Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa
File:                     476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa (raw, json)
Hash identifier:          nq+LIkuTQsVQLS/moXwQoQNZuXSaBVeIFmSujxKci6o=
Subject key identifier:   6B:50:9C:77:E9:D3:0C:A9:82:F8:A8:7C:2E:74:9F:46:75:8E:20:65
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95F009A8E61D45AE1EE38F80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:2057::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:09:a8:e6:1d:45:ae:1e:e3:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=fab7bfed-e9c3-4c9f-9a6c-9c650ae2c4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:96:0d:cd:9e:42:87:55:4e:5e:de:c5:35:
                    10:12:91:ec:58:0b:77:5e:37:64:22:96:3a:06:2f:
                    5d:28:9e:d7:02:76:68:64:2a:c1:bc:57:1b:37:ae:
                    a8:f4:29:55:df:63:53:a8:ff:5c:db:e4:ac:c7:05:
                    e8:25:9d:e8:2c:ee:86:e5:1e:89:37:9b:51:57:cc:
                    94:5e:51:60:54:bb:01:69:c4:8b:be:fe:b1:32:dd:
                    7f:35:93:54:8f:8f:a9:64:9d:fd:78:17:63:96:e0:
                    95:de:76:a7:0c:40:d0:76:4d:e4:28:d6:ad:cc:ed:
                    d2:96:dc:a7:77:11:41:31:23:f9:e0:67:a3:65:8e:
                    bb:6c:c2:e3:3f:6c:ef:25:29:09:40:ed:56:0e:59:
                    72:a4:f1:07:4a:df:b4:b6:d5:ec:ed:7e:c3:ec:88:
                    2f:4e:05:51:80:4e:46:8d:48:a0:49:3b:50:1e:7a:
                    2b:3b:cc:45:b1:1d:86:94:be:24:a1:b8:c1:66:0f:
                    ae:20:5b:90:6c:d8:1b:76:2a:8b:fa:b6:30:03:b0:
                    80:3e:ff:12:1b:65:d1:c5:ee:af:bd:dc:a4:38:80:
                    ad:e0:c3:bf:80:1b:ae:36:5f:ac:33:b9:26:96:25:
                    77:ff:c2:2c:04:1c:8c:93:dc:e6:f2:89:52:50:c5:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:9C:77:E9:D3:0C:A9:82:F8:A8:7C:2E:74:9F:46:75:8E:20:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2057::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:53:38:b3:94:be:c2:0a:16:b1:9d:24:de:00:05:24:a6:f5:
         3a:1c:31:c5:45:0b:d7:8f:1c:5e:8c:af:fd:90:32:39:14:cc:
         ca:59:f3:3a:f3:92:e8:77:78:e5:4e:6f:49:41:39:29:3d:2e:
         24:05:57:48:c7:6c:05:d4:8c:4c:4c:5c:e7:81:01:5b:b8:25:
         a2:55:95:66:f8:dc:7c:a3:c3:3c:81:29:4c:97:00:52:5b:ea:
         fc:3c:b2:fe:d4:d2:f7:ad:dd:dd:f2:e1:a9:88:20:b7:e9:7a:
         83:ed:78:06:49:4d:83:be:9f:d0:19:2a:d4:15:17:70:da:23:
         3e:8a:fa:1a:2c:9d:88:46:39:51:21:3d:75:1e:81:7d:4f:3f:
         53:fc:d5:17:e4:48:99:40:a8:3c:4b:a9:ba:38:63:13:9e:15:
         1d:94:a2:61:b0:fa:a5:e1:f3:58:bd:50:e9:28:ef:5a:18:be:
         be:de:ee:c7:35:3d:7c:7b:cd:c7:36:21:e6:a1:0f:a7:28:9f:
         ac:86:9f:56:c6:b0:f8:09:91:ad:27:77:87:45:89:f2:0b:36:
         e3:a4:c2:24:f6:89:fb:75:3e:61:a5:77:ad:84:41:34:54:24:
         b4:fd:41:50:10:53:6e:20:fe:ef:a6:fb:1e:8e:38:df:b2:83:
         a6:cc:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:34 2026 by rpki-client