Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa
File:                     0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa (raw, json)
Hash identifier:          RLLVmhXIGQFElv3Jz0jFK59Y7d4EGRI82w3RGyC1tiU=
Subject key identifier:   36:CE:22:E6:31:40:D8:D6:BE:73:A4:B9:45:E3:35:D7:E1:5C:3A:84
Certificate issuer:       /CN=c503e4cc-4b3e-4fed-a3d9-8586590e8da1
Certificate serial:       010D0C9F4328584D8C2AAE8D39BDAA8F736FC8E0
Authority key identifier: E4:97:69:0D:53:01:0F:3A:E0:7C:23:21:CD:86:14:B4:31:15:F3:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        2602:f4d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ae:8d:39:bd:aa:8f:73:6f:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c503e4cc-4b3e-4fed-a3d9-8586590e8da1
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=73fb753c-3b07-4bbb-b2e7-0a335c4066ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:da:e0:01:ea:b3:e8:e6:cd:e0:20:af:64:
                    01:0b:d9:fa:3c:b1:56:57:73:72:88:d9:34:4e:03:
                    bd:fa:2f:cd:56:bf:04:14:44:bd:21:2a:9c:45:c3:
                    e8:78:c3:3a:e4:7e:8a:31:8d:7b:83:ed:53:7e:77:
                    f2:81:41:ec:ab:12:15:cc:f6:6e:38:e5:a9:d8:d2:
                    d5:b3:0c:72:45:f6:e3:4e:69:ce:12:01:45:2f:2b:
                    9b:9e:79:b6:a7:ff:d1:ae:f4:ee:c5:8f:70:a1:eb:
                    41:c3:88:61:9c:13:f4:d7:52:8e:db:b6:7f:e5:ef:
                    a4:89:e9:1b:c9:de:2e:3f:55:a6:a8:9b:b9:a3:5b:
                    33:de:d2:27:ef:c0:0f:81:8f:e9:d3:00:2f:5c:bc:
                    c5:76:11:c4:67:a4:72:1b:29:58:ba:55:02:f4:52:
                    9f:28:e8:29:cd:41:99:3f:62:d6:b5:09:23:82:6c:
                    e7:f1:b1:84:e9:b5:5d:dd:f9:42:96:dd:a6:89:8b:
                    3e:7c:e7:83:19:a3:9f:2e:d6:46:80:0e:02:a5:62:
                    02:e1:51:e7:eb:f9:6a:f0:3e:bb:f3:fd:eb:23:e8:
                    22:c8:32:fd:0d:6a:6f:25:31:f9:69:f2:1c:ac:ac:
                    8e:9b:b1:a3:8c:0f:59:b8:80:bc:30:36:6f:70:e0:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:22:E6:31:40:D8:D6:BE:73:A4:B9:45:E3:35:D7:E1:5C:3A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.crl

            X509v3 Authority Key Identifier:
                keyid:E4:97:69:0D:53:01:0F:3A:E0:7C:23:21:CD:86:14:B4:31:15:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6e:ec:8c:85:f8:29:e9:e9:eb:76:44:68:53:14:c3:1b:c0:
         55:7e:ca:3a:17:ec:9e:fa:79:50:c0:75:a5:50:5c:2e:f6:71:
         66:f6:d7:96:8a:95:88:6f:15:92:b9:06:d4:9d:14:b6:7c:08:
         8c:81:d9:d8:1c:fa:9e:bb:df:34:f7:e3:e1:2a:d0:ce:0a:26:
         f3:b5:7f:be:65:e5:76:ef:01:b6:2c:95:ae:6f:98:28:ed:0b:
         72:97:70:ce:7d:12:e5:bd:91:83:82:09:6d:de:7d:0a:fe:bc:
         b4:22:7b:fa:3c:da:c1:1c:02:54:3d:c8:4d:fd:07:3a:5c:13:
         8d:cb:f6:7d:cd:97:1b:f7:cb:d2:2e:32:09:12:af:ae:df:94:
         4e:f7:98:96:e0:bd:a6:6b:3c:f2:ce:f5:f3:fa:6c:5a:2b:6c:
         c3:49:d4:5e:94:90:a9:bd:aa:9d:cc:ce:a9:79:f7:8d:b5:0d:
         f2:00:f7:df:4c:cc:6a:1f:4e:f1:e8:db:fa:7f:f5:be:1d:f8:
         cf:0b:34:f9:35:c2:d1:36:20:25:c2:4d:1c:00:64:88:dc:89:
         1c:d8:7a:e9:27:48:c0:5f:6f:08:1e:b1:e4:1c:2c:29:c9:f2:
         65:ee:2a:d0:c6:04:a5:2a:3f:ad:db:26:2a:12:b8:2b:47:6c:
         eb:b5:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:02 2026 by rpki-client