Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa
File:                     e4d0207a-085a-31a1-871e-eafcc1a16dab.roa (raw, json)
Hash identifier:          akxzuidrkhNU3fpVGxgMGi0lD00+dt/KJpT+Ote4Kxs=
Subject key identifier:   83:2B:68:8B:14:E8:C0:BF:C7:69:E6:10:AD:0C:00:CC:95:FE:02:D4
Certificate issuer:       /CN=1a059caa-dd4f-4480-a089-c3da1959a314
Certificate serial:       010D0C9F4328584DC40055BD3B3679D8276CBB80
Authority key identifier: F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     40880
IP address blocks:        2602:fe09:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:55:bd:3b:36:79:d8:27:6c:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a059caa-dd4f-4480-a089-c3da1959a314
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=c02acf33-0a97-47bd-b69f-00ca5e553eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:1c:f7:23:05:ae:f7:0a:2c:49:ca:67:74:
                    9b:b3:87:64:01:66:7f:02:8a:cf:1d:13:40:01:af:
                    2d:c5:c2:2c:1d:34:42:f8:7d:9e:15:ae:a3:61:ee:
                    39:a2:fb:b9:67:b2:e2:4a:5f:55:0b:6a:75:10:af:
                    bf:36:c7:72:06:c8:80:d2:fa:28:16:78:1c:cc:d3:
                    1d:c7:7b:15:23:0f:14:42:fd:8a:0d:93:54:a9:83:
                    79:ab:49:c2:24:3e:f3:94:97:47:dd:c0:92:4a:38:
                    40:6c:48:2f:53:ee:d5:82:3a:17:fb:05:1a:6d:aa:
                    1c:69:d1:12:d3:42:cd:74:31:6c:15:24:a6:ae:ed:
                    9e:13:00:13:34:22:9a:b0:de:62:d4:2b:15:37:89:
                    57:fe:1d:7a:ef:03:ae:90:9a:4a:71:21:da:f3:7e:
                    a1:e2:d8:ea:31:35:15:b7:e5:6a:71:cc:78:40:f0:
                    1f:b0:fb:38:35:a5:e3:53:f6:cd:d3:79:df:3e:f6:
                    a9:1c:91:15:8f:80:54:ff:65:fb:1a:88:17:2a:26:
                    c4:ca:68:57:e5:50:cd:a0:e4:33:ae:67:bd:f2:36:
                    82:ba:b7:f8:de:ab:b6:8e:a1:d8:ee:2d:8c:90:70:
                    89:1d:b3:81:62:10:96:cd:fb:3a:00:5d:bc:09:e6:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:68:8B:14:E8:C0:BF:C7:69:E6:10:AD:0C:00:CC:95:FE:02:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe09:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:20:39:ea:56:ad:83:70:eb:5a:9e:39:99:81:11:a0:bf:27:
         c6:7c:f9:63:c0:af:7e:3c:11:e0:76:97:39:a4:55:31:73:59:
         ef:2c:03:5d:a8:19:bb:f8:33:f0:87:43:05:cf:16:49:29:0c:
         66:5f:c7:19:bb:21:29:71:d2:d2:9d:5e:ee:c1:34:39:87:d1:
         d0:de:e2:ed:33:fa:d8:86:8f:0a:ad:8f:49:58:a6:65:16:1a:
         3c:7a:ec:3b:78:ad:5f:c2:4e:13:aa:d1:9c:2b:02:26:0a:46:
         fa:7a:3d:4a:d8:79:7b:5c:86:27:34:4f:e9:43:74:4e:2a:d0:
         c1:eb:d5:2f:42:11:bb:0d:6e:48:98:50:c6:fc:f9:69:c9:7e:
         a1:7f:14:25:59:13:70:20:9c:29:4d:a5:2e:45:cf:2b:4e:5d:
         12:6b:99:bc:b1:9d:3f:4b:84:41:46:53:1c:13:10:33:35:4f:
         a6:4a:4e:44:14:2b:cd:7b:da:96:0b:22:6e:44:f8:19:be:25:
         fe:49:52:64:ba:3a:84:37:dd:04:00:f6:7a:80:9f:b6:68:80:
         fb:12:49:f3:6e:42:d0:09:c7:d2:8c:f3:f4:cf:e6:20:58:73:
         db:c2:1f:1e:1b:e7:93:8a:6c:0e:de:d6:69:59:c1:be:90:ca:
         52:13:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:52 2026 by rpki-client