Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/a8e58c2e-9e54-3b16-8366-e561134f750c.roa
File:                     a8e58c2e-9e54-3b16-8366-e561134f750c.roa (raw, json)
Hash identifier:          8jrThrih9eOB5H2qwN7Q6WkfTZYIdNTrng3G/HkgyY8=
Subject key identifier:   FA:C1:EE:37:A6:D0:63:4F:3E:5A:3F:A0:44:44:C4:2E:F7:CB:A9:F1
Certificate issuer:       /CN=56346803-30d8-4fc8-bed2-9b76d8093c65
Certificate serial:       010D0C9F4328584DBBA052C47E55CA0324951540
Authority key identifier: E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/a8e58c2e-9e54-3b16-8366-e561134f750c.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     15318
IP address blocks:        2620:0:2220::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:52:c4:7e:55:ca:03:24:95:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56346803-30d8-4fc8-bed2-9b76d8093c65
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=a0e6fe58-dfc8-41b0-ba6c-b901013eed41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:06:8e:f5:3d:c7:3e:ca:a1:0f:ac:da:1a:
                    2e:b5:54:3b:08:6b:6e:b6:ea:03:8d:fe:8a:e4:18:
                    43:d0:be:66:dc:18:18:f4:45:fe:a9:34:c9:a2:d8:
                    74:14:51:61:1f:39:ea:be:52:ac:a3:92:f4:94:c7:
                    a3:65:54:69:f8:1d:b8:b2:bb:2e:69:91:51:4e:57:
                    35:7b:5e:aa:40:06:41:81:d5:16:10:6c:f1:24:1e:
                    79:30:05:f4:09:29:3a:9a:89:88:71:0e:63:22:70:
                    b1:3c:bb:dc:6e:b3:b0:2c:64:db:9b:6e:31:c5:7a:
                    ef:0d:cf:a0:42:46:09:9b:a0:1f:aa:2d:17:c2:13:
                    3d:70:d3:f8:d0:80:90:c7:42:b9:37:f0:32:d9:25:
                    54:6c:75:f8:c1:c0:2d:5d:e6:30:1f:bb:f1:3f:3e:
                    54:3c:71:b0:24:47:e4:81:3a:73:2a:02:e6:e1:57:
                    2e:00:0d:d0:5a:b3:1e:06:a3:ae:25:34:60:d7:98:
                    30:0e:82:90:83:98:19:f3:7b:6c:0e:b9:51:f1:ed:
                    06:4e:7a:3b:33:0f:9e:c6:35:04:82:e0:ee:5e:e9:
                    fe:ce:d0:f7:b4:2d:6d:ac:3f:48:bf:f8:30:91:1e:
                    96:76:9e:94:43:58:49:32:5b:58:d1:93:6f:7e:c2:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:EE:37:A6:D0:63:4F:3E:5A:3F:A0:44:44:C4:2E:F7:CB:A9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/a8e58c2e-9e54-3b16-8366-e561134f750c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:2220::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:c5:c2:9f:05:c2:ef:fe:fd:66:6d:74:d9:cc:4a:c2:f6:
         5e:b3:0d:b6:15:ea:28:8d:3e:9b:08:5e:8d:15:3b:e0:fb:b6:
         2f:83:bf:8b:93:9b:e8:41:83:74:38:20:ff:de:9f:4b:79:3c:
         d2:4b:d8:62:73:ce:89:57:63:dd:6a:ea:0c:b5:0f:67:05:22:
         bc:58:42:cc:20:aa:68:18:9b:e0:ce:d7:00:85:09:71:f2:2e:
         e4:4a:a5:c7:4b:51:ce:62:c2:97:6d:2b:68:86:79:05:4e:89:
         2e:1a:86:d9:d9:93:38:e5:2e:51:16:d7:d4:e7:6c:d6:65:e6:
         c5:3c:03:7e:45:3a:9a:03:de:06:46:23:55:21:1c:16:5a:80:
         e7:b0:3c:8c:b4:e6:f0:da:af:30:50:a9:f6:7b:9d:e5:20:96:
         c4:52:65:b2:39:ab:75:07:22:ab:bd:4f:d2:9f:29:05:d7:d7:
         42:2f:0b:41:42:5d:a3:8c:17:e6:ac:33:4a:96:4d:2f:bf:f8:
         d9:2c:a4:54:79:e4:ba:c7:01:23:25:d7:ec:54:c7:0e:3f:e6:
         10:cd:21:0a:6c:a6:d5:11:e7:26:be:25:3a:5e:3e:4c:1d:0f:
         23:2a:38:d4:c4:97:41:e1:56:2b:06:07:61:1f:eb:34:3b:a1:
         57:6f:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:37 2026 by rpki-client