Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5f53dc77-09ff-3084-9126-c905eb171b48.roa
File:                     5f53dc77-09ff-3084-9126-c905eb171b48.roa (raw, json)
Hash identifier:          VRr2M65XdZRgX3zw+lXH0XpfR/kwFAjft5caapAUF2w=
Subject key identifier:   04:4D:A9:CC:74:5B:67:E8:BF:34:60:91:42:1A:85:16:43:19:77:36
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFE6D0A9A84EC8AA10D80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5f53dc77-09ff-3084-9126-c905eb171b48.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:203c::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fe:6d:0a:9a:84:ec:8a:a1:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=4ba7b3e1-304d-48d0-997d-5eab31d75763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:b2:e8:2b:85:b9:3b:82:26:2b:39:be:4b:
                    da:d7:5b:65:f7:59:fd:38:98:94:e0:1b:42:7a:4e:
                    cf:06:02:4f:46:c2:6f:d8:69:64:51:9d:8e:b8:3f:
                    3b:52:d1:39:d5:9f:71:bf:42:f1:f2:8d:e6:b7:5e:
                    1d:63:e5:8d:e3:47:fd:31:79:7f:a1:38:98:cf:2d:
                    34:ce:af:d1:f0:1a:dc:35:3a:0a:f9:49:c2:13:f8:
                    37:0f:6a:78:79:3d:0b:c7:40:be:94:3d:d9:ae:37:
                    c1:ef:83:89:18:48:ad:ca:65:64:36:5a:70:9a:50:
                    8c:f1:e5:21:78:8e:67:63:d3:80:cf:c8:86:e0:32:
                    df:62:82:a4:1d:ea:91:ab:32:83:08:ea:b4:fa:6b:
                    8c:78:f9:07:4a:cb:19:d0:b2:e3:bb:f2:db:51:bd:
                    88:67:09:44:59:ba:f4:6c:a9:e2:77:fd:ab:6b:3d:
                    41:b1:6f:c2:55:5b:e0:91:fc:d2:7d:14:4a:a7:68:
                    9f:91:a6:12:fe:8f:e4:d6:c3:d8:5f:4e:d2:1e:0b:
                    45:df:84:e7:02:d3:94:bd:b5:13:c6:b7:0e:2a:01:
                    06:99:53:38:ac:a8:57:4c:ed:9c:1d:95:ec:f5:fb:
                    05:a0:8c:65:76:20:18:a8:32:26:48:4d:d0:6a:ee:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:A9:CC:74:5B:67:E8:BF:34:60:91:42:1A:85:16:43:19:77:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5f53dc77-09ff-3084-9126-c905eb171b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:203c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:51:44:40:f9:3b:4d:9b:6f:13:0b:68:6d:a2:dd:ec:0d:39:
         80:24:e3:02:e3:17:2b:97:9e:ec:ee:41:f5:b7:4b:2f:75:2f:
         5b:52:2d:88:8a:38:7b:1d:48:70:32:24:83:74:db:ac:68:e8:
         13:0f:a3:d2:96:11:7e:4a:b1:c0:40:1c:c6:47:1d:78:d6:0e:
         f5:51:7c:7d:35:45:b3:80:d0:39:1a:b8:48:3a:83:94:34:c2:
         1a:aa:44:c3:f3:8e:f1:00:4f:38:08:62:c9:69:f3:06:bd:c1:
         08:e7:9e:64:4f:03:a2:ff:62:f0:0d:6a:ea:14:ec:bf:b6:b0:
         6b:73:c8:e2:e7:1f:4f:fc:4a:14:7c:2e:01:72:27:44:6d:57:
         85:67:f3:76:82:e3:56:cf:55:09:96:7a:9a:72:6e:c7:b7:a6:
         58:ad:64:4b:1a:00:c0:f4:07:49:8a:03:d0:e5:bb:cc:b1:75:
         43:ae:c7:6d:7e:60:00:bf:ad:6f:12:71:53:95:bc:35:7b:c3:
         b1:c3:e7:85:aa:59:f5:b1:eb:c0:35:48:33:e0:42:da:15:f8:
         49:0a:a1:23:ed:9c:8c:59:35:76:f1:d7:eb:b5:41:6f:87:96:
         55:cb:76:78:06:fb:6b:c2:a3:d8:ae:4c:24:dc:a4:d1:eb:d4:
         93:d7:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:57 2026 by rpki-client