Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa
File:                     035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa (raw, json)
Hash identifier:          jhORs+R7tPx+vnYWZUyVfGydCnYFYZh9jPbPWnmzFUc=
Subject key identifier:   CD:08:CE:0D:78:43:7F:D8:77:2F:D8:B7:6F:40:06:51:60:26:78:0D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95F00AEFC9478ED922B8DA00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:20be::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:0a:ef:c9:47:8e:d9:22:b8:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=8a423460-20bd-4f28-89f8-2561b65dff75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:c4:4c:57:7a:a8:dc:35:4c:8e:90:19:40:
                    82:d3:4b:42:2d:22:bd:05:c1:b9:b8:13:a3:77:f6:
                    94:2d:25:1a:4c:14:76:8f:7f:f8:c8:8e:43:c4:1a:
                    2d:4d:e2:7d:4d:24:77:6e:f9:d5:5d:6d:aa:d3:25:
                    56:4b:ae:e2:78:6a:30:b9:5d:5e:f0:6b:51:47:f8:
                    2c:3a:e6:b8:be:5e:c2:2a:9f:51:52:4d:63:d6:a4:
                    67:f7:aa:9a:2a:ab:d1:ea:91:db:a7:d8:5c:46:9f:
                    b7:10:05:ee:24:4e:83:2e:cf:63:5f:2f:2e:60:b7:
                    f1:51:5b:83:ea:4e:29:99:51:d1:3f:6a:f8:88:ba:
                    91:b8:07:c2:cf:ab:9c:7d:7c:d9:e2:fd:2a:39:0b:
                    49:87:83:da:e2:bb:bd:e2:74:c3:64:b8:23:dc:db:
                    69:0b:be:ad:ce:17:27:89:b2:cd:07:fe:6d:b9:02:
                    3e:6d:b4:fc:3e:c3:e5:23:2a:98:93:f5:9d:2f:75:
                    35:01:f9:95:c2:a0:0c:70:a1:53:a8:2b:d2:a3:59:
                    d5:02:1b:5c:1f:72:a1:cd:5b:2c:c7:4c:75:41:9c:
                    d2:99:48:e3:cf:97:89:ac:57:2c:b6:26:6a:4e:36:
                    83:2a:65:bc:a0:91:90:a8:09:84:4b:35:6f:a0:53:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:08:CE:0D:78:43:7F:D8:77:2F:D8:B7:6F:40:06:51:60:26:78:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:50:d1:8f:5e:8c:f5:df:c8:e9:01:7f:f7:ac:a3:b0:c8:
         d1:e9:d8:1f:13:66:bf:84:a3:1c:46:33:1e:18:21:25:f8:02:
         21:c9:20:69:07:6e:34:bc:dd:ec:71:37:d5:62:e2:59:54:ca:
         b8:1c:e3:88:40:08:7b:55:12:4c:39:ca:7e:1e:42:2c:17:c8:
         16:67:64:00:52:ce:09:d3:ab:ee:25:07:d4:c0:f2:3b:c3:2e:
         1b:b4:9e:cc:ce:63:38:c2:aa:40:29:b5:1e:c0:17:9d:ba:02:
         76:c0:da:f5:fc:d7:3a:98:7e:e5:d7:ca:d8:2a:f4:99:ae:59:
         d8:84:42:08:b3:a0:de:8c:90:b4:f4:86:9f:e9:c4:fd:68:58:
         86:58:c8:dc:84:2d:0b:69:fa:0c:1d:50:05:d1:6d:25:68:e5:
         2d:ae:f7:8b:c5:18:25:1a:13:ca:eb:01:b1:29:de:b6:03:f0:
         7f:7d:4e:5c:48:8b:9a:43:6f:50:59:f6:50:e1:ec:10:47:99:
         b1:55:a4:a4:3f:11:4a:8d:7a:b2:7d:e0:f7:80:6b:cb:be:52:
         9e:7a:b5:6e:27:5b:73:41:20:8c:03:ac:18:16:78:c4:d7:6e:
         84:2b:74:7c:ec:85:6e:34:fd:b3:ab:ca:ca:3d:1d:6b:a7:d0:
         2e:15:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:51:48 2026 by rpki-client