Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa
File:                     d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa (raw, json)
Hash identifier:          7IEdxv+Ibg3Xhje+FNs5GDhzYkQojY13iglU1JabasY=
Subject key identifier:   B5:0B:5C:E9:D8:7D:D2:84:92:1B:18:68:BD:7A:E7:9B:50:8B:C0:53
Certificate issuer:       /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Certificate serial:       010D0C9F4328584DAAE036D3B8377BE2FDE1E800
Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     54309
IP address blocks:        2602:fa3c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:36:d3:b8:37:7b:e2:fd:e1:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=d6fcf20f-2578-4426-82bd-bb88d23935a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:61:6d:4a:e8:47:63:6c:cb:0a:4d:7f:02:
                    00:86:de:20:7f:f0:ec:33:75:03:26:ed:09:aa:b2:
                    7e:1e:05:b3:dd:e0:61:20:01:ea:f2:4a:b7:b3:90:
                    4c:9c:7c:e8:98:58:54:fc:5e:2c:8b:8e:d4:b5:00:
                    b5:ea:d7:d7:2e:d8:e8:05:9e:15:ab:79:66:a6:76:
                    f8:f6:38:da:8b:78:b3:b1:d9:58:fa:c3:54:71:10:
                    68:e1:67:4f:71:89:b6:39:1d:70:2c:93:c0:f1:6f:
                    02:59:a4:24:c6:1c:65:05:0c:dc:df:3e:e9:ba:e7:
                    0e:1d:02:94:59:e3:be:25:7a:d9:7e:65:79:cb:3c:
                    43:63:d0:68:de:05:55:4b:39:56:8e:cb:8c:23:5e:
                    b2:b7:cb:cf:a9:c5:31:2c:2c:19:03:e8:42:3e:cf:
                    a9:b6:0e:72:7d:0c:73:07:3e:81:f3:92:ab:68:45:
                    bc:e6:b1:3a:a5:70:e8:7f:bf:04:c3:f4:db:45:bc:
                    23:57:4d:ce:d4:90:32:06:f4:59:60:e6:5d:50:5b:
                    af:16:1e:f0:69:ef:67:4b:14:b9:2f:f8:2b:3e:8d:
                    77:8d:c1:48:cb:af:27:50:bb:e0:56:06:ab:9a:f5:
                    1e:f0:6b:e9:fa:00:f8:e2:fd:49:90:3d:b7:06:94:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0B:5C:E9:D8:7D:D2:84:92:1B:18:68:BD:7A:E7:9B:50:8B:C0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl

            X509v3 Authority Key Identifier:
                keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0b:cb:e5:01:54:1b:62:e4:07:ed:d3:8d:58:c0:e7:82:d9:
         a9:63:91:dd:a4:50:e9:5d:cc:4d:40:e4:c8:30:1b:15:27:08:
         e1:36:ae:81:6e:58:da:6f:32:c9:3d:0d:14:37:da:37:1d:a9:
         60:5f:0e:63:ce:e9:ae:a0:e2:9a:90:ba:e7:4c:c8:ef:15:53:
         58:0d:19:9b:3f:54:71:cd:dd:a2:1d:51:17:6d:b1:81:38:47:
         05:a6:4d:29:e5:58:d6:cc:d3:ee:36:76:c5:a3:b7:62:c1:57:
         aa:3b:2f:c9:81:3e:24:ad:e8:f1:af:97:92:6b:f1:23:04:50:
         24:7f:5c:f8:e6:71:e9:08:32:58:0b:50:96:8f:ba:d1:f7:43:
         61:61:ae:89:2f:12:76:a1:5b:95:0d:44:7b:30:af:9b:de:94:
         99:a2:a8:11:f0:a7:21:df:00:e6:08:1b:0e:77:39:3f:9f:ad:
         06:b6:ad:93:22:6f:68:c7:03:22:3d:33:ca:c5:2b:3a:55:0f:
         27:66:df:20:99:5c:0a:25:23:f0:21:0e:00:53:3d:d9:25:11:
         9a:ae:e8:79:ac:2e:46:70:4f:2b:b8:09:ac:4e:0e:55:71:61:
         02:06:53:bd:77:6d:df:7c:6e:8b:55:84:11:2a:04:58:6a:ef:
         ac:e7:f4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:59 2026 by rpki-client