Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa
File:                     2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa (raw, json)
Hash identifier:          GUYa9eJnB8FeRkeuVz56oS/D4sj+IyCShZfIB+z7WXo=
Subject key identifier:   58:3F:0B:E7:79:25:01:64:67:4D:98:64:06:98:A8:23:D0:1C:A1:7E
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584DB4A5840BBA6179223A2C0B80
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        2602:fa28:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:84:0b:ba:61:79:22:3a:2c:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=c80d5e06-18da-4a0c-bb3f-caa5db7400b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:10:e3:2f:7f:e3:27:e5:c6:2b:f1:b7:b8:
                    fd:e1:97:b7:95:92:c5:f9:70:71:b0:32:0c:f2:30:
                    a0:c2:71:38:62:8d:8a:cc:9b:3f:46:da:1b:68:07:
                    7a:7a:e3:85:2e:87:bc:ae:a9:2c:39:fa:4a:c0:17:
                    dd:77:0a:31:c5:e3:3b:e6:0b:b1:83:20:d4:3d:25:
                    df:52:53:66:13:de:d9:3d:40:22:ee:52:db:64:a6:
                    ab:b2:89:53:79:37:8a:e8:20:bf:4a:9b:f7:b7:7e:
                    77:aa:02:26:aa:75:0e:1f:69:b2:69:ad:3b:93:de:
                    1f:3f:1d:1c:67:c2:bc:fe:db:c9:c3:b2:23:e3:fe:
                    ac:95:06:8f:7d:19:37:6a:ea:72:ca:4b:3a:7e:bf:
                    6f:76:d9:3b:8f:96:28:7b:6e:6d:95:10:65:eb:6d:
                    f7:02:0a:cc:3a:9e:ec:c8:42:51:6e:04:f9:67:8d:
                    d7:aa:78:b8:7c:a1:8d:8a:74:ee:d9:ae:6d:b9:72:
                    ee:a2:99:e4:c7:56:ab:27:d5:ee:f8:94:e1:6c:10:
                    54:90:da:6b:e0:a0:60:f0:b3:cc:cb:e0:9c:e4:3d:
                    44:8d:d3:4f:d5:59:87:e9:4a:c2:58:9a:9e:43:d5:
                    6c:0f:a0:29:a9:3d:03:9f:69:0c:77:62:c6:17:9c:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3F:0B:E7:79:25:01:64:67:4D:98:64:06:98:A8:23:D0:1C:A1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:b2:4b:60:b5:7a:09:53:36:f3:19:f0:c5:79:da:06:bf:
         60:32:54:9b:ad:f7:a9:43:e6:bb:b9:f5:fc:08:ce:7d:82:1f:
         66:76:85:d3:ed:fe:5c:8b:91:79:c1:89:2c:44:48:d7:6e:09:
         5a:45:02:7c:6f:ba:6e:91:91:a5:76:58:9f:ef:c1:f5:7d:52:
         bc:a9:68:86:9b:f2:26:8e:c1:4a:2d:83:8b:00:1f:60:d5:4c:
         40:e6:32:2f:9a:dc:9d:ca:21:b2:09:c6:b2:dd:80:0c:90:36:
         ca:75:64:ee:46:ac:fc:4c:c9:07:91:8b:e3:b0:b3:fc:1d:2b:
         34:8d:d8:de:9a:4e:2f:8d:f3:a9:8c:44:d2:71:f3:9c:06:a9:
         c4:01:3c:26:be:67:a3:09:94:f1:52:e9:59:cc:c3:63:c0:b5:
         d9:ea:80:df:99:53:bf:00:1a:16:cf:df:2e:d1:2c:4f:1a:b8:
         82:64:56:a7:8e:af:20:de:a5:d3:32:8f:57:24:82:0c:86:75:
         f1:31:31:f4:9e:7c:21:b2:d8:95:5a:82:56:16:22:ac:13:10:
         8f:d3:2f:c9:49:88:42:06:58:22:8e:9d:95:d3:4f:b3:8f:9b:
         73:89:fe:30:de:86:3f:29:88:a5:b7:88:83:63:d2:3b:6c:a3:
         e6:8a:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:07 2026 by rpki-client