Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa
File:                     3373b409-dc7f-33d9-aa1d-16771300f34e.roa (raw, json)
Hash identifier:          ETtTZhKcrJQfZXo0MTVDVUEpEOE8A5XYKGYgeNJKFuM=
Subject key identifier:   3B:7B:85:9A:1E:FC:11:7C:50:6C:D1:59:90:33:E9:26:4D:72:74:89
Certificate issuer:       /CN=acaade25-9776-4234-a203-4f2776b69f08
Certificate serial:       010D0C9F4328584DC8304C7A2B59670632BAA800
Authority key identifier: DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     14874
IP address blocks:        2602:f825::/40 maxlen: 124
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:4c:7a:2b:59:67:06:32:ba:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaade25-9776-4234-a203-4f2776b69f08
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=95fc399a-0628-450a-8583-66d8bd34dec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:a7:00:79:d9:80:e3:a3:6c:73:ac:62:47:
                    a9:f7:61:ff:71:13:87:b8:89:de:f6:a4:28:3e:47:
                    64:57:f4:88:94:57:45:07:70:79:3d:46:8a:a2:24:
                    de:0f:7b:26:f9:4f:c7:63:85:a4:b5:2e:d0:f6:c7:
                    16:e7:8f:46:77:d8:70:2d:89:f3:13:7b:ce:d4:7d:
                    cc:75:14:36:94:88:19:83:aa:5e:21:3b:4c:5c:02:
                    2e:62:e3:64:49:7d:e4:47:dd:6a:9c:e6:53:5a:59:
                    5e:d4:93:cc:7f:b8:6b:95:1d:e1:09:39:71:40:fc:
                    b3:0e:84:99:c6:83:27:be:ba:6b:46:90:13:f0:2e:
                    ea:2e:52:eb:0b:f0:cb:dc:fc:81:46:1d:0e:e0:8f:
                    17:01:2a:56:c8:38:bc:41:06:63:b3:4c:6d:24:b4:
                    25:c6:60:ff:46:02:ca:12:bb:25:09:35:39:05:a9:
                    f3:10:92:df:d1:9e:27:ea:7c:d3:45:95:75:a0:12:
                    1b:bb:a7:25:85:8c:d0:6a:9b:01:69:5c:df:28:f9:
                    2e:53:34:e9:de:7c:4e:dd:15:e8:6f:b4:0e:2f:33:
                    fc:8f:fe:32:51:d7:b3:5e:c7:5a:5d:26:ea:c9:a5:
                    36:dc:f4:47:d1:99:76:5d:5c:f6:37:32:3c:f9:ec:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:85:9A:1E:FC:11:7C:50:6C:D1:59:90:33:E9:26:4D:72:74:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f825::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:39:f6:3b:94:47:51:8d:be:33:fe:37:57:4c:76:e0:79:
         2e:fc:fc:98:fa:2b:ff:2b:5d:37:86:c2:89:39:a1:36:9a:c3:
         1e:1a:d8:af:dd:e4:07:3b:56:11:b2:ed:0c:97:a1:db:88:42:
         19:df:16:6c:ab:62:73:c9:01:8a:62:f8:20:cd:88:13:92:d0:
         eb:90:d8:19:36:51:bb:f4:90:33:cf:5d:f6:63:67:a7:ef:d1:
         6d:b5:b7:05:23:2b:9c:d8:64:0c:7b:f8:7a:c3:ef:2f:5c:06:
         4a:46:5f:c7:6e:ee:1a:65:a4:75:80:3e:12:50:46:13:0e:ee:
         87:df:3d:a1:c0:14:ca:99:44:0a:90:f0:61:bf:61:82:f5:cf:
         de:69:6a:84:31:39:fd:7a:56:ad:b9:0c:6a:2a:04:35:11:ca:
         4a:c4:7b:bb:5e:b0:89:90:cf:4d:be:0d:a6:4d:4d:ee:1a:cc:
         54:2d:11:ed:4e:28:dc:d9:9e:4b:ba:5c:e4:54:31:50:e5:94:
         ca:9e:6b:59:f9:b7:59:f5:b7:a6:48:4e:82:83:93:b4:52:3f:
         f2:8d:89:53:db:9f:9c:57:0f:14:b7:bf:b6:49:bd:50:29:23:
         d6:b4:3c:86:6a:39:2a:99:e7:e7:d8:2e:a5:89:7f:cc:ca:50:
         65:74:ca:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:23 2026 by rpki-client