Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
File:                     4c5676ec-271f-350c-b2f3-e074761d13ff.roa (raw, json)
Hash identifier:          EY0leCfm5ttO1nxfiS+Q/Km6mNBCnwOrCVScpTwKNtM=
Subject key identifier:   E4:88:3D:42:BD:8D:57:2B:68:F7:65:A9:DE:15:0A:C6:23:B2:56:42
Certificate issuer:       /CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
Certificate serial:       010D0C9F4328584DDD208395A520B7819B795A00
Authority key identifier: 7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     29769
IP address blocks:        2602:f8aa::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:83:95:a5:20:b7:81:9b:79:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=5f8a8579-3005-4add-b8af-e33111c55e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:e0:84:5d:69:20:c2:c7:0a:39:01:f2:3c:
                    3c:a4:3a:cf:c6:af:ef:f3:61:d4:f5:d0:c9:9a:73:
                    6e:79:5c:25:f7:53:72:1c:52:52:04:88:36:05:ee:
                    91:1a:1c:35:10:dd:33:be:34:01:af:9d:66:95:ab:
                    01:63:03:62:6b:16:03:2a:ba:15:b2:a3:e5:ff:c0:
                    09:57:74:54:cf:c8:e5:a5:28:2d:64:0b:e6:45:c1:
                    85:f4:a1:2b:47:e1:86:4c:5a:e2:2e:e0:3c:c2:ec:
                    03:d0:48:7f:2e:7d:3f:e1:0b:35:09:0a:ef:d7:06:
                    2c:2e:48:50:1a:39:a9:57:bb:72:e2:74:cc:68:e8:
                    69:44:22:fd:60:b1:b2:1d:6a:49:82:c5:6c:92:85:
                    08:b5:f5:0d:4b:f7:b0:e1:e1:b5:09:34:f8:25:6b:
                    9c:fd:c0:56:fc:b6:7a:81:40:f8:e2:01:fb:6a:b4:
                    fc:13:3f:57:29:6a:9c:ef:51:be:f4:46:cc:c5:90:
                    a5:2a:a4:91:e1:b6:b1:19:be:58:b5:53:b7:ac:b4:
                    d8:0e:93:de:3a:a6:ff:79:62:7b:3a:e0:34:8a:13:
                    04:0f:61:53:f8:eb:c9:6d:09:9e:c9:ce:84:65:b4:
                    18:6d:22:48:58:c0:ba:6a:f6:08:b9:9f:1e:c2:da:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:3D:42:BD:8D:57:2B:68:F7:65:A9:DE:15:0A:C6:23:B2:56:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl

            X509v3 Authority Key Identifier:
                keyid:7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:63:c9:f0:a5:2a:8a:34:72:14:93:64:46:10:ff:53:1e:
         48:e4:2c:2e:8f:5b:c0:da:6f:5c:0c:b3:aa:fe:bf:56:73:e4:
         59:5e:dd:1f:63:bf:09:d9:29:46:cd:e0:ee:84:c8:43:6d:f5:
         77:7d:56:db:bd:25:c0:e0:8b:f9:76:5e:f0:0d:6f:01:eb:47:
         06:bd:3d:b5:79:49:2c:af:8e:96:bb:ea:ff:5a:40:4a:96:00:
         1c:72:02:aa:03:fb:23:ce:4b:76:67:21:84:ce:8b:34:51:80:
         8a:3b:21:da:42:54:30:c3:0d:1f:44:29:d5:8c:b6:ed:da:a6:
         ab:86:89:7f:95:53:22:ad:5f:48:53:66:48:83:9a:45:37:b4:
         d7:c0:84:cf:a1:11:f2:f3:3f:3d:df:8a:2d:b6:38:04:f4:67:
         fe:5c:42:29:1a:69:84:6d:9e:a8:e6:8a:fd:fd:01:12:e2:f5:
         9b:32:2c:6e:9d:10:0b:58:13:6b:17:53:67:4a:40:92:14:b6:
         af:14:fc:54:ad:db:5d:17:81:b5:7a:36:6c:e6:93:34:af:87:
         ce:87:eb:17:8c:f1:6d:e6:3a:87:8d:d7:e0:6e:63:3f:51:01:
         08:82:cc:22:39:82:36:5e:db:5d:30:74:a7:d9:1b:d9:c4:12:
         7c:8f:5b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:04:11 2026 by rpki-client