Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
File:                     dfef8664-2552-32ef-ab49-09e987678f7f.roa (raw, json)
Hash identifier:          o/jvUx6fO2zwYYD5LTKJjXIlHHBOZqtUnp9X52xIHzk=
Subject key identifier:   7D:9E:C4:CC:2A:26:0E:EF:22:DE:79:53:91:88:B1:B0:CE:21:48:32
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584DCC60656F727ED840B2C4B700
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        2602:f99c:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:65:6f:72:7e:d8:40:b2:c4:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=5f12b961-2309-4645-8ca9-52d9d36f695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:c5:c6:6d:43:48:48:c5:cf:b7:0a:30:46:
                    17:1e:62:64:89:5a:b2:f6:48:6c:7b:ec:c5:45:20:
                    77:92:0d:9c:1e:d1:d0:c1:94:a6:74:63:81:e5:a9:
                    37:11:59:df:44:55:4f:c9:0a:ee:63:b9:ee:3a:ee:
                    d3:a8:10:9d:49:54:d3:c4:c7:a1:08:60:e0:0d:65:
                    f0:ce:76:28:fc:f8:21:29:cf:47:a5:c2:5e:32:8f:
                    7e:f0:0f:7b:23:79:bc:61:da:79:71:2f:38:28:d1:
                    e6:33:6f:df:1b:64:29:49:1b:39:5f:50:f5:7e:12:
                    11:3a:13:9b:e3:b5:25:0b:27:de:47:a1:c2:16:70:
                    fe:52:d5:96:48:03:02:27:98:25:b6:91:45:d2:68:
                    0e:dc:3c:72:07:a0:de:87:3e:7e:6f:ce:34:a1:7d:
                    e0:46:bc:ce:66:17:3a:e9:01:72:20:ed:8a:f9:e3:
                    e1:99:57:88:4c:18:b3:08:43:b8:52:29:2e:89:8a:
                    d3:88:d0:92:70:57:33:c3:6e:c8:4c:6e:1b:75:02:
                    27:36:ae:b9:d4:09:05:62:46:33:c2:4c:2f:37:60:
                    65:12:6a:b3:a5:61:ae:4e:07:90:b4:5a:d3:6b:69:
                    cd:5e:50:a3:4a:ed:93:6f:b7:8b:ce:f7:40:5d:a6:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:C4:CC:2A:26:0E:EF:22:DE:79:53:91:88:B1:B0:CE:21:48:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:46:dc:46:ec:7b:7c:1c:b6:9f:36:83:24:d3:a0:69:04:
         f3:b5:b1:0f:48:dc:0a:0e:69:c6:91:bd:3c:fd:42:3c:bd:64:
         28:06:4c:40:e2:50:2c:dc:b2:2e:df:36:1a:8a:2e:ef:70:fc:
         fa:94:e3:5c:5b:b4:24:ff:a3:86:0c:e8:59:1c:d9:7a:7d:9b:
         f7:1b:d1:9b:1e:82:24:6b:02:f4:b2:2f:a6:25:77:6a:6c:e4:
         af:de:41:06:ab:ab:43:7f:f4:04:b8:c0:6a:dd:31:c8:33:83:
         cd:41:09:c0:b5:13:43:e8:15:13:b1:12:09:dc:e7:3c:36:19:
         c4:db:7e:3f:26:39:90:9a:d0:28:ff:cc:b9:61:f0:01:a2:d2:
         16:60:63:3d:ac:0e:9f:b5:90:6c:91:f1:a0:b4:62:75:25:56:
         6c:58:ab:a9:bf:88:52:8a:48:1c:42:51:ed:d4:dd:41:6a:b7:
         66:95:ec:87:94:5a:09:e0:7a:52:f4:2e:05:8d:35:85:19:61:
         46:60:17:21:8c:3f:55:bb:84:9b:54:e2:8b:c0:53:c1:78:b7:
         88:e3:7e:a0:b8:ec:f2:7a:3e:62:2a:6b:7e:9e:e7:7d:c1:d7:
         17:a8:69:36:19:72:c0:87:5a:af:96:a4:64:ae:f7:b5:aa:9b:
         80:36:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:58:28 2026 by rpki-client