19:5b:b0:
                    f7:b3:18:67:bf:63:98:5d:45:14:79:20:90:2c:04:
                    69:54:6f:5f:b5:1c:13:02:15:2e:38:f8:32:96:01:
                    c7:6e:3f:89:6b:fd:f7:e8:c1:30:b3:eb:f4:aa:1d:
                    71:a8:51:62:39:67:50:85:04:c7:2c:08:94:06:61:
                    01:ea:51:b2:12:7c:dd:64:51:05:7c:c8:7c:33:de:
                    c5:3a:1e:85:ff:d8:72:db:19:a4:71:e8:b9:3f:0a:
                    8d:eb:3d:3d:9a:52:22:e1:77:f7:a0:3d:12:50:2d:
                    ac:90:fe:2f:c8:17:09:ac:b4:7d:fd:4f:0f:a2:39:
                    f6:bf:88:30:53:27:1f:a1:b9:18:ec:15:c4:83:87:
                    80:6f:82:db:d5:d5:cb:bc:58:24:0f:92:8d:20:12:
                    90:75:3d:f7:e9:75:1a:54:f7:51:2b:68:31:1b:ad:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:96:34:3E:57:13:FA:0A:BB:E3:F5:5F:15:DE:3A:8D:0D:0A:F0:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d39e056f-6636-3559-a9d5-8a3dfccc7c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:40:5f:bf:c9:df:23:83:54:77:c0:84:f9:fe:56:91:f3:e8:
         fe:77:03:40:06:e1:a1:8c:38:74:f6:19:fa:7d:09:2b:78:48:
         e2:07:b4:5e:32:7e:96:17:54:4b:bb:8c:51:a7:95:35:5a:af:
         38:bf:e8:1f:c3:78:81:fc:20:8f:d6:13:36:3a:98:bb:3a:20:
         46:49:35:8a:fc:fc:84:6f:4c:7a:7d:17:6c:9c:e8:fc:8d:3d:
         51:17:64:30:57:b9:d2:48:f5:2a:77:cb:cc:ca:75:9d:83:ae:
         b9:5c:60:bb:7a:f1:bd:e5:88:a1:10:9d:2f:73:aa:ce:ee:0b:
         6d:8d:85:76:c8:24:57:c2:43:7f:ee:d2:70:8d:73:74:03:ab:
         a8:b8:29:f8:c9:7f:a8:e0:45:13:90:c0:01:2c:77:79:d5:8c:
         ff:42:b8:2d:9e:5b:0a:36:73:ba:5b:b8:5b:be:95:89:1b:2b:
         34:25:8d:fb:1b:cc:f8:e6:71:9c:02:e4:51:1f:fb:04:57:b7:
         99:d4:71:9e:94:23:57:cd:0d:14:ba:a7:56:9a:ec:2b:41:10:
         e7:12:76:cc:a2:6e:da:3c:3f:79:3b:e7:f5:36:6f:ec:10:f0:
         43:e3:a0:93:81:f6:21:f6:31:d7:40:6a:b5:0e:3c:67:d0:e1:
         bb:34:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:48:22 2026 by rpki-client