Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8562c475-5fb7-3830-a498-3704eeaa19f1.roa
File:                     8562c475-5fb7-3830-a498-3704eeaa19f1.roa (raw, json)
Hash identifier:          Y3KO5iHSRWQ5TXykRyEAwW0VN8RZlM8K3DKcqePS1eY=
Subject key identifier:   A5:DB:64:57:74:88:6F:66:D5:9D:96:19:61:55:7F:BA:DA:99:30:14
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F4328584DC9FF1226D48173BB764D1C80
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8562c475-5fb7-3830-a498-3704eeaa19f1.roa
Signing time:             Sun 10 May 2026 16:32:59 +0000
ROA not before:           Sun 10 May 2026 16:32:59 +0000
ROA not after:            Sat 08 Aug 2026 16:32:59 +0000
asID:                     401297
IP address blocks:        2602:fafb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:ff:12:26:d4:81:73:bb:76:4d:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: May 10 16:32:59 2026 GMT
            Not After : Aug  8 16:32:59 2026 GMT
        Subject: CN=4030a6bf-f85c-402c-b121-1030a875c669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:dc:02:71:86:8c:e4:49:58:a6:03:10:5e:
                    04:9c:54:37:65:1a:bb:9d:b4:45:4b:d8:f8:1c:76:
                    32:8f:75:8d:c6:f1:e7:b5:3f:93:21:82:4a:62:74:
                    a1:d0:1f:bf:db:87:2d:d5:50:42:ab:27:12:2c:8a:
                    3b:2c:db:83:8d:58:8f:69:c6:e2:8f:c2:7e:f2:50:
                    eb:e3:d3:2d:b4:be:ea:14:ca:dd:37:c5:a0:ff:a8:
                    da:a5:57:91:fa:67:93:4e:e2:9e:36:bd:b5:09:78:
                    0b:4c:55:f7:1c:44:fc:c5:1f:21:6c:06:b2:c2:c8:
                    e5:59:4c:d8:ad:b9:67:ef:fa:2c:7b:a7:ef:92:47:
                    8d:a6:12:37:33:8a:5b:17:37:c2:34:27:17:56:4b:
                    a2:e5:ca:af:08:dd:02:2a:a6:88:d1:1d:d4:db:61:
                    1f:83:c3:93:28:15:e0:e8:73:9b:61:3f:5c:b1:53:
                    9d:c5:f7:02:65:93:5d:77:19:f0:eb:87:f1:43:9b:
                    a6:85:83:7f:16:07:64:54:0b:75:ca:36:c7:29:f0:
                    8e:de:01:72:dd:97:13:49:b3:6e:4d:ec:74:0c:cc:
                    84:26:89:47:bc:01:aa:b2:fa:19:3f:84:29:c8:71:
                    0e:99:1f:54:f3:2b:0d:8b:71:74:bc:5e:48:d7:4d:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:64:57:74:88:6F:66:D5:9D:96:19:61:55:7F:BA:DA:99:30:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8562c475-5fb7-3830-a498-3704eeaa19f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f4:66:0e:00:68:92:6e:4b:4f:10:fd:8b:9e:dd:2d:8d:2e:
         d7:b2:60:52:25:5d:09:0b:51:58:46:fd:d5:91:b5:2d:09:16:
         52:0e:91:b2:79:04:a1:e8:9b:bb:ca:44:d6:98:1a:d5:cf:6d:
         a4:27:c7:1d:0d:8b:ee:40:6c:fc:89:7b:5b:41:b4:5b:43:1b:
         70:f0:f2:e3:6a:53:13:b2:84:8f:87:f8:2b:70:a8:f9:51:a1:
         cc:72:f3:d9:a9:ea:93:d7:e0:33:d4:ca:ad:54:37:b1:a5:b3:
         05:e3:f4:63:5d:f7:12:3a:53:f0:c0:d9:36:76:79:8b:08:ae:
         1b:3c:55:90:cd:73:7a:d0:03:9f:7c:c9:5b:86:0d:46:cb:67:
         7e:a6:12:1d:07:77:1f:bb:da:a5:39:7a:ef:b3:9e:2f:44:70:
         76:08:4a:05:54:73:ba:76:e9:ff:cf:2a:57:1f:e3:b0:8e:c5:
         75:be:3d:d0:5f:60:b4:ff:41:25:bc:84:3a:62:f7:7d:2e:e9:
         6e:cf:89:41:e9:bc:06:95:b7:da:15:73:a1:07:65:df:f6:f4:
         77:b0:7c:e1:f6:da:26:a2:88:d6:d7:df:3a:90:30:d7:5d:b7:
         6e:d0:b5:97:4a:f2:95:40:25:b2:e1:5a:0c:67:59:df:7c:35:
         4a:e3:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:10 2026 by rpki-client