Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d7d1fbd4-da59-3b25-bf1e-127472184883.roa
File:                     d7d1fbd4-da59-3b25-bf1e-127472184883.roa (raw, json)
Hash identifier:          1zTduLvNu+2xyg/LetNOk4nPJdquumxHr2vqxqwEHOI=
Subject key identifier:   0A:64:89:37:12:A7:7E:CA:74:69:3C:A4:1F:95:A7:E5:82:08:3F:5D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFE9BAEB063676C54CD80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d7d1fbd4-da59-3b25-bf1e-127472184883.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:203f::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fe:9b:ae:b0:63:67:6c:54:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=cc8ac8aa-0df0-4c48-8599-1d3819e9fc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:54:65:e0:36:84:0b:5a:7f:3d:b3:e8:b0:
                    dd:d4:d9:4e:49:dc:4f:b4:ae:a4:db:c1:6a:2d:94:
                    91:90:75:9a:79:74:17:3e:5e:8e:5d:98:0d:b0:02:
                    48:10:d8:6a:c1:ae:b4:55:a6:e0:e0:f2:e9:82:a0:
                    48:94:b7:6c:40:d4:54:a8:88:c2:66:ec:2a:d2:36:
                    30:fc:6b:bb:9f:ba:bd:4a:5b:13:6f:55:e7:37:09:
                    f8:58:e8:9e:2c:6a:aa:82:c6:47:92:20:65:83:eb:
                    38:b1:48:d3:83:a0:cf:4b:6b:60:a7:9b:49:49:15:
                    bb:5c:4c:08:ed:37:76:d9:0b:61:34:a5:8d:d9:ed:
                    14:79:cf:1e:e7:5a:19:2d:af:2a:cb:83:38:c0:2c:
                    41:f3:c5:74:6b:53:dd:c8:78:6b:c3:b5:dc:6f:e4:
                    6f:a5:4e:1f:ae:97:40:fd:c0:3c:96:ae:a3:b2:84:
                    77:1e:99:31:f2:73:b9:ce:56:9c:c4:78:f8:81:b7:
                    e0:08:a4:af:dd:54:02:ab:9a:01:db:88:8c:95:12:
                    dc:b0:65:3e:67:ad:b6:c4:18:17:c9:4c:5f:d5:92:
                    cc:84:6e:67:d1:51:0a:5f:41:2f:14:e9:0f:64:73:
                    fb:58:f9:9a:53:8d:6d:4d:a2:31:49:8b:96:e3:2f:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:64:89:37:12:A7:7E:CA:74:69:3C:A4:1F:95:A7:E5:82:08:3F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d7d1fbd4-da59-3b25-bf1e-127472184883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:203f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:d6:74:05:68:d0:5c:55:b5:b3:56:ee:e7:61:c4:87:da:
         44:ff:c9:94:00:dc:5b:cc:00:82:6d:34:a7:59:50:30:8d:64:
         6d:b2:a0:3f:72:1f:6d:40:0f:fc:5b:a1:4b:00:29:04:66:54:
         44:fe:7e:f1:64:7f:92:5f:6f:0d:6b:68:1b:8c:ca:8e:2d:11:
         25:3c:4c:cb:47:51:bb:c9:2a:78:b7:dd:66:5e:b8:ad:39:f7:
         b0:cd:24:2b:9a:47:6a:b6:11:8b:62:6f:d6:0e:ba:1b:ae:0c:
         e7:9d:35:5a:c7:01:ff:27:6d:f9:b6:3e:0c:b9:e8:cb:06:d8:
         8e:73:fe:5a:f6:59:ef:e5:f1:51:23:c9:73:4e:43:b8:2b:4c:
         17:ae:f8:a7:78:fe:65:ea:13:b5:99:c8:c2:e5:ea:32:0c:aa:
         fc:f9:49:aa:dc:e8:59:83:e2:fe:23:73:1b:53:51:29:0a:06:
         1a:96:e0:6f:c2:cb:db:75:5b:7c:97:07:a1:88:49:5b:e2:1a:
         76:9f:70:ae:35:29:85:87:f3:94:3f:75:7d:07:a7:2d:b1:a8:
         64:d7:75:89:01:1b:63:b8:10:f8:25:d7:05:f5:76:02:f4:4e:
         8f:2f:82:3e:4e:a7:a4:f4:75:8e:ed:07:e2:8b:5b:06:93:4c:
         23:31:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:05 2026 by rpki-client