Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
File:                     2e58d574-11fd-3248-8d46-82d8c4d93007.roa (raw, json)
Hash identifier:          w/8Cpwi7v3mLglJ2sT9DOSiAH4FE4ZywLGjcqKQMTLE=
Subject key identifier:   7F:0A:A2:00:19:B2:30:0D:82:BA:11:DC:02:6B:1E:2B:46:68:E2:C4
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584DBE6B214F25476DFEBFEDB980
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     396026
IP address blocks:        2607:fc30:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:21:4f:25:47:6d:fe:bf:ed:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=787789ee-47f2-4210-8ee6-ae9efaf05b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:0e:49:34:76:1c:ff:21:89:97:fd:63:d3:
                    e6:15:29:56:05:3b:79:5e:91:6c:09:7b:bf:c5:02:
                    22:4f:a4:5a:6b:b2:fe:0a:9e:3c:11:a8:a1:9b:cb:
                    a3:a4:15:19:a1:21:e5:b1:55:14:cf:42:7c:dc:5e:
                    2f:43:a1:ae:83:3b:2e:c8:34:e3:44:0a:93:77:13:
                    ae:ee:d8:9c:c7:28:d6:83:67:c3:3c:5f:f4:08:ff:
                    91:c3:01:7b:2c:78:1c:9d:d4:3c:a8:54:d5:b4:ab:
                    d7:b8:cb:3e:9f:55:09:4f:8b:fe:14:23:61:55:73:
                    a8:73:1a:92:0b:86:67:0d:3d:65:75:2a:6f:55:85:
                    69:5f:5f:ae:1c:9f:d8:ec:0f:a3:be:db:f1:02:12:
                    e1:c8:3b:c9:63:65:76:b5:ce:6e:56:08:52:99:fe:
                    13:aa:d8:95:ba:31:a3:e9:70:18:a8:96:06:72:25:
                    b8:12:38:80:58:ed:31:e0:9a:60:fd:1a:f0:9c:76:
                    a2:46:7c:c1:bd:c3:98:de:ab:d2:35:12:2d:ab:be:
                    d0:97:3d:be:d6:e2:b1:af:58:5a:c9:d3:8a:aa:78:
                    8b:74:9d:29:24:84:e9:96:a4:c4:ab:5a:14:76:d7:
                    e0:a8:1f:0d:e2:de:b4:63:5c:ac:c0:d9:b6:0c:7a:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:A2:00:19:B2:30:0D:82:BA:11:DC:02:6B:1E:2B:46:68:E2:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:eb:31:25:f1:a9:0f:1b:56:21:90:84:ab:26:77:ec:8f:7e:
         e3:5a:ed:52:69:93:ca:d4:14:cf:e8:fa:9f:49:21:74:e1:d0:
         a1:7e:b3:6a:09:b5:39:2e:28:3d:7f:5e:de:cc:6a:f9:2e:dc:
         5c:a3:f3:ac:cc:3b:40:0a:5b:00:28:c4:03:b8:7e:60:17:31:
         c1:d2:df:ff:f0:80:88:3a:65:3d:0e:13:62:d9:f2:48:5b:bc:
         fe:e1:64:a8:04:3d:dd:14:7a:d6:84:5c:bd:79:6c:e7:ae:6f:
         2f:36:42:c7:04:74:52:7d:b2:5f:95:90:d0:1a:df:d5:c2:12:
         64:0f:2b:1f:37:49:4c:47:57:1d:aa:73:98:81:8c:fc:8f:26:
         7e:0e:a6:8d:42:6d:1e:2e:ef:2f:a7:e9:42:38:a1:69:06:e3:
         f2:1a:ec:a0:bc:41:83:f1:3e:37:cf:1f:8b:87:5d:48:f6:6a:
         83:6f:34:a1:7f:16:0d:8d:c5:be:9a:26:9c:3a:4f:58:78:7c:
         15:7d:e6:1c:f0:f2:fe:ee:56:0b:ab:34:a4:82:eb:3e:3c:fd:
         6b:00:15:3d:18:da:c9:47:27:bc:f5:79:72:a2:78:18:26:c2:
         ec:df:0e:9c:a2:7d:64:fe:04:55:e3:80:02:cb:05:52:59:e4:
         46:68:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:32 2026 by rpki-client