Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
File:                     c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (raw, json)
Hash identifier:          ITQ1qCfElylnyEuBU1+P9CgDLivHUrJRqcSsdPedb3Q=
Subject key identifier:   1A:E9:65:46:C7:9C:12:71:95:DE:62:95:77:C3:DE:59:9B:FB:F6:9B
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584DA815823F40BACF7DDDDE81C0
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     33039
IP address blocks:        2602:f95c:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:82:3f:40:ba:cf:7d:dd:de:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=e6e4c551-d3cb-46af-bc35-8256bab62732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:01:3b:fc:f9:72:c8:c7:1f:48:1a:f8:76:
                    2d:96:e5:d2:db:17:89:56:05:67:e8:12:5d:cf:90:
                    46:24:fd:8e:3a:05:40:2d:5d:5e:57:ef:73:04:8f:
                    46:d6:bb:15:3d:a7:65:ff:fc:c0:22:45:85:4c:60:
                    8d:e2:39:0a:26:6b:cc:27:5d:34:0b:2b:0a:28:78:
                    65:b4:6d:b8:1b:8e:02:94:8b:21:24:51:f0:f2:d4:
                    97:a3:46:fa:67:60:68:71:52:09:0a:20:a9:b1:dd:
                    d6:f0:62:a6:b8:ec:6e:53:00:fa:6e:d2:da:3f:bb:
                    79:97:75:8e:86:2b:8d:6a:24:10:db:0c:b4:f2:3e:
                    8c:01:a2:5d:f3:c6:ce:2e:59:72:d7:46:82:cc:e9:
                    ca:d7:c2:82:3a:82:bf:94:26:77:9a:4a:6b:1c:a9:
                    01:de:92:12:59:ea:ea:8a:9e:fc:89:96:06:e7:72:
                    22:54:b0:a6:a0:a6:75:64:f8:8c:23:a3:8f:89:c0:
                    b6:b1:a8:76:94:c7:af:58:c4:b7:15:e5:09:b3:be:
                    6f:30:6e:f9:60:80:69:a3:92:f6:d9:cd:48:c1:4b:
                    29:77:f4:fe:97:26:c7:33:0d:d3:66:e5:9c:1e:39:
                    19:d1:f3:55:db:57:86:94:c6:81:80:4e:a4:50:d7:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E9:65:46:C7:9C:12:71:95:DE:62:95:77:C3:DE:59:9B:FB:F6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:96:67:d5:41:21:b5:21:14:a0:c5:cf:32:f7:0a:f6:98:ce:
         f6:20:62:d1:e6:82:b8:5e:97:ce:8a:15:76:f1:6d:5d:b7:c6:
         2b:44:cc:4d:7e:2f:ea:a0:a9:35:99:1d:0c:1d:87:87:0b:21:
         fb:e7:5b:26:71:18:7e:91:38:be:04:dd:d0:5f:ac:af:5b:6f:
         7b:ef:59:b9:a7:a2:94:2a:c2:67:08:c1:ec:b4:cd:e9:8d:6d:
         ac:c3:65:52:12:06:c4:54:80:39:6d:76:28:92:50:fc:ef:f7:
         1a:36:86:e4:0b:b2:b3:1f:5f:8a:23:ef:28:59:9f:50:d0:12:
         12:3c:31:df:86:8d:2b:0d:a4:11:12:90:92:28:1b:18:bc:c6:
         6c:ad:1b:83:b9:fd:00:3a:29:b3:c6:27:57:83:d5:8e:c0:18:
         c7:97:58:64:ed:2e:5c:a5:78:c2:da:29:14:67:98:a6:d7:e4:
         f1:19:8b:67:d3:52:c1:44:c2:10:70:5d:4a:e6:f5:b1:bf:2f:
         b0:8e:89:b8:9b:06:36:90:20:08:1a:dd:ec:19:cf:62:fb:3c:
         50:fe:f2:e3:e3:f4:48:7a:35:fe:2a:6e:de:cd:9f:0b:79:f9:
         37:57:47:4f:50:1d:68:21:87:c3:51:39:ff:db:1c:dc:17:a5:
         a0:8b:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:25 2026 by rpki-client