Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cf25bea6-83ad-3141-b82d-cbfe1f249207.roa
File:                     cf25bea6-83ad-3141-b82d-cbfe1f249207.roa (raw, json)
Hash identifier:          7/e41+rT468jv2Q+xPOUvH2058ZptUlJOjLC+mEZUSY=
Subject key identifier:   71:88:A8:BA:D2:BE:5D:3A:FC:C5:45:6A:AD:2B:AA:94:D8:7E:BF:E6
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFE7C3C4B20C7DADFAE00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cf25bea6-83ad-3141-b82d-cbfe1f249207.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:203d::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fe:7c:3c:4b:20:c7:da:df:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=c11681a0-11d4-4c7e-bdd3-3adec549f2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:1e:6b:6f:91:ba:4a:e1:1d:90:e8:97:4f:
                    0d:c1:76:a0:0b:89:08:8b:7e:a0:fa:ef:3c:8b:e3:
                    40:ba:39:d3:0e:32:b2:5a:da:69:c8:94:dd:fc:a5:
                    b4:86:ef:00:d5:e6:b5:42:2b:28:7f:f7:c3:01:83:
                    66:72:ea:2a:2f:1c:56:a3:27:a7:b1:89:fc:9e:33:
                    e3:f9:07:c3:90:52:6a:e5:88:c8:79:22:c1:25:1c:
                    e1:c7:c1:43:e1:ef:19:84:d5:08:b7:bd:ea:89:32:
                    7d:71:4f:aa:27:9f:0a:82:3a:e3:41:a9:ca:be:36:
                    f5:15:78:40:a7:d8:23:08:42:80:67:b5:2e:b8:51:
                    e3:14:4a:bf:e1:7a:54:39:c0:12:99:fc:fa:63:a9:
                    24:59:3f:ae:ff:0c:f7:c0:4e:e0:97:f7:5d:c1:cf:
                    dd:4d:95:3b:31:c7:68:6f:21:39:7d:6a:de:28:c7:
                    8e:c5:a6:ce:2f:32:3b:38:56:94:38:2f:03:6b:12:
                    97:36:01:81:50:f3:bc:ff:ad:c9:58:e1:73:e7:25:
                    d7:48:37:d2:47:35:98:a3:2a:49:37:84:a0:54:b6:
                    df:19:16:74:f8:5b:4e:8e:9e:e1:62:b6:a0:89:86:
                    5f:74:a7:93:a5:51:63:92:67:0a:64:e2:60:dc:92:
                    11:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:A8:BA:D2:BE:5D:3A:FC:C5:45:6A:AD:2B:AA:94:D8:7E:BF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cf25bea6-83ad-3141-b82d-cbfe1f249207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:203d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f3:a0:ba:24:9c:b5:6d:c5:bf:4e:68:15:9d:0e:ec:a0:b5:
         a4:15:d9:f8:1f:c9:6d:8e:55:1c:5a:b6:0e:0f:d0:c2:a0:22:
         70:7f:91:cb:d3:af:ae:27:bb:db:e4:c7:db:fb:fd:93:57:54:
         8e:a2:61:b3:36:cf:3d:8d:60:f0:f9:03:3f:bc:c4:09:a0:2f:
         e8:53:f4:dc:86:61:eb:7a:0f:ce:36:95:8a:28:d5:d0:8e:c2:
         75:d5:02:6d:b7:7a:af:1f:05:88:e9:48:dd:6d:91:b7:0c:c6:
         79:11:cc:a8:e5:15:84:84:a5:bf:43:cd:1e:2c:d5:aa:9c:65:
         cd:30:47:73:3e:41:e0:4b:90:07:3e:63:f0:59:b8:bd:b7:8b:
         2b:64:44:74:2f:2a:e3:c0:1a:a9:df:f2:5c:ae:92:6f:61:f5:
         d9:b2:45:8d:7d:b8:1b:68:58:a8:5e:68:96:7a:8d:a1:68:be:
         01:91:38:2b:7b:8f:40:c0:95:71:9b:05:66:10:df:e2:04:e2:
         c7:f2:34:d1:d1:88:b3:fd:63:1c:1d:08:a1:86:33:63:1f:e3:
         af:53:ea:64:5c:bf:f2:05:ef:7f:60:5c:f6:46:87:5d:4e:fa:
         9f:a4:ae:7a:8d:2a:5c:18:34:c3:16:fa:69:79:6b:c4:3a:0f:
         d0:70:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:23 2026 by rpki-client