Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/194297f6-4281-3a31-b235-7f333868865b.roa
File:                     194297f6-4281-3a31-b235-7f333868865b.roa (raw, json)
Hash identifier:          ecI2ZuKhyP/JXpGB+XQQeaB6UXylWL00TFQ+CnX7CGc=
Subject key identifier:   EA:4C:FD:2F:A6:26:1E:EF:A7:94:46:51:FE:41:C7:A9:D3:F4:2C:D7
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFDEDA48E1BF1CA492CC0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/194297f6-4281-3a31-b235-7f333868865b.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:2033::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fd:ed:a4:8e:1b:f1:ca:49:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=5eed4d7f-1b4f-4b4d-900b-2128c723ee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:a0:45:14:ec:d4:2b:fa:c0:75:e8:cf:e8:
                    5d:67:ce:f8:21:c5:4c:58:a3:20:22:28:b7:4b:06:
                    13:82:a2:be:e1:c3:30:b9:4a:5a:8e:79:20:bd:a7:
                    b7:01:17:18:2b:95:68:84:b0:dd:06:61:11:99:89:
                    36:2f:85:15:e6:13:e8:1c:76:73:a4:2c:f8:e2:e8:
                    b3:7b:c0:6a:a0:80:28:d6:2d:de:f8:72:55:3d:12:
                    f0:7b:f4:7c:b7:f2:6e:3f:f1:36:1c:37:d7:31:f7:
                    84:34:3d:e2:98:7e:c1:ab:54:4f:48:c8:ec:2f:79:
                    af:7f:5a:06:01:d6:58:46:7a:ac:b1:fd:e4:27:72:
                    dd:cb:66:44:ca:ea:5a:1f:68:69:dd:25:d2:57:a3:
                    a2:fb:b2:40:94:85:eb:0d:45:ce:ce:c5:f5:7a:5f:
                    a9:3d:a9:e4:aa:48:bf:0e:1c:fd:0a:06:8e:5f:5f:
                    b3:2a:0b:ac:51:f5:d7:ee:fd:c5:22:87:97:a5:08:
                    df:91:fe:19:39:35:b9:d4:3b:e0:9f:9e:78:c2:5c:
                    a5:eb:3a:1e:03:4f:18:0c:90:72:28:7d:af:3f:0f:
                    7f:ba:ec:cc:63:27:7a:da:84:c2:bd:e4:31:7f:7b:
                    43:31:66:d8:0d:0e:7f:41:25:17:ff:e9:8e:19:2b:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4C:FD:2F:A6:26:1E:EF:A7:94:46:51:FE:41:C7:A9:D3:F4:2C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/194297f6-4281-3a31-b235-7f333868865b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2033::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:22:f9:68:3a:3a:6d:2d:d6:11:ef:88:24:bb:67:78:5f:
         b7:2e:c9:e6:e2:9e:91:94:9d:03:a8:5e:79:b5:a1:6a:c5:42:
         46:ba:11:22:f9:f6:e6:18:b9:6f:c8:63:94:49:9d:51:97:52:
         51:eb:16:99:30:25:b1:60:3c:e0:0e:82:c3:6b:3e:12:fb:60:
         a7:f1:1d:1d:7f:43:47:55:0c:70:ba:93:06:14:b7:11:92:be:
         d8:09:0b:ec:12:bd:7f:87:99:3b:c0:8f:20:07:2d:90:34:be:
         b3:a5:90:b6:76:e2:7f:02:15:b1:51:b7:2e:08:47:8a:a1:42:
         d3:5b:1d:25:58:f7:e1:8b:12:2f:4a:62:d2:c9:00:24:6f:21:
         fc:ac:9c:d2:fe:cd:72:a2:67:d5:56:49:0c:0b:25:d0:ea:92:
         34:d9:16:8e:72:5d:b4:05:c5:8d:16:4a:c8:3b:bf:ed:19:9d:
         fb:de:8c:48:5b:bf:21:b5:00:95:80:d2:ab:7d:3e:76:1a:ff:
         24:a0:07:bb:fa:50:af:93:6a:df:2d:97:0a:0f:7d:e6:e7:e1:
         e5:e7:3c:0c:83:a9:ee:59:f2:56:cc:23:55:c6:ee:ed:14:40:
         47:4e:78:c5:91:7e:7b:5b:3f:52:67:18:2e:4b:cc:40:3c:b4:
         1c:43:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:00:13 2026 by rpki-client