Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/a95fdee4-691c-3a61-af65-fd2e982870f4.roa
File:                     a95fdee4-691c-3a61-af65-fd2e982870f4.roa (raw, json)
Hash identifier:          xUEnvtDl+BR8WAuq1o9GV3ijytiqgiPc9jz5j6R8Ykk=
Subject key identifier:   82:12:4E:7A:4C:E9:67:D3:EA:72:4B:7B:FD:EA:50:AF:BC:AB:7A:AC
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584DBD05A30D4E23B6C7DD6D4820
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/a95fdee4-691c-3a61-af65-fd2e982870f4.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     215292
IP address blocks:        2602:fb54:155::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a3:0d:4e:23:b6:c7:dd:6d:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=6cff78e7-5203-418d-8322-9a4c0217d0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:5f:58:07:79:2b:9b:5f:90:ad:c1:64:ec:
                    eb:ac:cb:61:b4:1b:e9:4d:e3:bc:df:75:53:0d:30:
                    ef:9f:b7:8d:a3:58:53:26:6f:c4:b5:cb:a5:a9:87:
                    bc:6d:84:85:8b:bd:48:15:c0:f2:f5:a0:74:5c:af:
                    ac:bd:1b:ed:68:53:4a:9f:93:e8:d9:93:4d:20:05:
                    bc:0a:a1:69:d9:f0:6c:35:51:58:05:c7:67:ca:fe:
                    b5:1f:e0:42:9e:99:05:41:f5:88:91:a0:08:4c:4d:
                    bd:e3:40:96:f7:3b:83:71:5c:66:90:f5:ed:ec:dd:
                    2a:dc:7f:e7:0f:da:4f:01:e9:5b:98:45:b9:5f:5c:
                    66:48:81:52:91:81:1d:75:71:79:81:f8:a7:98:f1:
                    be:82:c4:07:16:f0:95:a6:c7:af:c8:79:1a:0f:4e:
                    44:97:fc:62:27:c7:30:14:08:19:ea:b6:12:7e:1e:
                    cf:24:56:71:5d:c5:00:0f:64:9d:00:94:0c:44:71:
                    d9:d5:00:de:cb:02:d1:c3:e8:47:99:47:e2:f4:4e:
                    1a:b5:28:4b:7e:0b:34:34:c9:ad:49:f5:ba:2f:88:
                    6c:ba:4d:2a:61:20:6e:19:d8:f0:9d:6c:a2:d2:89:
                    4f:ad:ca:00:5f:ee:54:d9:ef:d5:16:d2:98:12:e9:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:4E:7A:4C:E9:67:D3:EA:72:4B:7B:FD:EA:50:AF:BC:AB:7A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/a95fdee4-691c-3a61-af65-fd2e982870f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:155::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:6e:ff:8e:e9:ee:ae:52:28:c3:4d:d3:e0:cf:b3:9d:51:
         6a:49:cb:73:c3:f0:08:18:86:04:ba:e9:14:b4:a5:87:16:e9:
         07:c1:15:88:3e:99:d0:f2:31:68:ba:27:8b:2c:db:45:91:cd:
         fd:ff:23:cc:85:5d:9f:da:1c:90:04:0c:55:29:b4:f1:2d:cc:
         2b:6c:00:4d:d5:14:53:3f:a3:ef:9f:b9:b6:d5:26:f4:25:c0:
         09:06:de:9f:1e:65:86:49:88:ca:80:5b:5f:c5:16:ab:ab:9b:
         95:87:ab:d1:56:ca:ed:09:b0:ac:ff:3c:32:31:16:b3:26:c5:
         89:2a:d7:b9:5d:31:6d:33:b8:70:c0:27:b0:4b:fe:ec:16:28:
         7d:fd:05:a1:4c:74:8d:1b:07:8c:dc:3c:db:97:8a:03:41:1f:
         f1:c7:58:ba:47:77:c9:71:68:95:95:cb:08:5e:4c:76:cc:a6:
         9e:53:f4:a6:3a:f6:be:3b:d2:23:cc:4e:42:37:81:b1:f2:07:
         a0:bd:b1:b2:88:81:f9:fa:22:b0:67:5e:ad:6f:d3:5b:56:a5:
         a8:a0:a4:2c:4e:5f:0d:58:0f:f4:26:f3:f2:00:00:21:5d:68:
         97:a9:42:13:b5:e5:4d:a7:3b:a1:be:7a:d2:df:42:b8:93:74:
         80:79:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:27:33 2026 by rpki-client