Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/c383a3db-ebff-3281-a9f6-56f395f69948.roa
File:                     c383a3db-ebff-3281-a9f6-56f395f69948.roa (raw, json)
Hash identifier:          DmtmkYK73h9o8xhUHfewmTVaBxL3Dbzoqrj2Ai+yv/s=
Subject key identifier:   5A:6D:47:4E:F9:5B:C0:FD:50:EA:7C:E9:F9:B6:8C:39:6F:E3:F1:61
Certificate issuer:       /CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
Certificate serial:       010D0C9F4328584E296F0C733BE7072E556C1F80
Authority key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/c383a3db-ebff-3281-a9f6-56f395f69948.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     46969
IP address blocks:        2602:80c:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0c:73:3b:e7:07:2e:55:6c:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=0fddce01-8c9b-4c2a-b8ae-bf7120dcf6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:03:7e:26:32:20:27:08:0d:eb:c5:59:56:
                    fc:c5:71:3b:bf:09:32:b6:6f:c6:1f:e5:19:ef:bc:
                    e4:80:1a:dc:83:27:95:5d:e6:7a:36:15:97:df:cd:
                    91:02:94:4f:f4:88:74:03:af:8f:0b:b5:f1:d7:67:
                    65:fa:08:b3:9b:36:cc:01:a2:a1:a8:e1:2b:3a:12:
                    29:91:34:19:93:e6:b3:77:f2:61:a2:dc:55:74:1c:
                    da:6d:d2:05:4b:a9:d6:6e:e7:dd:ec:57:ad:99:de:
                    3e:a7:44:df:15:51:9d:bc:f7:5e:83:c6:2f:07:7c:
                    5a:e2:fd:27:38:4b:55:eb:cb:7a:b6:9d:65:33:df:
                    c7:87:71:2b:40:9d:73:c5:b5:db:42:51:a6:45:f2:
                    56:4c:f0:f9:63:35:be:5e:26:2c:46:68:14:c2:5c:
                    57:d2:4d:4f:8f:af:23:21:d0:cb:e3:e8:b9:9d:0e:
                    f9:46:a5:72:70:fb:a9:49:fc:9d:00:be:d3:7a:11:
                    ba:7b:16:8f:ed:6e:78:f3:14:5d:75:10:73:70:76:
                    56:2b:a1:10:84:f1:b9:46:07:f2:20:21:c3:7c:74:
                    2e:07:38:ac:c9:24:ed:59:10:d4:12:35:c8:e2:fd:
                    d8:9b:96:16:8f:64:af:93:7f:0d:6b:cc:bc:58:fd:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:47:4E:F9:5B:C0:FD:50:EA:7C:E9:F9:B6:8C:39:6F:E3:F1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/c383a3db-ebff-3281-a9f6-56f395f69948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl

            X509v3 Authority Key Identifier:
                keyid:98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7c:c9:5d:05:fc:82:55:1d:53:26:8f:5c:40:e9:b4:88:0b:
         ec:3e:78:aa:ac:5e:03:c9:4c:4c:04:45:21:76:67:9b:0e:8f:
         99:ac:e4:ba:59:70:c4:44:7f:3b:fc:7b:64:2b:ca:4c:0d:3b:
         99:07:cd:eb:32:66:2c:d5:7d:f9:e9:4e:e5:f2:9d:75:be:3c:
         ca:80:12:18:65:1f:57:32:38:99:6f:cc:cc:67:31:7e:fa:6b:
         d8:2f:18:f0:a6:16:c3:8e:37:95:7b:8f:5f:e0:1e:5a:d5:04:
         ce:8f:a1:7b:83:4c:3f:69:2a:42:d1:07:c0:c7:24:f1:00:af:
         04:e5:c7:38:3a:d1:8c:ac:33:96:94:67:57:87:f0:2e:5f:48:
         76:c0:fa:ff:5d:90:0d:b8:1c:b8:5f:85:ab:ce:7d:32:97:b4:
         44:89:81:de:b2:9b:f5:d4:00:9c:e9:cb:11:ed:b5:21:f5:2d:
         f9:4e:72:8c:f4:1c:db:e5:8f:0f:6f:06:97:03:37:31:17:93:
         7e:d7:1a:dc:04:c9:24:09:cc:31:f8:ed:8c:cf:30:60:fb:05:
         95:5f:7d:ba:d9:e5:86:9f:2e:c1:be:8e:cc:62:f5:7e:d1:26:
         ea:28:e9:e2:39:72:b8:f4:7c:85:93:77:16:6a:97:df:e2:ee:
         17:23:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:50 2026 by rpki-client