Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ccd1e17b-a326-32cd-ac51-fa322ce04397.roa
File:                     ccd1e17b-a326-32cd-ac51-fa322ce04397.roa (raw, json)
Hash identifier:          Fhvwxxht7rmvEJMpIBteD5/VJVSIKzftvKNUT4X0H9g=
Subject key identifier:   B7:E9:EE:FD:71:52:AC:5F:9A:D9:D0:46:5F:88:9C:E4:1D:38:C9:C9
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F4328584DBBA06FBA466112077856AAC0
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ccd1e17b-a326-32cd-ac51-fa322ce04397.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     400967
IP address blocks:        2602:fcd8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6f:ba:46:61:12:07:78:56:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=c5829fd5-8c28-4928-b4a0-83c2434f9db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:03:eb:cd:85:73:25:dd:57:cc:68:1f:b6:
                    fd:ae:26:a4:6c:c0:8e:c2:6b:76:6b:35:2d:23:ce:
                    f9:4c:50:52:27:e3:ec:fd:5c:cf:c3:5a:76:72:ac:
                    9d:a9:3c:e5:61:35:e8:cc:44:35:46:58:8d:b5:8a:
                    5b:54:6c:3c:ba:95:99:ed:92:5c:53:12:ce:84:4f:
                    78:64:a6:f0:b4:87:db:7a:8f:d8:06:62:c6:cb:6f:
                    38:27:a4:ad:3f:d7:b6:ee:45:9b:65:0e:5b:01:1b:
                    26:1e:4a:f8:32:8d:47:d3:7c:44:2e:f4:9f:b3:3a:
                    a6:db:5f:e1:95:4a:62:9d:3a:3f:f4:48:4b:5e:7c:
                    81:07:16:f2:d4:46:f0:ae:b5:74:f4:11:4f:6c:e8:
                    96:ad:4a:e4:f6:9c:88:4d:36:1a:11:2b:e7:ee:8d:
                    5e:14:4f:1b:02:17:ad:3a:bf:e6:c2:ee:fd:ca:a6:
                    0f:f2:00:d4:e0:4d:6a:09:cb:a9:73:7f:d9:97:fd:
                    9c:b5:ee:0b:29:50:07:6f:0d:30:40:a0:d5:d3:60:
                    07:f4:8b:d5:c0:3c:00:f7:c9:fc:11:cb:47:68:50:
                    da:1c:ee:0b:85:ad:4a:a9:43:e3:6e:fe:18:12:96:
                    11:6c:0d:70:98:a9:bd:7e:2e:69:0d:4e:6b:f5:79:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E9:EE:FD:71:52:AC:5F:9A:D9:D0:46:5F:88:9C:E4:1D:38:C9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ccd1e17b-a326-32cd-ac51-fa322ce04397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:48:f2:2e:ea:e5:d4:c4:44:6a:ee:31:fb:4c:fa:f4:e5:5f:
         32:10:ec:36:4b:1d:2b:fe:bf:b9:20:5a:48:3b:1b:8e:bb:01:
         59:27:22:3d:13:b7:a6:88:96:94:7e:8d:0b:d7:36:10:7f:ad:
         ea:f1:76:90:12:74:3a:99:49:25:5a:52:50:21:5f:46:aa:70:
         e6:62:66:f3:21:d1:af:2f:5d:04:cd:f3:ac:a8:d2:93:e2:ea:
         0e:6c:fe:ef:08:c1:66:22:07:db:79:b0:12:30:36:30:ab:93:
         ea:2d:06:8c:0a:e0:de:07:ec:71:93:46:fd:0d:cf:a4:4d:4a:
         00:6f:07:07:e4:bf:97:dd:56:ed:c3:1d:aa:0e:48:89:d8:94:
         53:cd:68:41:f9:be:de:cb:cd:2b:8c:1e:8e:b8:d7:b3:3c:1a:
         d7:83:5a:b9:a6:a3:28:eb:c7:7b:8e:e9:57:e7:6f:2c:d8:62:
         a7:03:d0:f5:4a:ae:48:f7:73:60:d9:f6:11:39:1e:ae:f6:5c:
         0f:f2:a6:c3:ca:cc:ef:f3:1b:8b:1e:4b:4a:bf:db:92:16:1b:
         37:7c:97:88:bd:39:e2:f4:94:9f:5f:ce:ea:12:ee:6f:cf:5d:
         85:06:41:1e:84:79:45:d3:3c:52:c5:11:36:8f:fd:5b:10:e8:
         53:6a:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:40 2026 by rpki-client