Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/705d3baa-f916-301d-80ae-0d6c3c30fe61.roa
File:                     705d3baa-f916-301d-80ae-0d6c3c30fe61.roa (raw, json)
Hash identifier:          20u89BxkhoMeFvH4t7+n2uJdiYH9K95OW/oUjk9PPQE=
Subject key identifier:   A2:1D:EE:E4:0F:C7:BC:86:CA:C0:38:B3:86:0F:BF:77:9E:D6:42:38
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584DBA3AFC8C2F3CC3E3BE6ADE80
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/705d3baa-f916-301d-80ae-0d6c3c30fe61.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     14490
IP address blocks:        2602:fa70:ca0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:fc:8c:2f:3c:c3:e3:be:6a:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=6cc0b77d-e7a5-466d-8a0f-790f7c9eafae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:3f:e3:98:52:a3:38:f8:ea:0a:e0:eb:b9:
                    3f:97:f9:7e:90:b9:a7:94:19:e2:62:d5:a5:49:eb:
                    f4:a2:ea:82:f0:42:cc:da:3e:23:8a:d6:0f:ce:55:
                    09:93:63:47:4f:62:03:d6:40:3c:e9:69:91:64:ed:
                    2c:eb:a0:2b:5d:fc:14:da:96:b9:ad:72:4d:95:ac:
                    55:9a:0a:58:95:3a:c3:27:69:ef:5d:2f:9b:77:57:
                    3c:b6:1a:d0:e4:75:6e:03:7d:1a:69:32:7c:b7:e7:
                    ab:5c:a7:77:c2:0a:22:fc:49:41:82:f1:62:08:9d:
                    3c:5f:90:3f:1e:89:57:7f:e0:5f:29:8e:36:2c:db:
                    a2:4f:1b:83:7d:2e:2a:6c:fa:9e:11:56:0c:40:5a:
                    3d:26:ae:f1:7a:d8:70:07:f3:c3:0a:ff:08:1c:4e:
                    ae:32:b0:d0:2e:b2:c2:76:ef:98:26:46:60:75:27:
                    19:e0:36:90:55:25:2c:77:b0:d8:82:65:8c:75:7f:
                    c2:4e:87:a1:b5:ae:01:2d:6a:f0:f0:0a:05:ec:50:
                    53:e4:ab:78:8b:8e:95:21:37:0f:d8:ae:53:3d:27:
                    89:32:0c:04:27:11:98:a0:a9:ca:6f:50:a7:81:4a:
                    52:38:f0:30:d7:d3:ba:bf:71:77:17:26:68:a5:51:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1D:EE:E4:0F:C7:BC:86:CA:C0:38:B3:86:0F:BF:77:9E:D6:42:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/705d3baa-f916-301d-80ae-0d6c3c30fe61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70:ca0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0a:df:cb:c4:5f:16:ca:91:aa:63:47:87:90:47:91:30:cb:
         51:d6:63:1b:d4:f2:0c:42:d9:7d:f8:7d:80:2f:8f:c4:55:3a:
         c8:62:d8:b0:d7:ae:b8:08:ec:01:00:3f:a6:42:07:ac:d8:34:
         52:03:3c:89:87:65:34:6f:8e:a3:1d:ba:36:52:38:20:37:1d:
         7d:96:69:5e:e4:77:2a:68:04:b6:17:8b:ce:ac:d2:de:a9:f3:
         20:ba:2a:dc:3c:d5:05:94:1a:2c:dc:46:89:dd:c5:5e:47:62:
         e2:6c:00:24:70:61:2f:07:38:6c:c1:1d:60:ce:27:9a:52:b5:
         32:56:32:57:7e:d1:93:94:86:bd:cd:6a:f7:d1:a0:10:dd:07:
         13:dd:19:a9:94:40:e3:78:d5:e7:45:5e:27:f6:48:3d:b9:1b:
         03:4b:8c:ae:8f:42:59:b0:72:e3:8d:9b:9e:8b:0f:72:5a:d7:
         95:d3:58:3f:88:14:51:37:dc:fa:9a:1f:4d:1f:2b:66:08:4d:
         13:62:c8:51:96:fb:e4:6d:73:99:e4:96:90:74:97:8a:e6:ea:
         47:73:8f:b2:eb:5d:7d:fd:f5:6d:39:d6:cc:6e:2b:a5:4b:ab:
         7b:1d:ea:12:a2:fa:ae:9e:9e:1b:cd:b7:ff:3f:2b:62:6b:76:
         c7:bb:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:33:45 2026 by rpki-client