Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
File:                     a02237c8-ae50-3044-82bb-f2b03181c5b1.roa (raw, json)
Hash identifier:          gJ2yMMvoAjQSl+zRZGAPaYTUNkVQcn3G3ebUa26P/Xo=
Subject key identifier:   23:71:C6:1A:2D:C4:BA:F6:8F:FE:94:53:FB:C8:73:6E:1F:6A:98:26
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584D91C00F31DF71A6572B867500
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     22192
IP address blocks:        2607:2240:800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0f:31:df:71:a6:57:2b:86:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=6c0db65c-67de-4eca-85b5-001a98a4c7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fc:13:84:c6:f9:57:2e:92:d7:7e:ab:18:30:
                    fc:58:8c:54:2c:8f:36:3a:f6:83:74:52:88:8b:9c:
                    0b:db:f7:77:5a:5c:0c:93:8d:cd:89:6d:fd:4f:74:
                    a7:76:83:15:ce:d2:44:a3:20:2d:86:cd:a6:40:98:
                    e9:16:ec:1c:4e:0a:09:1e:15:4b:ba:6d:bc:36:be:
                    13:eb:de:65:c9:4d:ec:17:d9:d1:b7:1b:1c:01:b8:
                    bb:04:db:54:2f:c1:af:56:cc:b1:79:cc:2b:42:74:
                    74:6a:37:86:85:c9:e2:33:85:83:3c:cc:81:b5:d3:
                    9a:71:56:cf:65:a9:b5:97:b0:f4:90:40:73:5b:51:
                    38:87:1f:ca:af:c5:f5:25:20:b6:76:f8:15:dc:e6:
                    4c:cf:4c:39:35:93:90:ea:0c:2d:cf:2d:5f:f8:69:
                    a9:90:a7:2a:52:c2:96:64:48:79:17:7c:83:85:f9:
                    c2:61:32:b9:8c:64:c4:01:88:d4:d4:80:1e:cb:e8:
                    ff:c7:97:e3:34:73:55:85:a5:9f:bf:1d:56:7b:c9:
                    0f:25:b7:4c:25:1c:20:58:70:72:db:70:1b:54:2f:
                    87:17:c0:f7:b0:11:49:3f:5f:b3:46:85:42:32:a7:
                    cd:39:2c:f2:7c:52:5b:03:92:a8:10:2b:04:62:7c:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:71:C6:1A:2D:C4:BA:F6:8F:FE:94:53:FB:C8:73:6E:1F:6A:98:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:78:ae:7b:ce:ce:23:98:a5:85:a5:20:e0:8d:f8:16:b0:48:
         50:f2:ed:16:7c:a0:72:23:e6:dd:d8:62:74:a6:5b:04:a5:15:
         d6:d7:71:a6:de:84:cb:f7:bd:b1:2a:28:1c:5f:49:27:27:7b:
         fb:81:3d:44:3d:10:5e:67:84:a5:8b:50:58:56:a5:5f:c1:5a:
         ee:db:3c:2a:b6:5f:b3:1e:76:6a:2a:bf:fc:b3:1d:10:c3:b0:
         03:74:8e:06:3e:41:ca:9b:b7:2c:7d:0d:f9:3e:2c:9b:9a:c1:
         d4:84:38:4e:4c:80:d7:f6:60:df:88:8e:b6:ff:dc:d8:e1:6a:
         92:ca:00:f2:e6:39:8e:11:66:b0:33:79:62:e6:5b:b8:5d:80:
         82:4d:28:34:e7:4d:2e:48:3b:e0:77:ea:ef:94:82:f6:7f:c2:
         8f:56:de:fd:cd:43:25:70:a7:67:73:72:92:30:9a:ad:2e:49:
         0b:ac:fb:2e:8b:62:df:10:14:0f:8d:b1:d8:61:b2:74:59:cc:
         95:50:50:31:fc:67:29:3e:2c:79:3f:39:81:32:92:bf:9c:bc:
         25:00:71:ed:23:54:de:d5:4e:77:75:b9:6a:5a:34:29:08:7e:
         95:40:96:74:ad:fc:17:55:db:e4:39:25:f1:1a:1d:c7:b7:d5:
         12:92:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:54 2026 by rpki-client