Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ba2d4d12-4ba5-3b24-afa0-1123424ab8fe.roa
File:                     ba2d4d12-4ba5-3b24-afa0-1123424ab8fe.roa (raw, json)
Hash identifier:          Jh3wF0GF0QNdxlMijQfi3FMvxnDh/Oe+LZJATqLF1jk=
Subject key identifier:   72:89:EA:10:3F:0B:9B:FB:B7:0A:84:BE:3D:F9:E4:E4:72:55:3C:95
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFE14A7882570978B4820
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ba2d4d12-4ba5-3b24-afa0-1123424ab8fe.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:2036::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fe:14:a7:88:25:70:97:8b:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=e152672e-8ecf-4623-b7c9-ed0e1658ad21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:3c:ed:a4:b7:68:54:9e:6c:9a:3e:d5:a7:
                    b5:96:96:1d:30:95:2a:ca:d4:ce:a5:5e:17:38:dd:
                    72:d2:26:4c:df:9f:8a:4b:1d:d8:c0:41:72:b2:88:
                    c5:b0:22:72:5b:e6:cc:2e:94:3e:0b:a4:9d:0d:db:
                    c7:a1:c6:38:00:ff:60:a6:de:52:74:bc:4a:b2:3f:
                    ff:93:b1:87:cf:76:a3:15:77:86:4f:ab:20:d8:9a:
                    d5:11:a4:ee:70:68:12:3c:e3:e2:0c:8b:06:15:36:
                    d2:cd:fe:d0:b5:c5:de:da:39:a3:29:79:18:1d:0e:
                    48:ae:9c:c3:29:e3:16:33:f0:f3:9d:42:d3:2f:d6:
                    87:c2:6b:90:6a:d6:6a:e3:e7:45:eb:69:ac:03:af:
                    bf:ac:14:ad:10:f7:b9:28:47:ba:9b:99:cf:0c:2e:
                    b6:5b:06:84:b8:b6:09:f0:5e:05:4b:8a:6e:31:00:
                    52:37:c4:34:8f:ca:aa:ff:c7:ab:11:ee:4f:c1:0b:
                    1f:4d:a4:29:b6:72:86:f8:6f:1a:4c:ae:d3:85:6d:
                    ec:94:27:33:c5:24:5c:1e:a9:58:e3:45:8d:4f:2b:
                    85:72:7c:98:e2:04:a4:2c:82:36:8d:96:d6:f0:5d:
                    15:35:77:de:50:83:9e:33:39:f7:b5:8b:b6:00:0d:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:EA:10:3F:0B:9B:FB:B7:0A:84:BE:3D:F9:E4:E4:72:55:3C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ba2d4d12-4ba5-3b24-afa0-1123424ab8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2036::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:93:0d:05:4f:78:7e:4f:0e:9a:91:2d:40:57:ca:d6:2e:dc:
         44:da:36:96:5e:be:75:02:17:04:ef:a4:8c:e3:98:99:96:99:
         20:61:1f:ac:b4:49:75:17:e7:9f:6b:1a:5a:bb:8f:9a:c7:ef:
         83:18:32:95:a1:3f:c5:0a:17:bf:f3:3e:b1:7c:7c:eb:97:3a:
         34:53:73:f0:d8:2f:ac:bf:29:66:01:33:40:47:80:e2:7f:b7:
         c7:c6:e7:a7:4f:cf:0c:a6:4c:ad:cd:2f:69:77:0c:c8:5a:7f:
         1f:ba:15:f5:02:5e:22:01:29:46:fe:45:e8:4d:75:c5:68:22:
         ec:35:82:50:ac:c2:11:88:db:13:e6:02:4a:2b:80:7e:64:27:
         4c:69:7a:80:71:d8:3c:1d:ae:77:4f:d4:00:67:e3:aa:a0:0c:
         2c:f1:ab:ef:47:4f:db:02:b2:56:48:73:29:22:1d:ff:a2:6b:
         50:0b:b8:dc:83:dc:e7:8c:67:58:4a:60:1a:68:d7:5e:27:74:
         4f:a8:12:db:5b:7b:e9:b5:02:63:d5:96:d9:ad:7d:25:dc:53:
         20:92:99:59:28:69:0a:12:95:3b:a1:68:c5:39:6d:2b:30:b6:
         f2:e8:17:61:ed:76:ae:96:57:3a:47:1c:82:90:06:a3:9a:bb:
         bd:89:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:51 2026 by rpki-client