Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d3ca05e6-6c0b-3cd4-8188-4aeb23732399.roa
File:                     d3ca05e6-6c0b-3cd4-8188-4aeb23732399.roa (raw, json)
Hash identifier:          ChdvSuDZUW8SB3JHq7m9ER0diNfD8Q7wSgg6M9xW39s=
Subject key identifier:   67:87:35:81:F2:D5:34:DF:E4:C0:E1:9C:07:69:54:32:01:37:3A:8A
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFF7B011C7B3F69754AC0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d3ca05e6-6c0b-3cd4-8188-4aeb23732399.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:20aa::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:ff:7b:01:1c:7b:3f:69:75:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=83ddd3df-ddf8-461f-a40b-c7d81c64e07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:ce:a6:b9:c9:5f:eb:61:41:eb:83:69:7e:
                    d5:fb:86:c8:a1:61:b0:b3:9b:e9:4d:40:74:31:1b:
                    b3:30:df:14:cb:75:62:9f:d4:d8:fa:b1:8c:a4:85:
                    16:8c:b7:71:62:f8:5b:c9:dd:f6:32:bf:75:6f:27:
                    e0:4d:dc:61:4b:e2:ed:93:6d:5f:f1:47:d2:80:6a:
                    84:2b:a7:3a:08:3b:88:3d:9f:8e:c0:c7:72:57:00:
                    0d:45:88:87:bc:24:7d:e5:cb:53:c9:cc:08:fe:8d:
                    3f:94:b4:c5:4b:ed:bc:f4:95:52:c6:29:2f:5f:1b:
                    0c:95:79:d2:9c:42:d2:0c:3d:d0:26:f8:8a:84:0b:
                    77:31:8c:10:52:d8:41:8e:9d:f4:03:c4:1b:84:7a:
                    8b:5c:70:7e:4f:28:b3:d5:69:0b:6e:96:68:41:c9:
                    3b:8e:21:c0:95:6b:4b:16:96:50:fe:63:f3:86:8c:
                    30:8f:79:a8:7e:66:f3:2c:09:a0:ea:07:7b:ac:bd:
                    3d:af:78:44:e9:85:9c:ae:5a:6a:ef:33:0b:ea:4e:
                    9c:53:ab:69:11:ee:20:62:2e:c4:6f:ad:bb:b3:c2:
                    43:25:db:a6:bc:d2:82:e5:c7:11:d6:74:8d:0f:a5:
                    a2:a2:81:d1:3f:55:a0:a2:b7:c5:bd:c7:7c:8e:35:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:35:81:F2:D5:34:DF:E4:C0:E1:9C:07:69:54:32:01:37:3A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d3ca05e6-6c0b-3cd4-8188-4aeb23732399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:21:72:a9:cc:ec:4e:f5:e9:ac:e3:09:b4:21:e4:36:1f:39:
         e9:f3:87:dc:0a:bb:ab:d6:66:51:35:da:9f:6c:01:72:f8:8e:
         b3:40:74:94:1b:53:92:c6:5f:3d:0d:e4:bb:b7:7e:e4:29:09:
         8c:30:a4:43:7c:c8:a6:fb:a5:f6:5b:c3:2e:09:c4:3b:ef:3d:
         ef:b0:48:db:56:7c:79:93:54:07:1e:b8:48:7b:2f:21:42:c1:
         76:b0:22:95:ec:2a:3a:e0:79:36:0c:04:77:7a:f3:4f:5d:9e:
         8b:45:b7:8a:7d:d5:53:bb:ab:ec:ae:a5:17:c4:f8:c5:59:37:
         e9:c1:b4:e1:a0:1d:13:67:fd:14:57:88:81:4d:eb:7e:3a:59:
         c8:e2:98:bd:f0:32:98:24:aa:af:0c:f5:fe:0c:67:a9:76:d3:
         d8:df:06:de:3d:9a:a9:93:c2:eb:80:72:3c:7a:a7:cb:49:f9:
         f3:3b:a5:14:5a:08:ed:59:1b:6d:a3:c3:dc:19:35:c3:38:59:
         08:d5:a7:2d:d4:fc:c0:5e:51:05:d6:6e:9d:dd:a0:89:9a:f7:
         4a:10:99:fa:98:33:d6:66:92:62:dc:56:07:0e:f5:6b:85:08:
         9b:b6:1f:2d:77:48:d3:06:26:b4:3f:b2:58:b4:a8:d8:5d:94:
         54:f1:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:54 2026 by rpki-client