Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/8fdd219f-eebd-3f6a-b042-eeacfa2c7385.roa
File:                     8fdd219f-eebd-3f6a-b042-eeacfa2c7385.roa (raw, json)
Hash identifier:          kCJwVPydJRPWD/28IKNpwJFcTKf67VD6XdR1Yfp2LYs=
Subject key identifier:   21:5B:42:BE:7A:E2:40:1C:C1:77:B5:AC:5C:1F:04:5F:6E:BC:EC:E0
Certificate issuer:       /CN=e4485525-7b77-4aaa-bb61-d9be3796d78d
Certificate serial:       010D0C9F4328584D9A152FFDC182C298A9C0E900
Authority key identifier: 44:AF:E8:AF:62:B6:65:A5:B5:4D:F2:04:E9:7F:C8:1A:0E:3C:5A:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/8fdd219f-eebd-3f6a-b042-eeacfa2c7385.roa
Signing time:             Thu 23 Apr 2026 12:38:45 +0000
ROA not before:           Thu 23 Apr 2026 12:38:45 +0000
ROA not after:            Wed 22 Jul 2026 01:11:57 +0000
asID:                     402430
IP address blocks:        2602:f3e5::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/e4485525-7b77-4aaa-bb61-d9be3796d78d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/e4485525-7b77-4aaa-bb61-d9be3796d78d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:15:2f:fd:c1:82:c2:98:a9:c0:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4485525-7b77-4aaa-bb61-d9be3796d78d
        Validity
            Not Before: Apr 23 12:38:45 2026 GMT
            Not After : Jul 22 01:11:57 2026 GMT
        Subject: CN=721a49ba-e316-41df-900e-538353ff2e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:1b:ad:a1:ff:fe:79:02:33:f8:81:c6:a5:
                    0b:69:ae:b6:c8:31:61:77:6b:08:87:e4:34:21:11:
                    df:1b:42:22:7e:f1:ad:2f:04:2f:4d:e8:dc:fc:a5:
                    4c:fc:27:0e:0e:1a:f0:40:44:07:1d:fe:8c:2e:27:
                    09:49:8a:0b:0a:f5:7a:aa:8c:6f:b6:c0:a6:52:b5:
                    5f:a0:35:3f:ee:99:f9:1a:e5:1d:45:4b:80:e4:34:
                    4c:1e:59:ba:f3:ab:91:e2:60:54:49:c6:36:69:64:
                    9c:56:3c:9d:37:5a:af:99:16:5b:ff:44:73:68:03:
                    8a:95:17:aa:6b:3d:0f:c9:8c:c4:fc:e9:1b:e2:9b:
                    f8:81:c7:23:cc:4c:58:27:09:70:a7:82:4d:7a:23:
                    e5:12:a9:91:02:d6:2f:35:69:29:ed:b2:6b:9d:69:
                    24:75:98:2f:65:1c:7a:50:7b:97:fc:6b:e0:9d:87:
                    1a:25:99:e4:fe:e8:5d:a4:d4:a1:41:6d:13:2c:38:
                    9f:f6:26:9d:be:6e:dd:15:a4:79:a4:cb:b2:b6:6f:
                    38:ce:bc:15:6d:f9:43:2e:ec:2d:cf:75:b6:95:a0:
                    02:16:b5:1d:da:92:ca:69:77:b7:7a:12:eb:82:be:
                    44:f5:aa:5c:7e:bd:25:b6:e0:2c:99:3f:f9:82:d9:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5B:42:BE:7A:E2:40:1C:C1:77:B5:AC:5C:1F:04:5F:6E:BC:EC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/8fdd219f-eebd-3f6a-b042-eeacfa2c7385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/e4485525-7b77-4aaa-bb61-d9be3796d78d.crl

            X509v3 Authority Key Identifier:
                keyid:44:AF:E8:AF:62:B6:65:A5:B5:4D:F2:04:E9:7F:C8:1A:0E:3C:5A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3e5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a0:b1:34:12:66:db:52:eb:8d:31:be:65:72:b9:40:e2:3a:
         da:38:87:e3:f1:49:fe:6b:29:85:e1:ad:99:d8:e7:2f:73:56:
         84:1c:77:08:5d:8a:cc:6b:e3:de:fe:42:07:57:46:c8:76:5f:
         c2:5d:bf:ca:f4:07:dc:ea:b9:12:31:97:c8:66:e0:07:26:ac:
         27:c6:80:69:41:7e:a5:b4:b6:d7:b3:27:ed:f8:e0:70:70:21:
         98:b1:88:40:22:e1:38:d4:4d:a1:e6:18:ab:8c:67:63:cd:47:
         47:7d:20:55:d4:7a:c9:d5:a2:34:75:28:7b:98:cf:cb:ad:91:
         6a:29:3d:46:84:5d:68:97:cb:f4:85:1f:01:96:49:c5:1c:46:
         fd:c4:67:54:7d:24:a0:d9:dd:fd:c7:8c:92:07:bb:58:79:cb:
         62:5c:9f:07:fa:cc:1a:b2:8d:ad:c6:bd:c0:d1:0f:b6:af:e4:
         05:82:30:03:4d:cd:97:c6:f8:dc:d3:e1:b1:19:5d:69:a4:85:
         2a:8b:d2:0a:a5:33:3e:bd:2a:4f:84:f8:dc:f8:8e:e2:ad:13:
         32:13:43:b6:75:64:75:e5:70:41:6e:56:88:32:52:c8:ba:d3:
         bd:10:fe:fc:8d:98:89:ef:19:87:92:29:0d:4a:6a:55:35:49:
         f3:df:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:08 2026 by rpki-client