Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa
File:                     2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa (raw, json)
Hash identifier:          RxHhAlRQ8G2fzhIbvx+/Owt6XtKg6h8jGQyFoNmjh30=
Subject key identifier:   51:77:4A:75:86:FD:60:F4:77:C6:1D:62:57:12:48:C2:89:B9:85:D6
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584DBA3B122375655B3E7CDA1140
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:12:23:75:65:5b:3e:7c:da:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=2d2416e2-95b1-4d0b-9ec0-71d1edbb9390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:27:6d:63:df:3b:7e:dd:71:de:e5:e8:9e:
                    cd:a8:b2:b4:26:11:26:c1:df:c0:14:69:35:6a:ca:
                    02:e3:0d:05:ac:0d:9f:8f:9b:76:65:15:6a:4a:2c:
                    6e:32:db:83:51:9d:7d:ee:04:ba:94:cf:e7:9e:6c:
                    a3:c2:48:96:cc:a7:7e:de:e7:14:79:13:31:c6:00:
                    c0:2c:74:24:4b:6d:6d:da:fa:f1:46:10:e9:e7:2c:
                    bc:15:86:12:27:a1:e1:8e:28:bd:71:10:92:fb:00:
                    62:f8:a2:74:14:72:59:61:73:71:5f:39:a4:92:ef:
                    47:d7:19:7e:03:32:57:9c:81:66:bd:c1:dd:38:d3:
                    1d:83:0f:6e:8a:1c:03:7e:eb:a3:4b:8f:95:59:46:
                    b1:eb:95:45:e7:8c:62:92:44:f5:81:c8:b8:32:00:
                    63:26:5d:65:fd:b2:e3:ab:16:b4:d7:43:d1:7e:bf:
                    a9:58:29:73:05:cc:f7:e6:f4:f9:8f:fe:66:f0:29:
                    69:3f:b2:a1:6e:f8:80:ea:7e:dc:d8:d2:a1:2d:d8:
                    14:f6:60:81:46:c8:8a:ad:9c:72:37:7c:c3:19:89:
                    e3:f1:0c:94:b3:b0:78:cd:8d:7b:56:db:2b:dd:fd:
                    87:7f:0b:b7:a9:95:21:a7:15:c6:9a:32:09:3b:94:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:77:4A:75:86:FD:60:F4:77:C6:1D:62:57:12:48:C2:89:B9:85:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:44:8d:94:07:23:39:05:57:ff:de:7c:4f:8d:50:85:cc:
         7e:b8:9e:85:27:3e:20:80:bb:9e:27:56:aa:a2:f3:5b:82:7a:
         3d:74:7a:aa:02:59:97:77:95:c2:0f:0a:c6:d9:10:0b:22:76:
         a0:05:40:28:d9:10:f6:35:71:f3:00:69:95:1e:f1:6d:dc:ef:
         71:33:2a:41:3f:43:63:b0:c1:b9:f9:a1:6b:6e:64:93:23:b8:
         ad:be:c2:c9:5e:f3:d2:1d:6f:42:d0:b7:54:e4:b9:46:d3:d4:
         ba:84:03:e6:b7:b0:c5:ff:00:ac:77:2d:a9:78:a0:02:71:5c:
         58:67:d9:03:17:2a:96:0e:78:13:9f:c2:f3:fc:d8:be:aa:cd:
         b3:29:b6:b0:b6:31:53:3d:0d:57:de:b8:2e:97:99:a1:05:35:
         b9:f1:a5:f7:dc:39:07:4e:01:3b:39:bc:13:29:21:cd:58:e8:
         23:e5:3c:67:2c:79:0e:09:09:41:7d:4c:53:53:6a:65:c8:ae:
         e5:92:83:ca:12:16:fe:41:f3:1e:bb:20:f0:9b:e4:d9:f9:61:
         69:8d:3f:02:eb:b6:de:97:00:fc:78:a3:c4:8c:90:b9:55:7f:
         12:da:51:93:c1:13:a1:19:f0:45:46:d7:71:a7:94:95:fa:d0:
         d5:d3:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:10 2026 by rpki-client