Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa
File:                     0e7b6b94-9855-32f8-8b01-5e42800b5852.roa (raw, json)
Hash identifier:          1lTY4YlwfzfprXXluhBXH6WRkANyiTVPADRrqm5Wfuw=
Subject key identifier:   BC:FE:37:D5:A3:C1:0F:70:35:9E:41:39:E3:51:A7:ED:D9:3C:F0:4C
Certificate issuer:       /CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
Certificate serial:       010D0C9F4328584DBFD05CE93BE73C9F8890CE60
Authority key identifier: A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     398485
IP address blocks:        2602:fb2b::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:5c:e9:3b:e7:3c:9f:88:90:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=dbdcc246-bbe7-40c3-abe3-901412e0b9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:6c:0b:df:16:17:ca:90:76:76:34:d7:aa:
                    aa:ab:45:d9:4d:2f:db:d7:9f:fe:93:56:e9:0b:e5:
                    98:cd:37:8d:fb:96:ab:8d:f9:37:53:d8:7f:0f:1c:
                    91:88:9c:19:c1:23:cb:95:1d:d7:6b:bf:12:17:5f:
                    7f:a4:a6:fc:19:27:e6:c0:8b:8a:0d:a1:c6:fa:3f:
                    71:a5:eb:ca:56:7d:c6:9f:4b:82:e3:f4:45:66:80:
                    fd:68:ae:75:b3:c0:32:76:ce:23:8e:c5:c0:e0:4e:
                    ae:a9:6c:5a:c1:dc:68:e2:f5:32:ea:5f:39:c0:36:
                    26:4e:38:ca:40:30:d5:78:fb:a7:4b:b3:f2:6f:1a:
                    f7:f8:1d:dc:f5:d9:8d:31:9d:dc:39:d4:f8:6c:a0:
                    87:95:5b:d7:87:50:61:bc:d6:ee:c0:67:d9:8b:6d:
                    1e:19:20:a4:a7:81:26:ab:46:96:eb:b4:d6:6f:18:
                    4d:15:3f:ed:6a:f2:46:c4:fe:b3:76:d9:8c:a8:b6:
                    3f:0a:2e:03:28:4d:94:e7:9d:3e:e7:c1:b0:89:c9:
                    75:24:c7:63:45:4a:27:39:b2:cd:2f:40:fb:e4:62:
                    65:b7:3b:12:09:cf:43:d2:98:c4:7d:81:fb:08:e4:
                    0d:e4:68:8c:d0:3b:cc:1a:84:a8:36:b1:df:49:19:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:37:D5:A3:C1:0F:70:35:9E:41:39:E3:51:A7:ED:D9:3C:F0:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb2b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:1c:24:c8:58:96:9d:5c:d9:1c:5a:86:a4:62:b6:64:db:
         2d:ab:9e:e9:db:09:9f:8c:8d:f4:1b:1f:26:fb:e5:be:a2:a8:
         47:a4:52:2d:60:6c:4f:bc:72:10:04:f8:41:54:67:cc:a2:32:
         3d:45:02:2a:c3:2e:a0:77:ff:34:92:ee:9a:c7:72:21:01:48:
         ca:d5:43:e7:65:3d:1d:b1:2e:9e:a3:07:cc:1c:48:2d:f4:16:
         8d:bf:11:40:7b:fb:4c:f8:8f:99:aa:1a:8f:3d:e8:b9:5a:2e:
         7c:d2:fe:9c:0e:c8:32:84:d9:39:ce:ca:05:ee:b7:a7:04:ef:
         49:81:e9:be:f7:8a:74:91:d3:ce:6a:b8:41:66:3e:28:86:52:
         54:12:34:9f:a4:c6:00:9e:2d:cb:b0:a8:61:a3:db:ca:61:b9:
         c7:47:ee:91:8a:60:5d:14:aa:17:81:b1:8a:dd:9a:6c:20:fd:
         04:5a:c3:da:cd:99:8a:03:bd:d2:d6:5f:e5:bb:bb:b7:c1:d8:
         66:89:cc:44:d7:90:d9:9a:89:cb:61:86:42:4d:fe:75:0d:6c:
         0f:78:da:55:d9:ef:37:26:44:1f:5a:a3:99:e7:e7:9a:5c:82:
         bd:a9:2c:b3:06:37:28:06:7e:2f:6f:49:f7:1c:68:8d:c8:90:
         79:f5:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:57 2026 by rpki-client