Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/d4d3db25-57a7-3808-9522-8b8a86b8a7c4.roa
File:                     d4d3db25-57a7-3808-9522-8b8a86b8a7c4.roa (raw, json)
Hash identifier:          R/iN8lk0CkxwJ3bigxpHC91VqoWgf7qY4+p7FX88K0A=
Subject key identifier:   32:C8:CF:94:65:55:B7:5C:C7:05:70:78:C9:4B:BA:42:64:03:EB:7C
Certificate issuer:       /CN=55f5dbbe-55fd-4d86-a7c8-84b9d303ce80
Certificate serial:       010D0C9F4328584DADAAC8B4437BFECCFBC07D00
Authority key identifier: 8D:03:E4:8F:A8:B2:DB:94:3C:C7:A8:5E:C8:08:84:1A:92:98:35:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/d4d3db25-57a7-3808-9522-8b8a86b8a7c4.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     394503
IP address blocks:        2620:e0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:c8:b4:43:7b:fe:cc:fb:c0:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f5dbbe-55fd-4d86-a7c8-84b9d303ce80
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=ac92844f-fe91-4235-9c6e-14457a1a9f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:df:90:b3:e2:fc:eb:47:ce:df:99:97:37:
                    b1:0d:39:5d:f3:49:3f:07:88:32:50:0b:cc:91:91:
                    ef:1b:8a:b5:37:ed:1a:55:6a:9d:b4:27:32:57:46:
                    c1:3b:b1:a8:1b:26:f6:1e:9d:38:74:57:28:a0:42:
                    70:28:a5:25:58:bc:0e:8c:2d:53:b7:77:5d:c6:69:
                    dc:69:65:96:cf:e1:3a:33:a4:84:e4:70:93:1f:99:
                    f6:13:92:ad:4e:ad:a0:55:82:de:54:81:62:a3:ee:
                    60:f3:f4:ea:40:b7:c4:73:76:9a:6c:eb:d5:9b:74:
                    a8:3d:16:fb:c1:2a:85:37:27:95:41:c4:96:70:a5:
                    a2:74:72:87:b5:78:5e:ec:12:0e:e0:a1:73:c2:96:
                    af:da:79:40:02:17:6b:b0:b8:ce:12:90:8b:b1:73:
                    3d:f6:92:00:a7:6d:49:50:d8:93:a2:11:23:2b:12:
                    26:89:b5:07:03:5c:0e:ba:7b:a8:7c:be:32:d5:8c:
                    9d:0e:65:6c:84:92:35:5c:06:8f:24:8a:d9:86:77:
                    bd:18:70:89:9f:cf:74:1e:87:5d:d9:c1:95:a4:fe:
                    2d:77:3f:7c:bd:7d:f3:3b:e0:39:49:c1:92:bf:8a:
                    e7:7a:6e:b9:2f:c5:05:77:26:f5:95:82:13:a2:5f:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C8:CF:94:65:55:B7:5C:C7:05:70:78:C9:4B:BA:42:64:03:EB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/d4d3db25-57a7-3808-9522-8b8a86b8a7c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.crl

            X509v3 Authority Key Identifier:
                keyid:8D:03:E4:8F:A8:B2:DB:94:3C:C7:A8:5E:C8:08:84:1A:92:98:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/55f5dbbe-55fd-4d86-a7c8-84b9d303ce80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a2:47:a2:ef:08:cd:2a:da:c9:ad:ef:b4:8b:0d:5a:6f:d1:
         0b:f7:cb:3a:01:b5:6d:67:ed:ef:fa:78:04:a8:cc:37:ff:ff:
         a8:bd:ac:1e:0a:e5:a1:a7:df:ac:9f:54:be:02:e4:6a:5b:df:
         8f:46:8b:0a:12:32:9e:e6:fe:33:49:ad:c4:4b:d8:64:4a:07:
         2e:80:05:12:41:8b:ec:bd:32:37:60:6a:87:30:e1:62:4e:37:
         26:ff:f7:4c:de:df:9a:fa:bd:b3:a8:91:ff:61:ac:bf:8f:45:
         fa:bc:6f:96:e2:90:5b:8c:ed:3b:5d:de:a7:7b:b0:fe:89:55:
         f9:16:8d:e9:b0:99:73:15:d0:3b:a0:4b:86:ec:04:21:d9:88:
         d2:7c:00:e9:4c:05:e9:e0:94:bf:2f:3e:8a:10:1b:c6:95:3b:
         d5:d6:cd:00:a9:49:1a:49:ae:03:ac:cf:50:ae:e7:64:c7:ce:
         bf:97:56:0d:b6:b3:04:57:0c:e5:24:91:e3:41:19:31:56:b3:
         e2:82:6c:a2:92:76:f3:f2:b6:4a:42:cf:d2:5e:5b:27:4a:df:
         ac:74:80:d6:0e:d4:24:56:d8:e0:97:01:9a:da:de:c2:03:ca:
         7b:9f:d1:ae:2d:c7:54:67:4f:74:f7:49:3e:82:eb:1d:af:6f:
         87:9a:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:27 2026 by rpki-client