Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/645b79c9-f64a-3042-8dde-9d45f5df07ec.roa
File:                     645b79c9-f64a-3042-8dde-9d45f5df07ec.roa (raw, json)
Hash identifier:          9yLwgKMJbVtT+zhOmRxZYXij+Qq9qdxZBhZg+Paix4M=
Subject key identifier:   55:95:5E:E7:CB:47:D7:8D:6A:6D:B7:CC:34:EE:79:8E:3F:5F:EE:A8
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFCB5F047A608530C4EC0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/645b79c9-f64a-3042-8dde-9d45f5df07ec.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:2020::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fc:b5:f0:47:a6:08:53:0c:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=cf446aa6-73f6-4ce6-ab0d-1726cb49e1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:31:8e:ad:8b:04:62:3a:e4:bc:62:30:1a:
                    d4:6e:d8:00:c2:0a:0e:93:c3:cb:3e:5d:3d:42:c9:
                    74:09:95:7d:4f:57:b7:15:6b:40:e3:7c:89:2b:f5:
                    f7:c7:e1:0b:7a:f4:11:b4:4c:18:c9:c3:16:07:52:
                    b7:ce:5f:4a:ca:72:93:f6:6b:bd:99:32:df:7b:d7:
                    0b:e0:10:70:61:e0:7f:e6:58:3c:d4:3c:aa:86:a2:
                    94:40:c8:77:5f:4d:33:51:e4:3c:ed:24:d9:71:82:
                    f1:69:c9:fe:53:dc:da:ca:e0:c6:99:04:f8:c5:18:
                    ee:e7:1b:bf:3f:08:ec:86:a3:e0:1e:ef:e2:ad:de:
                    49:fe:78:73:e4:04:d8:4c:2f:0d:a8:9c:15:12:40:
                    7f:0f:ec:83:53:43:1d:30:4a:62:c8:23:98:5f:13:
                    55:38:7a:58:0b:eb:32:33:ea:c1:36:ad:74:09:7a:
                    29:40:a0:65:a6:79:54:7b:28:05:88:e6:62:61:6b:
                    74:2d:a6:8d:04:7f:47:6c:cb:e4:7b:f7:24:1f:b3:
                    17:6e:be:43:11:ea:e6:87:b7:83:3b:ed:a8:4b:ec:
                    be:39:c9:60:93:93:0b:63:4d:54:6b:ff:5c:ef:7f:
                    fd:15:58:82:b9:ee:09:dc:e4:b1:18:43:5e:9d:17:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:5E:E7:CB:47:D7:8D:6A:6D:B7:CC:34:EE:79:8E:3F:5F:EE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/645b79c9-f64a-3042-8dde-9d45f5df07ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:f3:93:b2:52:80:47:38:a3:d0:3e:4f:36:a0:a6:0d:8a:
         7f:8d:f9:13:91:99:c6:97:0b:57:c9:b9:70:5d:7a:48:20:82:
         ba:7d:03:00:47:80:c7:90:a0:99:62:94:86:78:c8:d3:80:74:
         f0:03:f8:f5:54:3e:53:10:0d:ae:00:e3:e5:c5:cb:6c:78:08:
         85:81:4b:0c:d4:c4:2f:27:30:72:d8:89:9e:96:f1:31:df:f7:
         1b:cb:2e:b3:02:9e:e0:74:61:d8:1d:2f:ab:9d:b0:d2:4e:c7:
         07:0b:29:33:d6:66:da:16:60:ae:85:12:b9:f0:3f:88:a3:4d:
         46:9f:f6:95:05:8f:1b:ff:8f:38:c8:38:b2:62:81:41:37:1c:
         06:5f:36:40:43:f6:44:36:cf:7d:4e:53:08:7e:ad:d5:33:41:
         b7:87:f8:8f:0e:c0:e9:83:0d:aa:53:f4:1a:57:c4:c7:94:4f:
         16:a3:f1:37:52:39:8e:15:00:7b:75:77:c1:ec:25:bd:67:03:
         df:04:8c:80:ad:40:28:8e:72:4e:6a:bc:74:aa:e0:43:5f:67:
         81:54:89:38:4e:7e:44:99:77:3c:a3:2f:2d:ea:f1:1c:7a:2f:
         ad:75:4b:ce:e1:90:63:d5:ce:1c:45:55:d2:c3:0a:f0:5f:4b:
         ff:c0:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:13:48 2026 by rpki-client