Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
File:                     e8616674-f91f-350d-82cc-d009a5a6c585.roa (raw, json)
Hash identifier:          9V4L/3I1wSY07MSGiF8oYqrcTsoFi9lfCoRqWON7TdY=
Subject key identifier:   B6:18:4A:CB:F3:83:2B:1D:09:56:11:58:07:50:F2:3A:6D:57:78:41
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584DAAE036EF5D2C4896CE53F7A0
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     216401
IP address blocks:        2602:fb54:240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:36:ef:5d:2c:48:96:ce:53:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=95c21185-dcb4-4d36-8df3-11a1318051b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:a6:0f:ba:51:44:4f:8e:42:04:6a:5d:db:
                    47:51:8c:46:ed:55:f9:29:d1:72:ba:71:63:ac:e2:
                    b8:d5:b3:4d:3c:42:a9:e5:f0:63:6f:8f:ae:f6:2d:
                    7a:2d:27:f8:b9:4f:63:9c:4d:aa:ba:22:be:a9:fb:
                    a0:ea:64:d9:30:85:20:89:9b:42:ba:92:85:e6:ff:
                    3b:ae:c0:a6:8c:c0:f4:06:0c:0b:88:c3:f1:25:df:
                    22:bb:7d:3c:fe:bc:df:a2:67:79:33:fd:72:fb:69:
                    1a:f3:b6:9e:43:bf:77:29:48:cc:59:56:df:14:62:
                    8a:27:fa:22:83:d3:45:28:27:d9:fa:07:ee:f0:91:
                    fc:78:c2:34:db:6f:b1:af:ea:ca:46:92:1b:24:eb:
                    b5:80:14:66:7b:4e:3e:92:bc:ee:e4:fb:64:cb:6d:
                    90:e0:a8:94:3d:25:9e:85:dc:77:01:84:25:39:0e:
                    b9:ca:20:3c:90:46:19:88:f0:02:9f:bc:88:12:90:
                    3b:24:8a:6f:29:e4:a0:a8:f0:5c:3d:23:9e:a1:25:
                    99:f3:26:ca:86:8a:d9:c2:2c:3d:8a:3a:e3:06:44:
                    78:35:9a:a4:a8:49:50:5b:bb:45:11:64:10:9e:08:
                    3d:b0:65:d4:14:2b:7f:07:7c:bf:75:1f:28:b4:5e:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:18:4A:CB:F3:83:2B:1D:09:56:11:58:07:50:F2:3A:6D:57:78:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:60:5f:48:38:67:0a:fd:29:22:3b:0d:1f:49:f8:7b:67:db:
         d6:ad:8c:9c:94:cb:a0:d8:9a:48:fc:a9:83:65:2e:8f:87:e2:
         1b:fd:14:fc:05:58:da:f5:75:6b:13:f1:d3:69:38:9f:60:45:
         e9:c7:a3:d8:81:c1:d1:ce:94:71:81:c2:6a:5c:66:a3:6c:96:
         ab:68:d6:fa:6b:06:8f:a4:81:9a:16:6f:5a:87:9c:04:47:50:
         21:e6:6e:2f:21:e8:86:22:0e:5f:86:7d:38:21:17:f1:c9:ae:
         4a:70:0b:95:41:c0:8d:cb:0f:54:9c:d2:84:49:38:09:45:94:
         47:f7:f1:f9:12:89:0e:12:af:1f:ac:8b:8c:0c:dd:5b:b7:7a:
         b3:24:86:6b:a0:0a:de:e3:4b:0e:69:4d:35:ad:13:c0:49:7c:
         ef:a8:c9:4e:0c:f8:9f:04:1b:1f:28:95:98:29:a4:c9:ad:72:
         31:2f:97:57:42:e5:2b:55:97:8e:d0:51:79:e1:ee:57:82:81:
         f0:0e:6f:df:d7:82:57:45:c6:4b:8b:6c:ff:38:63:11:2d:53:
         74:d8:3c:1e:4d:cf:b9:17:7e:bc:9b:35:7a:89:2d:02:92:24:
         f7:3b:f5:cb:ae:bc:1f:41:9c:04:11:63:8c:da:92:74:fe:b1:
         36:c3:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:09:24 2026 by rpki-client