Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa
File:                     5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa (raw, json)
Hash identifier:          s99uVQ3keV2E2s98WgZPcwMusjihsHOjLSgRBr33eiM=
Subject key identifier:   66:1C:41:E5:67:F1:85:66:73:4E:ED:43:3B:0E:DF:D2:F0:DE:D2:A9
Certificate issuer:       /CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
Certificate serial:       010D0C9F4328584E5084A28D3AE3624B77D94840
Authority key identifier: B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     394542
IP address blocks:        2602:f962::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a2:8d:3a:e3:62:4b:77:d9:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=1bcf8d44-6485-48e5-a0da-26a69d67bf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:30:7a:fe:42:22:1a:bb:be:a9:6e:65:73:
                    9e:80:88:2f:1b:3d:de:ee:33:7b:17:39:54:6d:8c:
                    2d:7f:d6:74:2d:93:0c:19:95:8a:54:c7:d3:5f:ad:
                    c8:38:29:9f:7c:b3:9b:9a:6e:dd:d6:3c:63:69:d9:
                    67:36:ce:4f:3e:e0:c2:c0:f6:d8:3c:df:ee:76:f9:
                    10:ee:6e:fd:73:83:4b:aa:e8:cc:89:4a:5a:a2:6c:
                    c8:90:c7:e7:64:d9:79:84:ae:9e:0f:36:67:fd:c8:
                    f7:62:66:50:77:d0:9e:43:53:a5:de:64:db:cb:d5:
                    b4:a8:c3:74:a4:d7:c8:0f:25:f3:c6:22:35:21:1b:
                    77:ba:da:ea:06:53:72:e2:c3:61:08:7c:6c:8a:47:
                    09:6d:6c:f8:f3:b5:4d:7b:58:7f:2d:8c:41:af:ea:
                    10:a5:61:0a:b6:f2:e4:c2:af:75:91:67:73:72:50:
                    41:6b:6b:a0:ac:59:f5:e8:5f:2b:6f:e6:e0:3e:46:
                    db:5b:84:db:12:21:53:8e:e8:60:88:48:86:00:f0:
                    d7:31:53:f4:d3:88:36:b3:9c:d2:54:0f:e9:06:19:
                    2d:8e:a5:dd:8e:dd:1f:8e:37:e4:fb:42:e1:f1:22:
                    c5:f2:b8:d9:b9:da:12:1a:ca:13:7f:f7:24:8e:f2:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1C:41:E5:67:F1:85:66:73:4E:ED:43:3B:0E:DF:D2:F0:DE:D2:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f962::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:86:d3:a7:57:2a:c9:67:0f:e4:7b:99:58:f4:9e:1d:79:dc:
         72:15:50:9f:cf:9b:a4:d5:e2:ae:fd:25:f8:24:b8:31:a0:da:
         0c:37:4d:25:97:ee:16:94:09:c8:c8:44:7c:00:13:e0:68:25:
         14:2b:46:72:9a:f4:0e:a1:b7:b8:11:68:74:5e:a2:f2:fa:2b:
         c6:c0:2d:c2:ec:b2:bc:9a:80:68:e4:23:f0:23:d4:28:50:13:
         ad:9e:58:21:55:9e:25:00:6a:e9:74:45:d7:98:ed:a9:fd:a0:
         8a:b3:83:cc:77:97:9b:b6:f7:02:02:b5:0d:3e:2e:8d:7c:6f:
         63:75:21:62:f3:1c:ea:73:50:f9:6e:bd:c4:68:d3:68:28:8f:
         0d:8f:0f:9f:11:32:b4:7e:5d:a6:24:d4:a3:1d:5e:4b:45:9e:
         8e:e1:36:54:1a:4b:91:2b:a9:04:7c:23:64:c8:f7:87:07:3b:
         4f:a6:f0:84:4f:b9:7b:47:1c:cf:57:8d:be:5e:ec:19:b2:0a:
         20:33:e7:2f:0e:ae:c1:45:d9:73:2f:e0:40:c9:ca:c8:3e:d6:
         d6:d0:1b:f2:3c:72:8b:e0:f4:dd:35:64:76:60:f7:03:f6:26:
         c7:3f:65:44:5e:08:b1:68:96:d3:85:fd:6c:ca:9e:36:9a:d1:
         c8:ae:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:02:46 2026 by rpki-client