Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa
File:                     89edca34-026a-3c55-9706-b38b7c4a3279.roa (raw, json)
Hash identifier:          /q4vW+cjcXPcTQUzD0GfPllTEl04v1OXkBPepB1sv5Y=
Subject key identifier:   CD:82:FC:07:12:E1:C1:F3:AF:8D:7C:67:53:2D:13:03:C9:AB:50:6D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFB8F9290EE59167DA480
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fb:8f:92:90:ee:59:16:7d:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=5692d149-daa0-4809-b60d-e68434fa0b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7e:ea:56:dc:23:5f:96:2a:a4:6e:10:50:64:
                    d2:e6:91:aa:76:d4:31:73:9d:5e:1b:46:62:f6:d7:
                    85:08:f9:54:e0:5b:47:f2:68:c5:2b:33:e3:d4:90:
                    b8:4e:f2:aa:e1:7e:00:ff:c7:4d:99:8b:94:b1:1a:
                    f1:66:b0:a1:b1:02:f7:7e:cb:39:80:62:ac:b7:e6:
                    b4:d7:a1:03:c8:e2:49:98:e1:31:81:8c:3b:74:2b:
                    52:60:18:99:7d:a9:5e:a4:c5:60:eb:d7:2d:f9:2f:
                    a5:22:e7:f0:09:b4:5c:37:a7:7a:6c:5b:21:ac:3d:
                    bd:61:ba:88:30:12:40:a2:f2:ae:e7:65:6d:5e:27:
                    67:3b:0b:d6:3d:c7:75:75:83:89:86:08:6f:1e:fb:
                    29:ad:b5:9d:97:53:f2:54:67:8e:41:4a:4a:32:3d:
                    ed:59:4d:1f:07:2f:f1:da:2d:7f:7c:70:bd:6b:e5:
                    31:ae:51:1e:89:b7:30:99:d0:16:38:9f:19:10:f1:
                    0b:00:e3:46:fb:57:e3:df:c6:71:ad:5d:f5:40:8f:
                    50:d1:7b:18:2a:77:4c:01:0c:d2:82:4b:d8:89:0e:
                    27:28:0b:30:78:72:d8:76:7d:fb:34:ab:78:89:1c:
                    d5:ff:26:99:4e:32:24:83:32:75:92:c9:15:39:75:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:FC:07:12:E1:C1:F3:AF:8D:7C:67:53:2D:13:03:C9:AB:50:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:4d:d9:04:cd:78:fa:44:c5:b0:dc:68:e7:d1:c7:5a:7c:
         d6:3e:97:06:e2:a4:51:36:8b:f1:b7:05:30:9d:39:de:25:c1:
         1b:59:6e:5e:20:7a:cc:1f:c0:96:7d:2c:38:98:c8:ba:44:c2:
         8f:23:10:2b:76:05:98:e4:63:e3:25:e7:0c:91:d2:a4:1e:2f:
         ce:2f:48:cd:02:dc:39:26:43:b6:36:f7:ec:12:af:0d:cc:4c:
         0e:a6:57:f9:2a:9a:fc:68:52:c1:af:2f:d1:09:66:86:88:c4:
         36:27:2a:f1:44:60:3d:42:22:04:cd:cc:f5:40:fc:aa:9a:5b:
         84:80:9b:b8:3c:dc:39:9e:bd:56:14:91:cd:0f:cd:aa:cf:0d:
         67:c8:05:f6:1d:17:d4:43:e6:64:45:3e:38:cc:d3:8a:9f:15:
         d8:48:4f:37:41:c4:16:ce:9d:22:36:b3:1e:1f:4a:84:32:52:
         99:8b:18:9e:c1:ae:95:63:ff:b5:f3:ea:46:b8:51:7a:92:01:
         be:4a:d1:9a:8c:bb:bc:2a:78:bf:8e:5d:c8:62:5c:bc:34:9c:
         1a:4c:49:0e:9d:45:21:be:25:c0:12:39:e0:ca:9b:27:84:03:
         6a:3c:31:d9:ea:2b:b6:07:a9:77:cf:2e:31:76:35:ea:2d:80:
         f4:0b:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:25:49 2026 by rpki-client