Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4caf6023-3853-3da6-8889-75c7be2a7114.roa
File:                     4caf6023-3853-3da6-8889-75c7be2a7114.roa (raw, json)
Hash identifier:          C57utgq6vb4fbQAtukVNxCh7VIV/8N7zgLaxA8O2TO4=
Subject key identifier:   98:29:02:3B:E2:D4:2E:8A:15:98:A3:40:95:E6:BD:4F:EA:37:44:49
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584DF4DB9D4ED8FA879B8F3E0E80
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4caf6023-3853-3da6-8889-75c7be2a7114.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     16740
IP address blocks:        2602:f5c1:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9d:4e:d8:fa:87:9b:8f:3e:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=189ed7d0-dabe-4bc5-a104-639eb5d12241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:97:fe:7b:19:7b:18:93:82:74:fb:a5:ba:
                    ee:73:59:3a:cc:e7:eb:44:af:7b:fc:9a:d1:c2:08:
                    58:24:7c:83:28:b9:57:bd:35:3a:28:5a:15:f9:b5:
                    07:44:45:94:7d:ad:c7:7f:49:34:69:ab:c8:e7:f8:
                    e0:2b:d0:48:dd:7f:6a:05:33:ff:41:0a:b2:f1:cd:
                    2f:8d:d7:f8:4d:44:1b:8f:7c:ba:53:98:66:e5:25:
                    b2:0a:c7:b8:90:75:3c:cb:cd:41:02:52:e5:0b:b8:
                    2a:89:2e:3a:1c:c5:20:73:d8:7d:2d:a5:ef:04:d5:
                    fa:31:d3:00:b6:af:2a:f4:5a:21:ad:42:95:c9:7b:
                    fa:09:41:2d:23:c2:b9:f9:27:b0:9a:95:93:50:ae:
                    3e:8b:b7:97:fc:15:f2:44:58:bc:d1:03:bb:1d:fe:
                    fb:89:d3:41:58:10:0f:bb:25:dc:2c:dd:7e:6f:91:
                    09:91:2b:d2:ee:cc:7d:71:ee:47:1d:c5:b3:f5:06:
                    1e:8b:e4:4a:71:84:42:f6:03:6e:bb:5a:5f:1c:37:
                    1e:92:12:85:c3:62:8a:21:c5:20:48:9a:3b:8d:73:
                    48:2c:bb:88:07:4a:54:f8:0c:8b:d3:a4:50:3c:c8:
                    71:6e:1f:8e:7e:81:74:57:87:1b:5e:7a:bb:58:59:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:29:02:3B:E2:D4:2E:8A:15:98:A3:40:95:E6:BD:4F:EA:37:44:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4caf6023-3853-3da6-8889-75c7be2a7114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:be:bc:ac:c4:6b:f7:6e:23:7a:76:be:d0:b4:77:ae:58:99:
         48:cd:60:97:03:98:48:68:3f:c7:28:90:a8:f6:b0:47:cf:de:
         5e:42:fc:cf:8a:ec:a8:dd:14:a5:9e:75:24:92:74:51:95:dd:
         43:b5:54:43:f8:e1:37:d9:2e:15:4c:fa:b1:c9:72:54:a0:8f:
         0c:4e:b9:52:e0:cd:cd:32:35:2a:0a:af:38:00:eb:8c:29:c6:
         e2:5a:0b:22:d0:d5:66:e5:8b:80:66:4c:90:28:be:11:9a:68:
         6b:a3:30:ff:13:61:33:48:dc:a2:95:78:67:94:7d:44:a1:a7:
         4b:92:8d:8e:6d:48:14:31:22:75:37:9e:d0:06:d2:6e:84:b1:
         ac:ad:f1:5f:4b:dd:bf:b5:f1:75:aa:4a:bc:8e:4e:59:95:b4:
         86:85:2e:5a:0b:0a:7c:a3:56:9d:fe:39:07:18:06:f4:57:f3:
         31:dc:65:89:94:90:ae:e3:78:ba:19:62:a0:12:2d:a0:36:7b:
         cc:1f:3b:df:fe:0d:0b:b1:c4:e5:bc:18:18:5a:92:9f:cc:d3:
         3a:de:70:01:79:b5:f4:8d:62:be:13:b1:09:a5:ae:7a:4e:d0:
         16:bf:7b:24:fe:4f:fb:23:ea:37:6e:01:f8:60:fd:0f:38:66:
         54:59:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:29:02 2026 by rpki-client