Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa
File:                     117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa (raw, json)
Hash identifier:          eyCOh4eoh1cjkAJG/W2ayLsNWF/CJM4/SaYM8fvKGPg=
Subject key identifier:   D7:D4:69:44:F0:27:C9:37:A2:DE:DC:7E:2F:C1:C4:44:61:09:F3:02
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584DC400523B7F0BCE5776AD5400
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     201217
IP address blocks:        2602:f96c:f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:52:3b:7f:0b:ce:57:76:ad:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=61c13038-2868-4b62-8f84-f2ac687650a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:6d:9b:f6:ca:d4:fd:2d:5e:26:a0:75:40:
                    69:1f:94:f8:b3:1b:be:a5:09:7e:97:50:93:c9:d3:
                    19:bf:5c:5f:02:e3:6c:f3:a3:0c:8a:bf:c9:a0:57:
                    f0:ed:b4:05:f2:77:85:44:a0:9e:c8:09:ed:c6:96:
                    87:38:a0:ab:5c:51:86:fb:07:0e:4b:4a:15:cd:62:
                    14:29:33:6f:7b:70:63:92:b9:b2:4b:0c:2e:5f:ba:
                    68:6f:e5:13:2d:99:75:c0:36:14:4d:54:b6:93:43:
                    88:72:a9:9f:fd:66:32:7a:a3:64:c2:60:4f:3b:6d:
                    54:e7:bb:25:5d:22:22:32:c0:7e:5e:76:b1:c6:af:
                    0a:2a:9d:77:96:2f:ad:85:d6:07:71:db:a1:a5:70:
                    84:7f:43:a9:b3:f2:bd:41:51:03:91:40:a4:48:eb:
                    4a:8a:2c:dd:1f:2a:43:69:f5:24:af:35:7e:05:4c:
                    7a:49:a8:89:aa:75:ad:04:8e:84:f6:0e:1d:e8:cf:
                    de:89:8d:12:74:e4:34:40:0b:95:6b:7d:6b:cb:52:
                    c2:db:ee:86:78:95:47:49:05:19:c1:88:62:18:92:
                    f3:63:76:13:5b:1c:ba:33:49:ce:49:31:d0:25:3c:
                    d5:04:30:ee:97:79:12:0a:b8:dc:cd:02:97:82:41:
                    e1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:69:44:F0:27:C9:37:A2:DE:DC:7E:2F:C1:C4:44:61:09:F3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4d:3e:1f:34:2e:ef:35:d9:40:4e:cf:7a:62:c8:d4:36:08:
         83:4f:28:da:35:1b:72:19:71:23:10:60:84:7b:01:cb:37:a8:
         8b:bb:70:2e:9f:cd:50:e8:da:fe:4f:c7:89:75:34:1c:18:1c:
         9f:49:02:3d:35:f5:cf:56:4b:9c:45:23:11:1c:9f:63:93:50:
         a4:d8:60:74:f2:17:06:d4:50:e1:7e:4a:8c:2b:3f:d3:c9:cb:
         9c:a9:f7:d0:f4:af:52:bc:eb:38:19:de:6a:76:67:7d:6e:fe:
         a7:62:65:bd:1c:1a:b9:42:f1:e4:4b:2a:33:f9:b2:e3:a8:54:
         92:a1:2c:05:dd:07:95:4c:af:c9:a1:99:b4:ba:ba:ed:4c:f5:
         5a:b3:8b:c7:b3:a4:28:59:43:3e:4b:c8:89:97:bc:cc:a5:b3:
         ef:e4:96:b6:82:d5:6d:8e:8c:5f:3a:95:92:13:39:a9:77:69:
         b3:7f:cd:95:7c:67:0f:f8:eb:d1:3e:56:69:07:d4:97:07:8a:
         df:3b:2f:cb:69:f7:f8:8a:f2:28:5e:f9:b3:f5:a5:50:64:40:
         06:34:86:70:5f:66:fc:1a:84:6b:41:19:84:e8:fe:c7:69:61:
         da:26:3a:ed:2c:f9:a9:09:7e:bc:d6:2e:4b:12:c2:1c:39:7d:
         47:82:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:34 2026 by rpki-client