Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/54199565-6cef-3713-b08d-53a11a0bf15f.roa
File:                     54199565-6cef-3713-b08d-53a11a0bf15f.roa (raw, json)
Hash identifier:          Zy40fgPPgEUpEzDaKNulMWzyazvG3cVqKBHlC1+66hU=
Subject key identifier:   FF:75:A6:0B:3A:D7:58:79:0A:69:D0:11:7A:55:E3:2D:38:09:BF:73
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F4328584DCDC5AAB3B21D23D80041C500
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/54199565-6cef-3713-b08d-53a11a0bf15f.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     62563
IP address blocks:        2602:fec3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:aa:b3:b2:1d:23:d8:00:41:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=cc2c9675-1859-493a-83eb-109ababa7d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:7c:ef:c4:19:4c:9e:0b:e2:b1:49:33:f7:
                    7a:3c:76:70:e8:96:d5:28:ea:6b:61:6a:74:65:4d:
                    46:84:54:ec:8e:b4:88:06:5a:f7:31:29:4e:4b:02:
                    ba:ec:b9:15:8e:d7:2f:7e:25:16:55:08:65:ed:66:
                    6e:a3:2f:ee:bb:0b:d0:3f:98:b8:1a:fd:d2:6b:65:
                    ce:10:19:f0:58:10:09:40:3c:04:ee:15:e8:4e:ac:
                    67:46:66:b7:87:a3:89:1a:73:1b:18:5c:88:16:86:
                    52:58:27:90:05:e0:df:c2:97:4e:16:63:b0:24:8d:
                    91:a1:f4:2c:8b:dc:a1:a0:22:db:ce:a7:3e:66:d8:
                    3b:bd:e5:ad:69:e5:5b:21:d8:8d:ac:77:af:e0:b3:
                    cc:93:80:43:3d:b8:4d:6a:16:48:f9:1d:20:34:bd:
                    c5:8c:98:b4:2a:5e:e4:aa:26:12:a4:41:b4:b0:45:
                    48:7c:87:52:b4:8d:57:c2:2f:3a:2b:48:f8:59:3c:
                    71:12:f3:a7:4d:7f:65:44:57:b8:46:1a:3b:67:ee:
                    d1:52:87:82:99:27:79:12:8c:fd:da:d5:0e:cd:26:
                    03:23:46:fc:17:ea:e8:5d:6d:5b:b6:f0:27:45:c7:
                    15:2c:41:2d:d1:cd:99:11:6c:a0:c5:5a:89:5f:00:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:A6:0B:3A:D7:58:79:0A:69:D0:11:7A:55:E3:2D:38:09:BF:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/54199565-6cef-3713-b08d-53a11a0bf15f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:e3:5e:69:c5:01:23:5f:fe:ce:f7:2a:ae:15:53:f4:db:
         5a:3a:35:21:34:36:58:8b:5a:e2:41:a5:96:cc:71:51:50:3c:
         94:3e:be:53:69:d6:b0:14:de:1f:cd:fe:08:88:8f:a7:cd:4f:
         92:36:a3:47:ec:91:a8:04:89:91:ef:d3:b4:1c:5c:b4:6f:a0:
         2f:6c:52:ba:cc:20:65:a2:76:d6:7a:24:d3:0c:e5:50:cb:70:
         15:8f:ad:73:17:9e:09:b0:2b:ac:a2:ab:72:eb:4c:4b:89:b9:
         39:76:b6:2e:76:8a:5d:56:7b:7a:00:45:23:38:0a:6d:b5:99:
         11:e8:b3:95:a3:f9:6f:1e:e1:3c:79:f6:65:d4:93:f6:0a:d1:
         56:32:6d:c3:a8:ed:1a:04:50:d7:cd:50:47:a0:13:e8:da:70:
         50:94:d4:36:22:77:ed:32:8b:b2:10:ad:6b:43:96:5d:18:6d:
         e0:87:09:04:c6:56:38:d5:6a:47:e4:8e:b5:1e:6f:f9:c1:07:
         97:87:c9:a7:73:09:ff:b0:e9:e1:17:08:ab:de:d1:1f:85:95:
         6c:19:2f:ae:45:01:1a:bb:df:12:1c:c7:ae:5d:6d:10:6c:db:
         bd:1e:52:d1:89:84:ed:9c:28:58:e6:79:bd:0c:a0:63:d3:af:
         ff:64:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:48:06 2026 by rpki-client