Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa
File:                     638c64fe-64fb-347f-be0f-66a64d56454e.roa (raw, json)
Hash identifier:          /LBiZ8cIeKI2n2IFQwvRgSjsYTJkRIFP1fyinHO1w/g=
Subject key identifier:   1E:13:55:A4:25:3D:B2:62:FA:74:D4:7F:A3:39:93:BA:10:B5:B6:19
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F4328584E921FA36B7726C04C958ED800
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     46432
IP address blocks:        2602:fe59:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a3:6b:77:26:c0:4c:95:8e:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=e5700b96-1dbf-4424-a545-23d9d4810ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6a:65:3a:9e:f2:01:ca:17:05:19:b4:1e:56:
                    26:30:c4:19:6a:07:f5:2f:75:87:2d:4f:ba:2f:28:
                    31:52:d3:f1:9b:a4:3c:ea:e5:db:0b:5d:c5:ee:55:
                    12:de:d1:a3:b5:af:0f:e1:0d:70:ec:2a:28:9c:49:
                    12:af:e4:fc:cb:b4:8e:a2:a1:f6:45:be:40:09:32:
                    66:27:87:ad:b8:f2:74:15:6a:67:ad:6b:28:57:76:
                    9b:27:c6:aa:a9:73:df:3c:a4:34:f0:18:46:65:4f:
                    cb:f9:f6:51:2c:84:55:86:db:20:5d:7d:b6:cb:48:
                    8f:0e:bd:e3:aa:a0:25:fb:45:30:87:14:90:83:65:
                    c8:4b:e6:9d:0a:4c:5f:2c:8c:93:b0:85:ab:85:1d:
                    b2:6a:86:d7:4f:6a:f9:d2:b2:a6:4a:c3:02:94:6a:
                    b9:27:f7:c8:2d:ed:a1:f9:3d:95:2d:4b:c6:35:8f:
                    b8:c2:92:01:2c:10:05:15:db:48:f8:0d:63:92:dd:
                    50:98:79:92:09:c9:47:0d:d3:ef:b9:fe:ab:ff:42:
                    19:6f:6a:e5:b2:78:36:fc:3f:49:48:3c:c3:ff:0a:
                    56:70:1b:35:9a:cd:87:fa:d2:9b:c7:16:08:c7:e6:
                    08:78:00:4b:aa:1b:c2:8f:f1:3e:83:58:27:41:dc:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:55:A4:25:3D:B2:62:FA:74:D4:7F:A3:39:93:BA:10:B5:B6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe59:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:99:a1:d8:38:16:87:0f:d4:25:87:b0:bc:bf:d2:88:34:
         77:c8:65:ff:f5:c3:c5:3b:af:18:ad:81:c4:74:1e:6d:8b:5f:
         f7:df:4c:be:e3:56:10:f4:0f:6b:7f:02:61:bc:a3:ae:6b:4e:
         c1:bb:d8:27:c9:5d:37:62:7b:7c:88:40:ce:62:73:6b:0b:83:
         90:3f:cd:cb:a3:e9:0f:31:a8:7b:30:40:0d:81:84:d2:71:27:
         4d:c5:22:1f:b3:26:43:3f:4c:f9:7b:b4:57:5f:c7:33:54:01:
         74:08:28:82:04:21:b8:77:26:92:1e:11:53:8e:fc:ae:b6:77:
         a7:57:4f:5e:08:9d:b4:83:c9:f7:9b:ae:4e:74:c7:ac:5d:0a:
         fd:b4:9c:a3:2f:66:f6:45:7b:64:b3:73:c1:71:ac:5e:54:6c:
         fa:ba:1d:5d:37:53:09:ee:11:33:60:25:b6:6e:ad:81:3f:e9:
         d6:03:cf:fa:0a:6e:4d:92:0a:47:84:a1:d2:fd:fa:f1:15:b9:
         ba:6c:ec:34:9f:8c:c9:4e:6e:1f:3c:85:bf:83:e9:98:6d:cd:
         62:95:eb:30:40:e4:d9:ea:0c:a4:ce:89:9f:a7:22:8b:0e:2d:
         06:1e:1e:f8:ab:7c:31:91:ad:3d:eb:fd:e7:f5:e3:04:ed:00:
         1c:0c:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:49 2026 by rpki-client