Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/02c38a30-f75d-3be8-bc3a-677f2c4db86a.roa
File:                     02c38a30-f75d-3be8-bc3a-677f2c4db86a.roa (raw, json)
Hash identifier:          UZpfuyNf7k8ZHX/Ebrq9tEYzpPaPASZtN3A1g82SpJE=
Subject key identifier:   50:2E:60:BD:44:2F:24:06:18:20:D5:3C:69:9B:A3:DC:F4:80:46:FB
Certificate issuer:       /CN=b5f48b26-d1bd-4f55-9507-2773595cf9a2
Certificate serial:       010D0C9F4328584DBE6AF60B78D9606353484D00
Authority key identifier: BB:54:83:B4:5D:1E:94:DC:7F:63:F2:8C:55:61:D3:28:61:34:CF:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/02c38a30-f75d-3be8-bc3a-677f2c4db86a.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        2604:2be0::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6a:f6:0b:78:d9:60:63:53:48:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f48b26-d1bd-4f55-9507-2773595cf9a2
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=c6d697dc-74ef-49ab-8ab9-9c7394ae78be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:ec:e9:e9:3d:6a:ec:4e:7c:ad:03:68:5a:
                    1e:d7:a1:8d:10:cf:6e:77:fd:43:2d:48:93:a7:da:
                    9f:6e:c0:62:86:b0:26:c0:4c:83:d0:0a:c8:a5:06:
                    0c:2c:82:46:6f:fd:b8:39:7f:7e:e6:2b:69:4d:a3:
                    a5:48:26:b9:11:40:f4:d5:e0:96:31:96:38:91:2e:
                    bd:7e:7a:fa:33:5a:07:c9:11:63:cd:dd:d7:a6:ab:
                    09:07:7d:b3:0a:f0:fc:c4:fb:f8:8d:e9:77:5c:ef:
                    d7:aa:2b:5c:0a:e7:57:8b:08:e6:f3:ac:51:70:5c:
                    09:ad:a4:6c:69:7d:06:4f:98:4f:74:7c:d8:98:6b:
                    9f:4b:1c:24:57:7a:86:8a:5f:c7:07:60:41:69:d0:
                    aa:f8:19:ca:05:d2:16:b5:29:ab:c7:1a:43:39:4a:
                    c8:8c:0f:eb:a8:81:64:df:66:1a:60:f6:1c:c0:99:
                    d6:ff:d9:91:e1:90:f0:e8:96:40:f4:e0:64:d6:c3:
                    ab:c3:9c:5e:92:f4:30:f6:96:48:73:b1:54:2d:4d:
                    01:84:82:eb:f7:b8:d8:27:17:a1:36:b7:26:b4:23:
                    36:45:9c:db:4f:01:29:b3:09:18:53:b0:78:8a:58:
                    4b:7c:6a:31:62:22:8b:fb:2b:de:04:5d:5c:ec:d2:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2E:60:BD:44:2F:24:06:18:20:D5:3C:69:9B:A3:DC:F4:80:46:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/02c38a30-f75d-3be8-bc3a-677f2c4db86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.crl

            X509v3 Authority Key Identifier:
                keyid:BB:54:83:B4:5D:1E:94:DC:7F:63:F2:8C:55:61:D3:28:61:34:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2be0::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:7c:e3:38:b5:f7:af:cf:6f:f9:b1:be:30:bc:f6:e8:eb:
         8a:24:7f:51:d1:7d:54:c0:3d:e9:5b:eb:42:25:09:91:01:a4:
         a5:00:34:fd:c0:d5:ce:ba:6f:73:21:67:08:b6:dd:71:b0:de:
         4c:9d:c1:68:b1:e8:a1:33:b6:36:f4:42:41:30:94:59:fc:42:
         10:97:3d:20:52:5f:65:dd:ab:4e:b9:05:a6:d5:90:39:b5:bd:
         61:0c:c6:1b:76:28:8e:3b:64:f4:6e:aa:98:f3:ca:f8:ab:9d:
         ff:3b:ae:5b:ce:85:b6:c1:9e:5a:57:f1:23:5a:1e:93:49:f9:
         3c:8d:d7:54:e6:fe:02:3e:9a:0f:61:15:fb:1a:f6:df:48:71:
         bd:b0:36:98:00:9e:43:e8:34:90:38:8f:6d:1b:ad:01:a3:ed:
         43:ba:47:f0:4a:57:47:33:e3:1a:bb:40:07:d8:31:31:7b:d9:
         5a:4e:f2:66:ab:0e:98:bb:f0:5a:31:9d:d8:be:1b:a6:10:86:
         2f:c1:be:ab:51:14:71:a7:ad:ae:ab:d8:f1:a1:3d:29:52:da:
         ca:40:3b:f3:6a:41:ea:b5:ed:10:5a:ad:2a:3a:ad:f0:6c:5f:
         d9:9d:2b:a7:2a:23:fa:39:57:9d:3a:c3:15:33:34:f5:16:ed:
         26:c4:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:12 2026 by rpki-client