Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa
File:                     e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa (raw, json)
Hash identifier:          8eaSAO4v6ZnM7dBtG39Pe/ED5aUnSQsLFop+CurUeE0=
Subject key identifier:   9E:85:E9:71:7A:1E:67:AC:34:A1:5B:91:F2:37:E8:0B:94:2E:B3:C4
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584DAF101A717BCA833D71BFD000
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        2602:f9e7:2c::/47 maxlen: 48
                          2602:f9e7:30::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1a:71:7b:ca:83:3d:71:bf:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=31c1f4b5-27d2-403c-ac86-d3644e44e773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:d7:e3:a0:b5:44:9d:f1:b3:fb:7e:40:87:
                    67:7e:0e:35:9e:94:6c:b2:1b:00:cb:19:a3:bf:09:
                    36:d1:1b:81:ce:b2:c2:df:a6:ec:f1:2a:19:67:8f:
                    d1:a8:8a:f8:eb:fa:22:88:20:f8:e8:3a:b9:1a:ac:
                    98:92:e2:fe:79:4a:bc:b0:a4:a6:45:5e:54:59:69:
                    a3:0f:73:a3:81:22:01:1e:1e:e6:48:76:a0:d1:17:
                    b9:cc:11:0f:f7:1d:77:bf:e9:37:c3:38:14:de:fa:
                    5b:85:92:d9:d1:03:33:8e:50:88:96:83:5e:cc:15:
                    75:17:50:8a:a7:f3:c5:75:36:64:7d:58:b2:b5:3b:
                    eb:1b:85:ce:b7:2a:eb:f2:5a:11:03:5c:23:6c:f6:
                    46:6f:4c:0e:d0:e7:fa:b5:ed:98:a2:66:1a:81:19:
                    c4:cc:26:4c:04:18:44:29:55:44:92:0c:9d:4a:08:
                    be:d9:cc:46:19:f3:51:a8:77:3f:fc:04:c6:2d:28:
                    46:2c:40:08:b2:b8:75:df:30:72:06:1d:88:61:85:
                    e9:e1:61:b9:26:c6:43:34:87:80:a4:15:e6:6f:f3:
                    85:81:a6:8f:f8:38:e6:5d:de:fe:e7:af:ba:46:8a:
                    a5:42:17:9a:38:23:ee:96:25:de:6a:75:c1:b0:86:
                    8a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:E9:71:7A:1E:67:AC:34:A1:5B:91:F2:37:E8:0B:94:2E:B3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:2c::/47
                  2602:f9e7:30::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4d:c9:62:ee:dc:86:02:ba:78:81:f3:9e:15:70:68:fd:b3:
         cd:76:cd:2b:65:23:99:d8:06:5e:08:6c:6a:f8:c5:fd:8d:22:
         82:ae:d3:35:93:35:e2:79:60:23:06:c8:ca:7d:9b:f0:8f:6b:
         97:db:c3:87:13:fa:8b:46:2b:00:40:0a:60:c1:3a:0e:7e:6d:
         ae:a2:87:73:76:0c:69:53:90:4b:d2:24:37:61:11:91:4f:9e:
         38:58:2b:55:e8:38:7e:6b:19:93:ef:2a:ac:ae:01:6e:da:39:
         6f:2c:74:f5:03:40:98:57:d9:52:41:69:29:d4:90:2a:e3:d4:
         67:e4:86:84:99:e4:66:48:90:d5:34:3f:f4:18:29:46:c1:a3:
         96:4d:47:62:f0:88:6a:3a:7e:d9:1e:10:04:de:de:04:83:d1:
         28:fd:47:0e:59:74:d8:1a:70:65:1f:4d:22:f5:85:6a:9f:ac:
         e0:d1:d2:df:67:28:fa:96:db:c8:c1:a3:fc:f0:b9:bb:c2:82:
         68:c2:ab:7b:80:fe:f5:e3:84:57:1a:ea:80:1f:02:a1:80:08:
         51:f5:5a:d0:25:58:10:59:5a:38:8d:a9:5b:b7:67:e6:f1:95:
         33:57:bc:16:98:4c:7e:3f:87:6c:25:1b:4f:72:e6:90:3e:5d:
         29:75:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:07 2026 by rpki-client