Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa
File:                     d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa (raw, json)
Hash identifier:          dcapt+jlCUCg/gCVgNyGP+5StU35ReDFgIwwrD6JydU=
Subject key identifier:   B5:D2:28:27:5B:A8:39:3B:AF:4C:33:E0:8C:3F:83:4D:EE:52:4C:CF
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95F009FE03566165E0337300
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:205e::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:09:fe:03:56:61:65:e0:33:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=6dfa8736-5b6f-44b0-9041-aea0eba6159e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:fb:dd:3a:33:e3:b4:64:59:33:c3:f2:2e:
                    b5:de:bc:69:b4:44:73:fe:41:51:7c:64:3d:1e:44:
                    56:e8:56:f3:15:70:82:a5:71:75:08:5d:8d:6c:96:
                    af:2f:8c:3f:80:3f:43:f4:b2:46:6d:1f:c2:7a:85:
                    7a:8e:0d:eb:22:7b:7b:72:90:56:2d:cd:4c:18:2a:
                    54:b7:67:23:8a:d1:95:40:ac:e2:6f:32:94:96:3c:
                    d3:11:ba:ed:26:e5:49:d8:25:87:65:8d:34:a2:35:
                    d4:d3:86:2b:49:42:d5:7e:27:9b:fa:e3:09:39:c7:
                    e5:07:91:1b:d5:dc:7e:c2:9f:d5:e5:5c:68:58:db:
                    2c:d7:2a:83:66:72:55:fe:1e:3d:57:56:63:a0:ea:
                    6f:5b:18:15:53:9b:70:d0:ac:4a:1c:8f:87:69:fb:
                    ea:c9:de:19:aa:02:d3:6f:aa:8b:05:3d:da:aa:b0:
                    60:54:b7:64:60:31:0c:78:12:1e:9b:e3:ed:df:b9:
                    e7:50:54:c9:42:de:f9:83:10:c1:ac:64:6a:11:f0:
                    06:30:f0:e7:9c:38:c6:02:a6:0d:fd:3e:a7:31:a1:
                    94:dd:32:7c:f7:33:39:0d:14:9e:d6:29:07:e2:20:
                    2f:ce:5f:d5:69:68:86:1d:c8:a8:ea:74:a2:2e:18:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:28:27:5B:A8:39:3B:AF:4C:33:E0:8C:3F:83:4D:EE:52:4C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:205e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:44:37:58:79:6b:5d:55:7a:a4:6e:4f:f3:59:8a:03:85:
         5c:2f:5d:94:d6:9f:85:5e:ea:3e:8c:3d:f0:c0:5c:c2:7a:ae:
         f6:67:d6:d8:27:4e:76:d1:62:42:91:2e:f6:a0:72:91:0c:3b:
         2f:05:55:54:cb:0e:ba:c5:e0:bf:2b:e7:e1:4c:80:0f:22:55:
         a3:96:f3:95:53:59:84:23:57:70:1a:6e:82:84:c4:9c:e1:cd:
         25:91:29:d1:e1:57:7e:76:72:6a:70:d6:05:fa:fa:80:40:5b:
         16:5b:42:89:e1:4a:5c:84:29:be:95:52:c5:9b:18:0a:6e:94:
         9b:bb:5c:5a:b4:89:b9:49:c6:4d:74:df:64:85:e0:ec:24:97:
         fa:2c:b0:19:64:36:2d:43:50:01:ea:af:14:9f:53:ab:7c:4b:
         93:dd:b3:7f:5a:bc:0b:0d:9c:a8:7c:37:ce:c4:ed:c1:d7:4c:
         3e:26:22:a0:44:01:a9:7d:20:21:bc:a8:ea:f4:78:84:aa:57:
         a2:8c:23:27:71:dc:72:21:d4:d6:a3:6f:b6:3f:95:74:59:79:
         cd:48:aa:3a:ae:07:89:9f:39:b0:5d:7f:79:d5:a5:dc:bb:45:
         81:aa:25:d9:6e:3b:81:e0:d3:04:72:41:6e:a3:00:c1:91:93:
         2b:6e:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:41 2026 by rpki-client