Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa
File:                     2b564fbb-5489-3a5e-a3a8-b51618764307.roa (raw, json)
Hash identifier:          TXfY59CvEi1hClg2SPSiOgU3Qw05arERlpkz/ONaSkI=
Subject key identifier:   61:B2:4B:BD:44:19:D5:04:9C:AA:3B:45:78:53:85:C2:2A:9B:57:DE
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F4328584DB4A57F33625682D8E85EC640
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     26904
IP address blocks:        2602:fc15:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:7f:33:62:56:82:d8:e8:5e:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=19dc2ff0-da70-4c1a-b480-b524f425fa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:34:58:e0:2d:cc:c6:c5:12:95:56:01:52:
                    eb:b3:d8:d5:6f:0c:ac:3c:d2:53:b0:fe:72:0e:fb:
                    d0:91:af:b9:3b:a5:51:32:5a:77:54:54:b5:a1:64:
                    d2:0a:e8:da:0a:1b:72:c5:bd:f8:2f:df:ac:a0:1c:
                    81:01:72:71:b1:7f:39:71:ed:0f:e2:cf:93:4f:3b:
                    f4:9e:f4:92:84:30:69:cc:bc:27:40:ce:ef:ea:1e:
                    6b:c8:01:2a:a5:d3:ac:72:e0:0b:cc:90:35:c4:44:
                    10:d0:01:74:0a:27:f3:57:d2:0b:5f:e0:9c:5c:d0:
                    42:20:45:0f:2e:80:aa:2f:e6:2a:ff:5c:5e:3d:ed:
                    b6:42:fd:27:53:46:39:89:8a:26:d6:c0:09:96:cb:
                    dd:7c:6f:1f:1e:86:d7:a5:18:4b:75:91:2c:73:2a:
                    b1:a3:5f:7d:43:20:c4:1c:71:ee:cd:b3:d1:50:38:
                    6a:ee:b6:be:3e:ae:79:36:e0:90:0a:bc:62:a9:9e:
                    02:3b:2e:77:51:46:a3:22:7d:e6:a1:e9:b1:dd:a4:
                    38:b7:47:f5:f8:ac:34:7a:47:72:7a:2a:c3:b3:79:
                    21:d4:26:71:c2:09:79:89:38:51:d6:49:94:79:49:
                    39:3d:5e:55:a6:b2:a2:9d:7e:c2:bf:83:ad:37:e2:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B2:4B:BD:44:19:D5:04:9C:AA:3B:45:78:53:85:C2:2A:9B:57:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc15:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:24:54:dc:cb:7a:a9:33:9c:40:5c:1f:d5:5f:cb:e9:37:
         f4:58:27:c1:1b:a6:01:5a:96:4a:f9:c6:a1:84:2e:43:24:ed:
         e0:48:25:b3:fa:fc:e6:9a:4c:86:e8:17:40:57:20:85:d6:c2:
         6e:68:c1:65:b6:f6:8c:d0:5e:57:4a:94:74:bb:55:0c:c6:09:
         13:8e:70:df:40:76:db:aa:74:3d:66:3c:f2:a3:d7:73:60:69:
         ef:40:82:95:ac:ea:2f:ef:86:aa:fa:7b:c8:7d:1d:ef:df:48:
         a4:5c:ee:a8:aa:84:c8:f3:13:81:c3:7e:1b:ef:aa:15:15:34:
         04:2e:98:5e:d2:eb:d0:80:1e:f5:42:6e:00:d9:a1:6c:3b:ff:
         0c:e6:88:bd:2b:94:d0:92:07:79:a5:8e:82:b2:67:84:0d:6b:
         42:47:fc:85:e3:52:90:66:ed:4a:30:ab:38:7f:09:45:bc:22:
         21:39:89:6e:96:b7:b4:ba:a2:20:53:7c:0e:a8:6b:e3:21:22:
         ef:76:03:e8:da:b4:9d:8d:da:74:3d:a0:20:e4:86:25:59:ff:
         65:67:0e:7e:1f:91:c2:2e:d0:89:8f:3e:e1:b7:7c:54:55:44:
         4b:e8:74:f1:ff:11:5b:6b:cc:d0:b9:92:57:1b:0c:43:26:fe:
         c7:c4:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:23 2026 by rpki-client