Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa
File:                     8cad8b2d-6269-31fa-a87b-fc60824d517b.roa (raw, json)
Hash identifier:          CuFhuokA9dHZXw5ptPA0mwEpT9YIYAp2wUT2mLJj6vA=
Subject key identifier:   ED:DD:CE:F9:AF:6E:7E:6C:21:0D:24:18:A2:A2:8C:27:F3:C8:D0:59
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F4328584DC56593B19E9FDB08A17BE200
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     3756
IP address blocks:        2620:f:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:93:b1:9e:9f:db:08:a1:7b:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=6245b3c5-702b-489a-ac48-1592ed1c1655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:c4:52:06:cb:b9:2c:55:fc:3b:07:68:de:
                    d6:85:e3:e9:54:0e:52:38:0b:58:cb:ae:2e:6d:6b:
                    20:17:b4:2f:af:e9:a6:ec:ac:17:ca:e0:74:c5:0c:
                    b1:dc:bc:5d:34:64:ce:01:31:c0:c4:69:a7:09:6f:
                    b1:ee:f5:43:1b:6c:52:e6:79:b7:80:45:44:f4:06:
                    29:19:f0:14:ca:6f:4e:c7:25:fb:50:7b:e2:4c:5c:
                    21:c1:d4:fd:d0:be:88:95:c0:8c:d7:d2:7e:57:f6:
                    cf:88:ea:4d:34:4a:27:78:1a:ea:1a:20:e7:28:13:
                    79:96:05:0d:29:f3:1c:60:1f:91:0d:60:91:da:9a:
                    14:5f:23:50:2f:24:77:8f:be:fa:76:76:f3:16:3e:
                    50:f3:ae:16:c2:96:55:47:17:88:22:6e:fb:f9:cc:
                    13:94:09:c5:49:03:85:00:45:70:c6:e2:1b:31:fd:
                    c3:c2:78:77:56:c0:37:ca:67:a9:58:2e:92:70:18:
                    6f:87:7e:2c:63:93:59:8d:32:50:b8:7f:d4:5b:10:
                    84:23:de:bb:e9:ea:2b:73:4c:3f:c9:81:13:6f:88:
                    7d:c6:0b:49:6a:eb:86:61:af:54:2b:45:04:58:e8:
                    7d:48:ca:a8:66:8b:b1:50:36:16:ac:2b:0b:e6:1d:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:CE:F9:AF:6E:7E:6C:21:0D:24:18:A2:A2:8C:27:F3:C8:D0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9d:8c:9f:80:f5:22:1d:70:2b:cd:d0:09:08:3f:41:64:bf:
         64:2d:68:d3:9d:eb:04:18:ec:ef:58:60:dc:f5:6c:1e:6a:74:
         33:ae:c7:c0:99:60:32:93:14:bc:d5:7a:92:34:c8:3c:31:c3:
         af:81:fa:c9:d3:2f:0f:3d:96:2d:50:07:e6:e6:15:ce:dc:74:
         5b:12:f8:7e:06:fc:90:70:ee:82:72:3b:d3:0a:11:22:84:5c:
         b0:7c:49:63:0b:2c:61:56:e5:fb:59:d5:42:22:cf:fd:4d:3f:
         42:07:04:e0:f1:63:b7:61:d1:63:27:e5:40:bb:c3:66:f3:e2:
         b6:5f:39:64:60:9e:37:48:22:fc:75:94:0a:c2:1e:a6:89:b8:
         99:07:1c:de:0b:b3:ff:b5:1d:3f:c8:94:ee:d1:61:83:bb:6f:
         ab:16:e5:96:77:45:90:74:11:14:43:d2:7d:9a:c7:d7:b8:7b:
         4f:60:7d:46:5d:1c:d0:31:83:8a:79:1d:8e:1e:19:61:b5:b8:
         0e:1a:43:f8:5c:a2:c8:53:7b:07:f3:9f:73:b9:fd:36:66:19:
         3a:3a:a1:46:05:09:59:e2:3d:57:eb:8a:34:b0:0b:aa:10:95:
         af:2b:c8:f2:9f:f4:91:d0:3b:db:1c:06:ab:d2:af:40:1c:08:
         7b:31:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:04:10 2026 by rpki-client