Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa
File:                     725248f3-6cd4-3191-b686-aae1fe549b6e.roa (raw, json)
Hash identifier:          SkHXF/ERkDRIJmFIid2wPx2RPfQlQfB766cFtuF3s9w=
Subject key identifier:   9D:27:76:0E:73:33:19:10:74:3B:AA:13:B7:70:F8:30:9D:B5:22:75
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584DB07586208CE8F6C8BE367280
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     53727
IP address blocks:        2602:f982::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:86:20:8c:e8:f6:c8:be:36:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=75f51a97-f8a4-4b16-a9fa-17e68c2063ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:bd:48:ca:a3:da:b7:e1:67:57:56:fa:2a:
                    5f:75:0a:bc:ee:ab:5b:b1:14:85:07:aa:78:b3:92:
                    ca:47:8d:41:87:6d:0d:63:4a:16:f5:48:a0:b0:5b:
                    0a:68:4b:66:37:9f:67:9c:00:a6:69:33:97:c0:ff:
                    1c:ba:f6:64:4a:c4:9d:8c:a0:9e:39:88:57:70:72:
                    28:ca:f3:5a:de:69:4b:a2:4a:5a:29:5b:8f:bd:11:
                    51:0c:ff:32:45:d0:56:68:bb:1e:a8:c3:48:b0:65:
                    ac:6c:33:fd:1a:28:e9:fc:b6:75:65:a9:db:78:46:
                    ec:39:c3:6e:13:04:56:de:b1:68:29:1d:cc:e4:20:
                    81:68:bb:99:0b:b2:ca:e2:2d:27:e1:39:88:f4:e2:
                    b6:e0:33:c2:c5:6e:03:9b:14:2c:18:16:4f:4d:f6:
                    3a:6e:13:6c:f0:9e:e1:2e:5d:53:af:9d:fa:36:e7:
                    ca:a4:6d:18:84:f4:85:3d:af:7d:f4:b1:c9:2c:d7:
                    c5:ab:fc:b2:ab:2d:83:59:fa:60:c3:35:94:5c:6a:
                    e7:9b:3d:90:4a:bd:2d:11:24:55:23:b9:4f:fc:7b:
                    70:1d:57:5c:1f:c6:2a:ab:a5:69:42:b5:2e:64:d2:
                    e2:e3:58:0b:64:2c:ec:b7:d0:46:9e:8f:5b:0c:b4:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:27:76:0E:73:33:19:10:74:3B:AA:13:B7:70:F8:30:9D:B5:22:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:7c:d0:ba:c0:fc:0c:e8:97:9e:eb:e5:9a:3a:f5:67:e9:
         d2:32:78:40:cb:bb:f8:a9:d0:bd:3c:e4:ad:53:dd:75:bc:07:
         ba:f4:9e:f9:52:9b:ff:ab:ef:ad:e5:a6:6f:73:0b:2e:28:8e:
         4f:42:6a:cb:ee:50:95:db:ed:f7:15:a0:50:2d:5c:f4:49:85:
         04:2f:35:36:8d:b9:9b:ec:44:70:1b:44:d9:34:02:d5:fd:95:
         aa:cb:e7:26:32:23:c7:2c:58:f3:c9:3d:94:33:ac:3d:32:13:
         c6:aa:ef:4e:78:16:6c:9a:d5:38:cf:94:11:89:93:7d:13:6b:
         cf:3c:59:c5:18:25:0b:e5:75:bf:11:db:65:25:3b:47:8b:b6:
         9b:ef:b4:98:3b:b3:84:68:b2:f4:89:ca:ee:ad:44:2e:d8:31:
         e0:4f:0a:33:4b:7a:d2:a3:c4:ff:08:08:87:1b:14:81:ba:ee:
         ca:3b:0a:ba:ad:e1:b4:b2:31:e1:91:98:56:be:03:03:9c:fd:
         d0:6e:d3:a9:7d:f9:ba:8e:ee:ba:a3:63:87:ea:01:13:4a:36:
         2e:39:0e:b2:7d:97:3c:05:60:4f:50:f5:cc:94:1a:65:91:fd:
         70:0d:f6:7f:c0:bb:4e:53:63:7f:29:fe:1f:3b:36:f9:73:db:
         67:a0:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:50 2026 by rpki-client