Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa
File:                     66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa (raw, json)
Hash identifier:          HuY9V64RWofXGLyjMECuecOs4vE8aa23TcRVGWK079s=
Subject key identifier:   38:9C:F5:57:1F:50:28:F5:95:AB:E4:F5:AB:12:55:73:02:FC:07:35
Certificate issuer:       /CN=50652d78-ba7a-4c61-b45c-77fb9faa18a3
Certificate serial:       010D0C9F4328584DB2D07DAD076661F38C826800
Authority key identifier: 52:82:90:8A:E2:FF:B1:98:CE:78:5E:31:24:82:57:97:70:E9:90:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa
Signing time:             Sat 02 May 2026 09:15:33 +0000
ROA not before:           Sat 02 May 2026 09:15:33 +0000
ROA not after:            Fri 31 Jul 2026 09:15:33 +0000
asID:                     402474
IP address blocks:        2602:f3df::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b2:d0:7d:ad:07:66:61:f3:8c:82:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50652d78-ba7a-4c61-b45c-77fb9faa18a3
        Validity
            Not Before: May  2 09:15:33 2026 GMT
            Not After : Jul 31 09:15:33 2026 GMT
        Subject: CN=b68d2e8d-dec4-4a2c-8b3c-cd69f787f78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:58:99:0d:9b:58:3b:5e:a1:bb:0f:4a:4b:5d:
                    5f:47:d6:d5:a0:b3:ca:cc:d0:6d:71:12:a5:6b:31:
                    3c:52:91:e5:87:0b:d7:77:85:d3:ea:ca:f1:33:6b:
                    05:a1:0a:8d:7b:d0:11:f5:18:cb:3f:87:b4:d9:2d:
                    4b:fd:9c:05:73:19:43:5e:fe:e7:ca:db:e4:50:7b:
                    64:67:82:29:4d:2c:8c:85:c7:ca:1a:a5:a5:54:47:
                    98:d1:6d:c9:7a:73:37:a8:91:e2:1b:03:7c:05:78:
                    76:15:4f:70:ae:b7:5b:7f:7b:a7:d9:e8:9c:3f:d7:
                    03:2c:2f:0c:50:88:32:55:1b:dc:76:82:c6:0e:f4:
                    fc:14:2d:0b:0d:32:fa:2e:dc:39:1c:26:75:50:25:
                    76:9d:ee:50:d6:8d:aa:9b:ec:51:a0:ec:4b:46:9c:
                    2a:d0:8a:e9:68:f7:a0:67:0b:b3:be:97:c4:91:6c:
                    9d:a2:86:4e:01:bc:15:7e:78:e4:45:f6:b6:4d:10:
                    3c:cf:f1:58:b9:70:5e:04:48:f6:3a:6c:22:f7:34:
                    5e:10:16:4c:0f:05:c0:45:00:36:31:5e:68:07:a0:
                    37:5c:99:19:ae:a1:d7:70:b7:c9:cf:22:67:2b:1e:
                    79:2a:d7:45:f6:59:8c:e0:d8:59:db:87:7e:47:ef:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:F5:57:1F:50:28:F5:95:AB:E4:F5:AB:12:55:73:02:FC:07:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.crl

            X509v3 Authority Key Identifier:
                keyid:52:82:90:8A:E2:FF:B1:98:CE:78:5E:31:24:82:57:97:70:E9:90:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:31:a0:b5:15:0e:ac:27:4b:29:84:2c:ae:2d:be:ec:de:94:
         2f:04:0f:32:46:4e:2e:fb:98:bc:6a:35:00:23:19:43:60:41:
         39:48:a2:fe:b0:fd:fa:99:b9:b1:0f:64:fd:8e:92:9a:67:9a:
         31:4b:33:41:fd:fa:e7:2a:53:b3:f8:1c:fd:d2:f3:97:52:fe:
         f5:90:b8:a8:c1:bc:bd:f6:f7:f8:b4:19:be:15:f7:90:f5:8e:
         6b:2c:93:b2:05:ca:f4:c8:ab:ff:6b:4b:3b:3a:96:74:98:35:
         e4:83:0c:60:10:d2:ec:65:f8:78:f7:5c:af:be:a7:f2:91:04:
         68:d8:01:ee:05:62:62:e6:e6:05:5c:88:e2:d9:be:00:61:36:
         42:91:d5:a0:99:81:bd:b6:ff:85:a1:48:fd:cd:7b:42:85:57:
         95:3d:ae:26:b5:4a:01:92:36:63:a4:30:78:1d:fb:63:0d:a8:
         0e:80:48:30:64:57:39:a7:5f:bb:29:d8:e7:c0:4b:63:d3:d2:
         a4:ed:4f:bb:18:63:8f:7c:bf:ca:bc:bf:96:ca:c6:b9:45:d0:
         d1:52:02:5d:2f:fe:3f:80:6e:0c:0e:98:1b:86:d5:a0:32:9f:
         1b:a9:89:6c:70:54:08:07:47:c8:72:98:75:b3:3c:af:21:dd:
         62:f1:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:27 2026 by rpki-client