Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8cc45d19-3625-302e-81ff-dbc8599cae70.roa
File:                     8cc45d19-3625-302e-81ff-dbc8599cae70.roa (raw, json)
Hash identifier:          k90VFSQ3x1Pb/OHOyszcRh3Lq8GujdpB0pQlW1G/mT4=
Subject key identifier:   FD:FC:7A:9A:00:3C:2F:5E:9A:7F:3B:AB:E3:D6:0F:C7:2B:7A:0A:BA
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584D9FB58C1CC057B5E7DE71E800
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8cc45d19-3625-302e-81ff-dbc8599cae70.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     401452
IP address blocks:        2602:2d4:1f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:8c:1c:c0:57:b5:e7:de:71:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=c7df98ae-cc7f-45f2-9b0d-5be3fedd3835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:cd:9e:23:d5:02:e3:84:dd:d3:dc:97:cc:
                    05:fb:c1:6f:89:23:cf:7e:f7:e2:f7:db:c4:70:2c:
                    6c:b6:2b:9b:f2:cc:30:96:a6:e3:08:04:85:ee:02:
                    21:2d:06:d0:7b:df:10:e0:04:fc:d2:d6:0e:cc:2e:
                    59:d9:43:a4:6a:ca:d7:ff:c7:51:e1:20:54:57:44:
                    6d:45:11:78:97:42:9a:b2:c2:c4:3e:ba:40:dd:2e:
                    7a:c2:5a:37:88:aa:0f:c4:6d:44:cb:26:19:6e:d8:
                    57:cb:32:57:f0:53:d0:4a:4f:e0:c9:2a:44:67:e1:
                    a6:f3:4b:71:9e:cd:b3:f7:0f:1d:fd:bb:82:0a:01:
                    1b:af:b5:e1:4e:06:b7:76:51:ed:24:78:ba:5c:f8:
                    38:4b:6e:45:63:2b:44:79:85:0e:32:89:23:2e:42:
                    e6:6f:a8:30:fb:d3:16:47:43:83:49:71:20:d5:6f:
                    c8:38:12:dd:be:80:14:81:c9:6d:33:08:8d:1e:21:
                    c8:21:2a:99:2d:79:1d:94:52:c8:33:60:bd:89:ad:
                    61:9c:2b:63:fd:c2:f3:92:39:03:22:ed:0a:d7:52:
                    51:12:34:49:d7:0f:c8:af:cd:18:ac:b9:97:dd:34:
                    16:26:45:95:21:75:db:f3:cb:8a:fa:1b:88:c8:3a:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:7A:9A:00:3C:2F:5E:9A:7F:3B:AB:E3:D6:0F:C7:2B:7A:0A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8cc45d19-3625-302e-81ff-dbc8599cae70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:1f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:78:1a:b5:4e:83:82:55:d7:0e:49:7b:a0:77:cb:d4:c2:
         27:74:05:38:fc:d9:3f:df:4b:eb:e4:52:99:24:b3:2d:bc:2e:
         bb:80:6c:bd:43:a7:17:64:74:18:e0:58:ed:5a:19:12:55:88:
         2f:7f:dc:f6:b8:c1:59:5e:83:05:7b:59:20:9f:96:af:b8:57:
         88:8d:e8:b4:ce:63:62:49:14:03:94:cd:e1:9d:16:a6:4b:4f:
         3d:08:65:9b:e4:72:4d:64:aa:d5:bf:16:16:0c:3d:0e:23:01:
         21:a9:18:87:7b:3d:28:f2:d2:78:c6:1b:3f:2c:2c:5e:fa:03:
         d9:2c:4d:aa:11:eb:76:0e:9b:82:9a:eb:ce:b4:c0:6e:d8:7e:
         03:e6:da:30:34:1f:44:72:31:f1:de:9e:b4:a3:6c:a9:81:91:
         b9:63:bc:a0:a0:43:4f:6a:ab:b0:60:bd:f6:48:cf:ea:16:3b:
         2e:a8:d6:69:7c:d3:1e:7e:22:ef:16:3d:6a:28:31:2c:d1:2e:
         8b:e2:33:dd:c6:88:b6:96:ff:aa:3f:08:0f:3f:2f:7d:02:cc:
         94:c1:ea:4c:e2:f7:5d:a6:65:84:fb:f2:7d:b4:75:d2:0f:05:
         2a:b4:63:2a:13:92:4f:ce:f2:8b:1c:f0:d2:a0:6f:4f:58:6f:
         a5:39:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:30 2026 by rpki-client