Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa
File:                     c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa (raw, json)
Hash identifier:          pn8Gi03LS4/W1nz7rRXSO4I+dI0LpOwf8DF65FmxX6U=
Subject key identifier:   C7:4E:84:E2:55:81:28:95:4A:5B:81:12:42:16:99:C8:DA:92:B5:F7
Certificate issuer:       /CN=22030947-2334-4dfa-a1e3-0e4e83260593
Certificate serial:       010D0C9F4328584DA81568F125DE233F0596DCC0
Authority key identifier: 90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     19285
IP address blocks:        2602:f6b2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:68:f1:25:de:23:3f:05:96:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22030947-2334-4dfa-a1e3-0e4e83260593
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=d5ffde75-e095-41c6-a682-972248ff0d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:08:43:b8:1b:1c:63:93:4b:d8:c5:68:a6:
                    23:7d:97:21:f4:7d:42:78:3a:f4:49:41:ce:5b:05:
                    b0:a9:69:8a:f3:87:de:62:2a:f4:85:d4:80:28:b2:
                    4d:04:e9:23:2f:fe:da:8b:8c:f9:65:91:8b:8b:58:
                    d8:cf:30:1d:f7:37:e4:4b:00:1f:b3:c6:42:89:00:
                    fd:81:78:7d:e7:39:46:4c:e8:6d:1d:97:05:cf:5d:
                    b2:98:57:01:ab:28:91:a3:2d:8f:d8:fa:88:d4:2d:
                    61:83:09:95:b7:14:5d:f0:05:a5:11:16:13:51:1d:
                    80:55:d7:af:04:e2:b3:42:af:44:29:71:6b:71:30:
                    56:3f:e1:2b:67:b6:21:d1:b2:96:0e:07:0b:48:5a:
                    26:bc:f5:3f:57:20:8a:da:4d:5e:1c:62:0e:fa:0f:
                    65:1a:d9:08:3f:2b:69:d8:03:45:6f:32:6f:f0:67:
                    c8:92:9c:da:59:23:ab:ff:a5:e2:1f:bf:c7:3a:48:
                    98:c1:21:c6:11:28:2e:fd:ca:56:5a:55:3c:4d:5d:
                    d8:e1:6e:35:47:f9:7b:ea:9d:24:de:21:40:60:b9:
                    44:17:9e:cd:b4:cb:7a:c4:0c:86:ac:d2:81:d7:0d:
                    e6:a0:35:88:91:ee:44:c8:bb:75:7c:35:86:32:dc:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4E:84:E2:55:81:28:95:4A:5B:81:12:42:16:99:C8:DA:92:B5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl

            X509v3 Authority Key Identifier:
                keyid:90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:37:2f:0d:53:6a:03:0f:bb:40:fd:d0:d3:0a:3a:6c:d6:af:
         e3:33:b0:75:67:4a:05:a5:02:bd:fe:69:b6:9b:5f:35:50:de:
         b3:7d:9c:dc:59:14:50:54:32:14:01:9e:e9:48:f7:7f:2b:fb:
         f0:88:e4:75:30:fc:c2:83:db:39:bb:18:ab:3d:d7:0f:67:7e:
         44:8b:76:02:49:68:76:a3:35:36:af:6d:86:26:f9:d3:3f:81:
         6a:c0:44:a7:07:37:0a:4d:49:d5:5c:7b:fb:8b:fa:71:c9:23:
         33:43:7d:1a:75:6b:22:5f:31:2b:a0:11:7a:f0:58:b0:78:73:
         86:3d:3c:9e:62:6e:9f:86:33:c2:ab:a3:09:86:d3:03:78:69:
         fd:70:b8:f4:7d:49:ee:9c:45:12:86:c0:6b:d4:28:63:6f:6b:
         96:b1:a1:e3:6a:c5:4a:fe:78:44:21:20:d7:78:08:c3:06:12:
         4e:32:02:60:86:9f:d6:15:6b:25:02:b7:ae:4c:51:0e:47:8c:
         e7:77:f9:01:6f:34:6f:1b:76:77:d1:77:31:f2:7e:8f:de:7d:
         9c:12:e1:1e:7e:51:b4:1f:ad:96:6b:ea:1a:03:94:5b:95:84:
         33:07:1f:c3:22:c3:30:6e:ff:35:40:06:8b:32:d1:90:68:3d:
         5c:f7:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:31 2026 by rpki-client