Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/eeac264d-5268-3ecb-8b8f-fed1440fa29b.roa
File:                     eeac264d-5268-3ecb-8b8f-fed1440fa29b.roa (raw, json)
Hash identifier:          8xlKCFO7GWgBBCxR995WkPHtsSnaFzIVVEfY4TYc1xw=
Subject key identifier:   43:AE:D2:1D:EE:EC:0F:F6:C4:B9:10:A5:BF:3E:86:4F:50:B7:D1:A4
Certificate issuer:       /CN=38f0cd1a-37b5-4e21-a451-606bf424f495
Certificate serial:       010D0C9F4328584DCC60689E30E7F9276E5A91E0
Authority key identifier: 9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/eeac264d-5268-3ecb-8b8f-fed1440fa29b.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     21928
IP address blocks:        2602:f894:100::/40 maxlen: 48
                          2602:f894:200::/40 maxlen: 48
                          2602:f894:300::/40 maxlen: 48
                          2602:f894:400::/40 maxlen: 48
                          2602:f894:500::/40 maxlen: 48
                          2602:f894:600::/40 maxlen: 48
                          2602:f894:700::/40 maxlen: 48
                          2602:f894:800::/40 maxlen: 48
                          2602:f894:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:68:9e:30:e7:f9:27:6e:5a:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f0cd1a-37b5-4e21-a451-606bf424f495
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=0f2fa205-dc12-4bea-94a3-4faec21b7694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:92:ac:d2:35:c9:1c:3a:3e:a1:a5:7d:00:
                    48:b4:7d:3f:dd:98:29:24:69:ea:3f:f8:d4:7e:90:
                    b4:53:f5:90:3b:bc:62:61:55:47:46:de:f7:b6:5d:
                    46:c3:de:7a:fe:3a:b4:3a:92:d0:c6:d0:0c:e1:2c:
                    31:a9:94:7b:f6:7a:de:28:01:39:60:10:eb:30:34:
                    c6:ef:db:f3:b0:fc:b5:1f:3d:a1:76:6d:eb:77:4a:
                    66:3e:61:7d:91:88:01:26:b6:15:cd:ac:36:e9:3f:
                    55:8b:40:e9:ea:46:5a:51:7a:83:15:11:28:8c:8f:
                    c7:c4:c4:86:70:8d:73:61:d6:66:ff:8c:fb:af:09:
                    89:42:35:76:5c:d5:1e:dc:af:91:93:dd:b0:d2:63:
                    32:bb:96:ed:e9:7f:c1:bc:9e:c9:54:a7:82:02:dd:
                    f0:d4:ef:6f:2b:b3:75:f1:ce:f9:cb:88:86:a8:71:
                    dd:17:07:66:fa:94:ff:76:d6:f0:20:43:3b:d8:33:
                    bb:9e:bb:5b:b9:0e:56:d7:c9:69:cc:df:d4:ef:e3:
                    5c:2f:3e:5f:53:05:2e:ab:5f:41:96:13:b8:07:37:
                    8f:60:0d:b0:94:90:85:dc:97:63:d2:cd:f3:de:5e:
                    eb:27:25:ac:68:41:89:f1:5b:7e:83:1f:9b:f8:22:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:D2:1D:EE:EC:0F:F6:C4:B9:10:A5:BF:3E:86:4F:50:B7:D1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/eeac264d-5268-3ecb-8b8f-fed1440fa29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl

            X509v3 Authority Key Identifier:
                keyid:9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f894:100::-2602:f894:9ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:39:f6:69:df:e0:e1:44:0d:6b:df:33:f5:28:3d:59:06:22:
         9d:dc:d7:b1:d1:1d:33:b2:69:ba:02:49:11:2b:50:94:4a:47:
         55:4f:f3:65:4a:8a:db:95:33:99:c4:a3:c6:ad:80:aa:d2:c3:
         f8:47:bd:f9:9b:61:ca:bb:a3:e2:54:7c:03:c4:25:f2:9b:ca:
         f1:25:44:96:e9:c7:af:cf:0b:17:ca:60:93:53:9f:d4:9f:fe:
         ee:66:93:16:83:a9:c7:c2:fd:55:61:3e:0c:4f:1b:04:ac:12:
         4f:fe:5f:cf:b0:38:3f:34:ab:7d:c5:29:6d:ce:f0:ca:3b:55:
         09:d1:ed:17:60:e1:03:4f:87:2e:93:7c:28:84:30:64:89:c9:
         23:e0:e3:04:c6:0f:c6:08:ec:9a:52:44:34:13:8c:86:92:66:
         08:92:18:9e:35:e3:b8:5b:c7:b4:e2:1b:e0:89:71:a6:5c:d5:
         ec:2c:3a:7b:31:d1:88:d7:46:46:f9:28:b0:bd:01:13:bb:49:
         7a:09:c2:c5:cd:6c:d2:5c:b9:b9:da:50:73:bf:2c:41:10:41:
         95:b4:83:cf:06:53:d1:bc:b7:dd:f4:00:3b:62:39:2c:a0:75:
         fe:67:54:92:e3:24:d9:26:62:bd:64:cf:5b:e9:4d:7b:e7:19:
         d4:b8:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:07 2026 by rpki-client