Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/d625c7fe-0eee-30c1-b04c-7eb34e623084.roa
File:                     d625c7fe-0eee-30c1-b04c-7eb34e623084.roa (raw, json)
Hash identifier:          GtYTOWWjmW/GaY8u72r8KWrhGWu+a8MwPELtX1Y1/ms=
Subject key identifier:   10:B8:01:51:21:CB:3D:7B:DA:72:47:7D:EA:BF:C1:E4:45:02:13:3C
Certificate issuer:       /CN=b160892d-dfd3-45cb-a0ff-c5a3b4746404
Certificate serial:       010D0C9F4328584DBFE05B1B3A618EF589A71400
Authority key identifier: 16:8E:F3:5B:56:8E:13:FB:02:5E:19:6F:8F:23:83:20:50:D3:A4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/d625c7fe-0eee-30c1-b04c-7eb34e623084.roa
Signing time:             Thu 07 May 2026 01:33:01 +0000
ROA not before:           Thu 07 May 2026 01:33:01 +0000
ROA not after:            Wed 05 Aug 2026 01:33:01 +0000
asID:                     63027
IP address blocks:        2602:fd0a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/b160892d-dfd3-45cb-a0ff-c5a3b4746404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/b160892d-dfd3-45cb-a0ff-c5a3b4746404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:e0:5b:1b:3a:61:8e:f5:89:a7:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b160892d-dfd3-45cb-a0ff-c5a3b4746404
        Validity
            Not Before: May  7 01:33:01 2026 GMT
            Not After : Aug  5 01:33:01 2026 GMT
        Subject: CN=afbc3aca-fc81-4313-a829-22791d42b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:01:48:b6:50:c7:ea:28:61:53:53:15:c8:
                    0f:31:11:24:b8:22:c8:e2:d9:02:31:66:ee:39:9b:
                    4c:d7:98:44:c0:1c:a4:07:08:5f:42:a4:2b:17:bb:
                    81:76:39:d2:f1:f2:46:53:ef:0d:45:16:a5:54:b3:
                    29:51:bb:83:50:9e:da:f2:95:f6:ea:fe:f5:73:71:
                    07:65:c6:5a:b4:ed:69:d6:3e:1d:5a:87:d3:92:ff:
                    68:fb:5a:11:fc:07:ea:f2:fd:00:b1:a9:9f:21:ea:
                    da:e5:b9:81:b4:4b:7d:23:95:c7:04:ea:9d:c1:bd:
                    ba:8d:93:d4:fb:b6:b9:f9:04:3d:43:6e:e9:d7:2c:
                    59:35:fd:ac:91:61:eb:6a:fc:30:0f:16:f4:34:aa:
                    71:3b:5a:8c:74:fb:be:d4:41:fa:31:a6:aa:60:5f:
                    e5:5c:ac:80:6c:e4:3a:b2:3a:e1:12:fb:10:70:f2:
                    68:7c:66:a5:01:96:73:31:ef:80:7f:9f:9a:21:eb:
                    01:c6:dd:5f:91:6f:26:60:10:ea:02:63:b3:4f:a2:
                    4b:d2:c2:9f:ba:76:25:43:e5:35:2f:47:69:ff:aa:
                    9c:6a:dd:88:ab:3e:3b:7d:eb:6f:05:68:37:45:b9:
                    28:4b:1f:2d:35:92:74:62:3b:53:e1:fb:ef:0d:3d:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B8:01:51:21:CB:3D:7B:DA:72:47:7D:EA:BF:C1:E4:45:02:13:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/d625c7fe-0eee-30c1-b04c-7eb34e623084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/b160892d-dfd3-45cb-a0ff-c5a3b4746404.crl

            X509v3 Authority Key Identifier:
                keyid:16:8E:F3:5B:56:8E:13:FB:02:5E:19:6F:8F:23:83:20:50:D3:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd0a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:47:14:c3:0a:83:f2:6f:1b:71:71:b3:af:53:84:37:9a:
         5c:d5:93:38:07:00:c5:10:83:d1:f6:75:6a:7b:47:a6:0e:36:
         f3:1e:10:86:1a:ec:db:5e:02:3d:b8:ee:2e:51:53:4b:2d:99:
         99:0b:81:b8:c5:7f:4f:0d:cc:c3:e6:74:b4:cc:65:fd:c1:8f:
         1c:a1:f0:35:4e:2b:af:7b:c4:74:ec:00:15:0f:42:b2:38:8f:
         ab:c7:5c:90:02:a4:dc:30:a2:e6:f6:db:f5:63:e2:ab:5c:4e:
         74:8d:da:35:82:37:1e:55:54:92:28:41:b2:41:6c:45:73:df:
         e6:ed:62:cd:d1:ae:ec:3d:d4:36:ee:be:eb:a7:c1:a2:13:c9:
         18:6b:48:6d:f8:0e:0b:22:48:d8:db:24:e2:54:e0:5d:95:a4:
         7d:25:36:10:54:54:74:14:38:22:f0:c8:4d:07:01:bc:6a:02:
         43:98:32:be:ce:5d:ed:b9:f7:c2:1b:da:c9:ae:1e:b2:0a:5c:
         45:fa:e8:54:be:25:bd:b4:b9:b5:1b:57:41:ea:8b:9f:a2:0c:
         c3:3c:9a:06:7b:36:fb:d0:52:60:46:14:bb:ec:1e:ef:41:9a:
         32:17:f8:fe:94:08:15:12:d3:04:e3:67:ac:d1:2b:b7:5f:79:
         84:1b:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:45 2026 by rpki-client