Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa
File:                     aa6eff33-96af-372a-b751-bf677d5949f9.roa (raw, json)
Hash identifier:          JhH0J1l76UHXNB4Z2iwacT9pEe+F61cZfGx6epygnsY=
Subject key identifier:   DA:62:63:14:03:FB:90:A3:D7:D7:45:A2:1B:83:F1:0D:E4:90:E1:FD
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F4328584D91C01FD6CC952AB528465580
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     401085
IP address blocks:        2602:f802::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1f:d6:cc:95:2a:b5:28:46:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=94fc776c-861d-4fb1-9524-e70548c1e1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:a8:bb:04:45:93:c2:96:62:dd:a2:79:59:
                    22:e4:aa:ae:b7:b2:a6:fe:35:e1:71:e3:58:8b:90:
                    81:02:c0:30:1b:b8:89:f9:62:a2:75:c2:68:40:c6:
                    47:6b:00:50:7d:bb:f1:d6:05:f5:ab:a9:85:b1:c8:
                    b0:65:c9:ff:08:03:b5:c8:67:fe:3b:17:ce:82:6f:
                    3b:c6:b0:9d:c1:81:87:c0:09:80:59:fd:74:4d:34:
                    8b:7e:73:7d:18:72:10:6e:6a:8b:89:c4:ab:28:cf:
                    d6:16:d0:0e:61:09:1f:09:8f:7b:67:c4:d9:19:17:
                    80:a0:72:2f:01:a9:fe:53:94:3b:9f:6c:cc:13:83:
                    63:d0:79:a1:f6:eb:6e:dd:2a:7a:81:09:79:b6:bc:
                    09:3e:d5:bb:40:7e:47:90:29:cd:7e:f9:1b:81:1a:
                    f7:c4:e8:0f:6b:0d:e4:65:2c:a7:cc:eb:62:42:7c:
                    21:a8:ab:98:af:3c:36:d8:d9:bf:2e:de:1e:83:b4:
                    ed:6a:7c:38:d3:d7:0c:64:6d:3c:97:fe:fa:3c:60:
                    48:ce:2b:7b:26:99:ca:49:c3:44:2e:c4:3b:e8:07:
                    90:19:e5:0b:a7:d9:db:ec:cb:77:00:e9:2f:da:cc:
                    93:d4:a0:6a:4b:c2:fe:b9:60:24:94:fb:32:1a:53:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:63:14:03:FB:90:A3:D7:D7:45:A2:1B:83:F1:0D:E4:90:E1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f802::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:19:fa:bc:4b:f5:c6:4a:93:48:e5:f6:de:70:f5:f3:44:
         e1:45:da:28:a3:49:3e:21:5c:4f:e1:d5:c5:23:61:26:64:68:
         d8:6d:77:22:66:c9:8e:a7:88:da:00:2e:d4:ec:41:95:07:44:
         be:40:3d:3c:de:03:4d:cc:18:5e:05:cd:ac:eb:c1:d8:1d:c4:
         83:ff:ab:4e:aa:49:a4:b2:37:4d:1a:89:b0:08:d2:1b:61:65:
         c2:0a:f9:de:38:1a:43:20:42:61:cb:c0:21:b3:2e:f3:43:64:
         39:28:b1:e1:e3:7e:76:bd:5e:17:6d:43:e5:b8:9c:2b:e1:48:
         94:fa:f5:ce:76:d9:7c:0b:1d:c4:18:c8:b1:60:a6:2a:bd:04:
         cd:3d:b4:fe:66:88:34:5f:0f:74:53:7b:95:91:be:06:45:25:
         f4:38:ed:80:7e:04:68:8d:0e:ae:3a:7b:6f:0c:d1:ed:82:f5:
         c4:0c:a4:13:b4:8d:f0:f5:ed:3e:0c:a8:ad:45:94:8e:ad:ff:
         19:6e:c9:8e:26:c4:ab:e1:9d:5d:86:3d:56:e7:f4:8f:cc:f2:
         c2:9c:8c:79:f8:c7:01:56:bc:42:cb:d8:f8:8e:f4:e1:c4:97:
         ab:c5:10:a2:24:4a:8b:0f:ed:79:1e:7d:f4:20:42:da:b8:43:
         66:31:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:47 2026 by rpki-client