Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/553d0d38-2ef6-34fd-8386-644e6c387aaa.roa
File:                     553d0d38-2ef6-34fd-8386-644e6c387aaa.roa (raw, json)
Hash identifier:          koJPiXSruCvLPFCF3y8a9Ldz1rgCFWDBRb9k0nH2gVY=
Subject key identifier:   D6:79:B9:0F:E4:01:82:9C:21:6C:48:45:3C:82:7D:73:D6:D9:CB:A9
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DAF1025ED4552A16FBB6602E8
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/553d0d38-2ef6-34fd-8386-644e6c387aaa.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:25:ed:45:52:a1:6f:bb:66:02:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=3a5b1de4-3b24-4fb3-9454-29bdb3eb0bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:35:4e:ee:52:d8:6a:e4:45:c5:bf:cc:84:
                    43:56:be:dc:ba:b9:4d:5a:63:8e:93:03:5d:f3:bb:
                    14:32:cd:34:db:76:fa:41:f1:67:0c:bf:f0:d2:79:
                    db:7d:b9:d2:f6:82:c8:59:24:55:06:71:03:6b:92:
                    8b:c7:d8:8b:2e:f2:4a:b7:ae:b5:b1:41:1a:c1:4a:
                    bb:d6:15:cd:24:e5:61:6a:7f:62:3b:d1:c8:06:4a:
                    e9:41:d0:c5:8e:ee:02:2b:ca:69:e8:cb:54:53:b8:
                    56:ea:f1:d2:69:67:79:7b:fe:29:b9:8a:d6:89:e8:
                    ef:dc:be:66:db:4d:cc:18:01:ec:2b:12:d4:e4:16:
                    1d:f6:92:e1:66:2a:1a:f3:9e:a5:54:4c:2c:66:53:
                    55:0b:fc:eb:df:c4:56:6f:7b:ab:5b:4b:67:bc:82:
                    9a:ff:1d:58:d8:ed:a0:36:69:d1:67:31:ae:1c:e9:
                    37:71:b6:17:92:16:eb:42:16:71:a0:b2:4b:ef:da:
                    23:88:db:6f:fd:12:86:16:92:01:65:de:88:5a:48:
                    d5:9a:e8:ad:a2:27:07:db:a4:0b:28:b7:b7:35:49:
                    93:84:78:20:8e:17:33:b6:91:a5:d5:f7:b2:ff:2c:
                    bb:a9:21:2e:4f:46:43:26:dd:b2:a1:24:e1:af:09:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:79:B9:0F:E4:01:82:9C:21:6C:48:45:3C:82:7D:73:D6:D9:CB:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/553d0d38-2ef6-34fd-8386-644e6c387aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2d:d5:e3:25:e3:db:51:48:51:71:76:c6:a4:ed:b3:b6:0b:
         3d:02:b8:6a:18:f1:80:95:39:c8:48:b4:29:29:40:63:78:e0:
         ac:03:e9:21:c0:84:e0:ca:57:0a:f5:38:dd:a6:d1:36:79:1a:
         13:f6:1b:12:cf:8f:43:00:02:0a:3e:6c:74:10:08:40:31:03:
         06:ee:58:53:8f:70:29:00:12:df:f7:8d:fc:ed:76:27:b3:f1:
         ae:6a:3d:15:44:23:6f:c3:88:da:c9:74:d0:c0:07:bf:50:9b:
         3a:c4:b6:53:e0:1a:b8:02:da:fa:fc:8e:9c:60:c2:e2:33:30:
         c9:0f:e6:b0:dc:93:e9:eb:c6:62:18:77:73:54:b0:09:81:58:
         b9:55:eb:21:46:4b:c3:c5:68:3a:e4:bd:04:10:13:35:81:a7:
         08:ea:75:0f:61:7d:02:b0:48:78:3c:56:90:8b:7b:d0:4e:7e:
         33:96:70:48:c3:af:89:97:e1:62:3d:a8:87:6c:42:dc:d7:23:
         1e:61:8f:30:90:fa:6f:22:8a:24:24:a3:cb:31:18:01:e8:64:
         69:5c:2d:ec:85:6a:77:b4:06:4a:52:65:0d:9c:ca:0d:ac:ef:
         c4:c5:24:09:8f:ee:52:5b:af:83:d9:a0:fd:a2:c9:67:6a:ac:
         08:26:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:11 2026 by rpki-client