Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
File:                     fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json)
Hash identifier:          /YjmtaGvk+6rrUNAOreWDaBlG2r71K6dSJQvz3Ch28Q=
Subject key identifier:   62:5D:0F:E2:5C:18:E7:5D:15:F2:63:5E:6B:A5:82:CF:95:3C:49:89
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584DADAAD06DDC77D9DEFA5D9880
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     29802
IP address blocks:        2604:880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:d0:6d:dc:77:d9:de:fa:5d:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=ac184653-eae8-4efb-b56c-87acc5b9ec01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:33:73:d6:7c:ae:b2:ec:09:c6:97:cf:14:
                    2f:ab:53:a7:05:41:47:14:9b:57:04:ef:19:fb:ab:
                    c6:12:64:79:2d:a2:89:63:e2:6f:93:c4:e0:26:da:
                    43:40:97:25:e4:4b:88:22:52:28:1d:c8:34:d8:a4:
                    ad:27:a7:76:f8:9e:14:cf:a4:7b:6b:fd:a7:b9:f3:
                    34:11:e3:61:cc:5d:0d:cb:4f:50:58:cd:f9:3e:86:
                    c4:ed:31:36:c3:1a:1e:24:e7:f4:35:a4:91:75:24:
                    ab:cf:1c:ab:c0:f7:89:be:09:22:58:9e:96:ab:1f:
                    97:81:d3:ed:99:75:d1:51:c0:64:e1:fa:cf:3c:31:
                    0b:67:91:29:84:55:b2:24:20:45:f8:8c:0a:14:c8:
                    cb:f6:ba:95:0c:04:99:ce:4a:40:2f:c0:93:2d:53:
                    c4:02:10:db:0e:e9:0a:75:a0:00:b1:c3:35:0b:b2:
                    df:93:89:98:f6:f0:28:0e:a2:3f:ed:5c:8a:15:2b:
                    ba:82:e4:63:ec:0f:b8:f3:b4:2f:31:86:ab:e9:91:
                    fc:92:c5:4f:1c:f5:fd:6e:7d:98:81:e4:59:20:37:
                    28:bc:d0:62:db:ae:67:fe:03:e3:94:36:2e:2e:93:
                    26:09:be:a0:11:9d:37:c9:fb:b8:27:8d:a5:c4:4c:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:0F:E2:5C:18:E7:5D:15:F2:63:5E:6B:A5:82:CF:95:3C:49:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e8:eb:d2:e3:61:be:e7:79:d1:eb:28:ab:54:15:46:46:e6:
         17:22:97:b1:ca:80:81:5f:d5:aa:39:70:cb:65:bc:92:c8:7d:
         c9:89:a9:e7:07:2d:1c:88:cc:bd:dc:d7:1d:13:9d:f1:9e:ec:
         72:e6:3e:cd:ff:5c:86:0f:44:e2:2c:b3:be:ee:6b:62:c2:f3:
         8f:4b:53:27:2e:e8:05:bb:73:c0:05:89:8d:ea:29:5f:18:37:
         72:65:22:47:6e:bd:1b:44:cb:ef:18:d3:0c:a0:77:25:2f:5c:
         ae:b9:54:0a:35:7f:f3:df:2d:5f:25:1c:aa:18:7a:67:0c:91:
         04:d7:2c:64:d4:b1:30:14:8e:f8:47:e4:ae:38:30:95:54:b3:
         a6:d5:98:54:dc:ca:d1:e7:a9:cc:3e:23:f0:88:dc:71:f8:01:
         fc:1b:84:f7:9a:06:f8:6a:b6:3d:81:ee:e2:76:11:b0:65:41:
         88:4c:3a:06:4d:e6:5d:b2:42:ac:a4:b6:5d:c8:c8:59:7f:c2:
         ed:d5:93:33:21:6a:8e:44:be:8a:f3:ba:c0:04:db:86:b8:c8:
         9e:c4:e3:4e:9d:71:fc:ea:b9:b6:8b:f8:df:57:c7:33:27:1a:
         80:3d:29:e3:0f:e2:20:b3:a0:62:ec:61:68:4f:49:f8:bf:08:
         fb:53:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:34 2026 by rpki-client