Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7ed59551-5e97-3468-99ab-9d77cf890684.roa
File:                     7ed59551-5e97-3468-99ab-9d77cf890684.roa (raw, json)
Hash identifier:          NPgZ0Ch99VvdKryp0H3dUCrtm/V4GOSM21ih42Si6LI=
Subject key identifier:   A1:4A:AC:5F:31:3B:66:A4:FC:A9:37:42:35:8A:B3:7A:1B:03:B0:89
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584DF4DB9D436F9AA9FCD01BCC60
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7ed59551-5e97-3468-99ab-9d77cf890684.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     16740
IP address blocks:        2602:f5c1:33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9d:43:6f:9a:a9:fc:d0:1b:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=6d1b72c4-0aec-4ba1-9753-ae298a051d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:08:26:c1:22:88:95:8b:34:67:43:d4:94:
                    6a:c0:77:8d:8d:36:eb:ea:7d:3b:c7:ab:5c:fd:0d:
                    a5:c2:73:45:d6:d9:96:f6:d8:81:eb:5c:41:a4:c3:
                    25:bd:eb:fb:b5:02:2d:0c:d4:39:69:87:62:e2:8b:
                    21:93:d4:80:c1:03:b0:1a:86:3d:ac:8f:a8:3a:fa:
                    b0:96:09:a5:6b:0c:f0:ef:37:52:a5:7b:fa:02:b8:
                    e6:f7:86:24:8d:b4:f4:b2:f8:c2:fc:9b:5e:3c:bf:
                    b7:4e:81:d5:d0:56:e9:be:61:e7:1d:34:91:83:c5:
                    6b:c9:e4:c8:44:e2:df:4e:c8:3d:e1:5c:88:de:24:
                    fc:b1:fa:08:99:14:dd:7c:ed:6c:ac:be:f4:7f:6c:
                    d2:00:7d:eb:5b:93:8e:bd:05:90:c5:a2:62:33:ea:
                    96:01:48:e5:16:bd:3f:a7:2d:ea:78:f4:7d:53:25:
                    44:a7:ee:db:35:b7:ca:71:e7:70:a0:6e:4f:83:af:
                    27:35:7c:00:ce:7e:49:df:e4:cc:18:3f:b6:ae:d1:
                    3e:6d:d4:74:ad:24:c1:bd:ea:03:21:73:ef:24:3d:
                    33:e2:6a:16:e8:fc:2d:00:b7:08:52:e2:87:e5:34:
                    90:a1:ac:33:4a:f6:a6:b7:4a:96:c5:ad:5d:ba:f8:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4A:AC:5F:31:3B:66:A4:FC:A9:37:42:35:8A:B3:7A:1B:03:B0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7ed59551-5e97-3468-99ab-9d77cf890684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:33::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:a1:c5:14:d7:11:16:34:0c:dd:4f:32:18:21:00:6f:d8:
         79:8a:d6:a7:2d:71:77:d2:35:4a:45:3c:05:53:77:02:66:a0:
         9b:92:0b:89:ac:e3:3c:f2:44:36:07:6c:59:86:ac:27:f8:48:
         8c:cb:16:c9:92:18:ac:8d:e2:45:f3:a3:a4:b8:de:be:ae:f5:
         5a:aa:fe:f0:99:6a:ce:dc:e0:e1:18:2a:20:2c:60:a3:ee:69:
         aa:29:51:41:8e:df:05:16:c5:7a:13:cf:a4:ad:2d:9e:fe:0d:
         31:6e:dd:cd:7f:3b:5d:24:fd:a4:88:60:5c:72:f8:69:d1:b3:
         da:79:fd:07:b9:33:c1:bc:e5:05:af:d3:93:87:e3:3a:5d:3e:
         83:3e:8a:06:b4:87:20:97:91:8c:54:6f:c4:fe:23:f4:6d:43:
         dc:75:b5:10:3c:5e:a9:30:00:37:29:9a:28:30:df:66:7e:b2:
         d7:fd:f6:ce:ac:0f:4b:5d:a4:df:22:4b:b7:cb:7f:a6:66:2d:
         2c:c9:75:59:5d:a3:97:6b:38:40:94:d0:ff:2d:cb:07:5b:11:
         9e:b9:75:8e:83:36:58:31:e7:d4:ac:ad:03:7a:ed:05:43:d3:
         4c:85:7f:4e:a0:7a:85:df:b1:b3:99:cd:14:ce:ac:db:95:0e:
         82:4a:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:28:50 2026 by rpki-client