Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa
File:                     2178ac25-e308-3810-99cc-10f24135d13d.roa (raw, json)
Hash identifier:          /2AS+CJFGrhmLcs1X3kMp+pVAvEVUVh/4MAgbrux+dg=
Subject key identifier:   C9:4C:D5:86:37:28:C9:81:A5:9D:7E:03:93:5A:F7:BF:6C:F5:30:EA
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F4328584D8AC536D799F66742A2BFA5C0
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     16970
IP address blocks:        2602:800:1000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:36:d7:99:f6:67:42:a2:bf:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=76ed7e84-aa26-49b0-953f-00b46a2914d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:f6:bc:0e:de:e2:c3:1f:c4:a5:a8:a0:f1:
                    46:bf:65:5e:dd:60:dd:eb:e3:52:31:9d:76:d1:9b:
                    05:73:7b:79:e1:5b:5e:c8:ee:b0:42:91:b2:c2:f6:
                    b4:ea:95:76:16:69:5d:dd:21:4f:f6:77:49:ee:3c:
                    66:c7:d0:d8:9a:78:e5:fe:31:d0:57:0c:59:2c:e2:
                    05:0f:8f:97:fc:40:04:33:0e:b8:2b:f2:54:41:c5:
                    ec:ba:75:27:50:ce:d7:26:b2:de:ef:3a:8b:22:74:
                    57:62:a8:d4:ed:11:69:6b:03:41:f7:af:a7:bf:dc:
                    68:09:1d:20:fd:32:71:7c:10:9c:29:f8:3c:89:30:
                    a4:25:64:5d:d7:9d:09:9f:76:5f:9d:fb:d2:c7:82:
                    bf:fa:73:77:12:ce:d4:db:50:22:f0:db:e6:b1:fc:
                    b5:07:0f:4f:18:88:61:01:ee:98:e7:36:6a:dd:fd:
                    52:25:be:e1:e3:ec:b6:7b:59:ef:6d:0a:78:16:cd:
                    3d:f4:91:8c:0e:75:d9:af:76:b3:bb:d1:1f:dd:8b:
                    9a:e0:7a:f9:ce:e8:df:83:92:d8:00:54:dc:2b:d9:
                    22:07:5c:87:76:49:0e:cf:b5:50:63:4e:f9:5a:3e:
                    0e:d0:23:32:a8:79:5e:a2:57:f7:61:35:2f:39:b0:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:D5:86:37:28:C9:81:A5:9D:7E:03:93:5A:F7:BF:6C:F5:30:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:800:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1a:04:6d:36:50:e3:0d:e0:b6:97:b8:30:2b:79:bc:b1:68:
         b5:6f:d9:0d:3e:64:07:8d:4a:5a:86:85:22:fd:a3:cc:40:ab:
         61:a1:f2:cf:62:98:fc:f4:85:2a:ec:58:13:c3:a1:79:8e:6f:
         0d:70:17:6d:eb:a2:13:88:2d:7a:d9:d5:c3:86:6d:45:eb:a9:
         bb:ad:89:34:3b:71:20:29:54:19:aa:99:8a:82:26:0b:42:46:
         30:5b:99:15:c5:f6:40:c3:d7:08:9a:ce:7a:a7:af:e0:20:70:
         59:57:c3:ab:6c:59:5a:8b:bf:90:be:3c:52:ea:cf:01:9f:e9:
         78:c8:b1:e9:f8:22:87:c9:d3:6d:8f:94:39:96:ff:72:d9:f3:
         aa:33:2e:ac:d8:e6:76:86:3a:28:5d:67:fa:2c:db:eb:d4:8c:
         81:21:d4:19:8e:9a:8a:b9:8e:d0:8f:6f:4f:a5:93:c2:fc:1f:
         aa:d1:0a:11:f2:e4:c9:c4:8a:6d:0c:96:cb:b5:78:f0:7d:6c:
         3a:33:fc:e3:64:fd:23:9f:f9:2f:cc:cf:b3:bf:18:bd:52:66:
         e6:c3:e0:f2:b8:ca:b5:4d:0e:67:fb:63:e2:4d:f0:fd:83:43:
         0d:95:b5:e6:aa:1e:dd:90:d2:d7:7b:a2:01:91:1f:a8:26:c1:
         26:bf:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:09 2026 by rpki-client