Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa
File:                     bc97280e-58ac-34bd-b6b0-31818047edb3.roa (raw, json)
Hash identifier:          Lay/Ro2Gu+vl0vF6dJqOm+GWj8+he0LgNxyRpayIsNE=
Subject key identifier:   53:A6:7C:28:9C:AE:E9:41:D8:C6:02:73:83:FA:26:B6:26:7C:AE:05
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584DB0758657DA53B41AAB610100
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     53727
IP address blocks:        2602:f982:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:86:57:da:53:b4:1a:ab:61:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=4d47fc1f-430f-4cc3-8a96-d2be656feb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:ee:95:27:b5:01:30:cb:dc:e6:22:e4:26:
                    03:bc:9a:40:be:b7:08:4b:e3:c2:6f:49:d2:d5:02:
                    c7:57:64:c2:06:f6:c5:57:b8:a3:0c:48:8a:10:b2:
                    d4:8c:82:1e:19:a3:9f:69:91:8a:27:07:e1:1a:02:
                    ba:db:fc:23:79:f2:26:99:17:69:f1:09:55:98:f3:
                    46:56:3f:65:24:c7:01:a3:8e:80:c6:71:31:cf:1e:
                    96:c3:2c:b0:da:5e:1c:8d:a0:a3:2b:df:83:9e:61:
                    11:4d:7a:13:73:94:38:ff:81:f2:d5:b1:d8:c9:15:
                    37:6d:61:0a:30:94:7c:d5:b9:39:be:e9:74:c9:cb:
                    da:92:16:a3:0e:33:9c:e0:2e:18:31:2d:86:a1:35:
                    fc:49:b2:39:79:e2:ec:27:ae:82:71:6b:9e:c5:07:
                    17:b5:be:8e:6c:12:cf:e2:f2:38:3e:04:00:89:24:
                    f6:1e:07:4e:07:f8:a7:de:09:6d:26:08:60:1d:93:
                    71:77:ba:ff:93:c4:00:c1:3a:63:7c:dd:88:8b:73:
                    a5:04:c2:f2:92:3a:ea:22:4f:05:37:33:cc:df:22:
                    bc:b1:c1:00:16:04:96:8e:14:7f:1a:ba:f9:ba:e5:
                    d3:11:6c:d0:97:67:0c:ca:88:b3:43:2e:37:02:35:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A6:7C:28:9C:AE:E9:41:D8:C6:02:73:83:FA:26:B6:26:7C:AE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:02:f5:a1:4b:34:fb:dd:3a:02:bf:1b:08:e7:9f:9a:86:
         e4:52:f4:70:0c:95:47:56:1b:95:21:7b:1a:9c:9f:7b:1e:84:
         e8:c2:5f:21:b7:c4:9e:da:b1:bd:88:7f:78:81:28:c9:a1:a5:
         df:90:6f:69:32:5a:08:6e:27:5e:0e:01:ad:86:3f:3a:ad:26:
         bc:30:b5:08:7a:5c:de:06:da:7d:68:cc:81:17:98:1f:f5:9c:
         5b:0b:49:98:ec:84:05:4c:79:68:d0:3a:9c:af:83:89:b7:bd:
         88:fc:f8:b5:60:15:04:7d:0b:fb:96:77:47:b5:0b:b6:43:f4:
         22:db:a2:4c:91:5d:14:38:59:a3:2f:02:bd:26:8d:90:ff:9f:
         4f:5c:1e:47:6a:29:4f:54:db:47:3d:1f:ee:23:eb:03:66:eb:
         c0:2c:b8:ae:db:f2:61:58:ac:7c:ea:f1:77:0b:e3:ae:86:09:
         f3:e9:cb:c4:ca:6c:ef:f8:2e:c1:b0:87:cf:f8:2e:d7:1d:c0:
         16:e7:e0:cf:87:e3:18:2c:94:e8:23:a7:0a:57:da:80:bc:17:
         20:7c:45:46:68:f1:ee:44:56:74:b7:e7:64:81:7b:95:c4:74:
         46:47:af:19:e7:29:2a:09:8e:ac:ee:43:ae:bc:6a:5e:3c:9d:
         21:04:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:09:13 2026 by rpki-client