Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
File:                     ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa (raw, json)
Hash identifier:          LTgWZWA8QzHHP9oYFLIqdisNDxjZUCQgCnK0frkj5HQ=
Subject key identifier:   4B:05:C1:7C:BC:32:75:9B:4A:44:E3:CA:C0:99:06:25:92:A1:E8:AC
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584D300A5994531B193555F750C0
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     22296
IP address blocks:        2602:2e5::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:59:94:53:1b:19:35:55:f7:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=4b889daa-9ab6-417b-810d-64657998a13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:3c:7b:da:66:01:57:8c:02:b4:89:26:b2:
                    5c:8d:2b:90:74:c8:5b:09:07:7f:1a:03:b7:59:c7:
                    b9:3a:18:2b:3e:86:4e:0a:f5:6c:2d:0f:80:d6:9a:
                    81:dd:88:1e:f8:12:1b:6e:d4:96:1e:ad:f6:17:b1:
                    b5:75:dc:bb:f8:b6:20:45:ae:de:51:e8:28:c4:b0:
                    b0:5e:e9:24:69:a1:39:89:48:14:75:01:47:db:06:
                    2b:0e:ba:7f:90:07:02:21:b0:43:71:57:e0:c7:e4:
                    78:54:06:44:83:cb:40:c1:2a:13:0d:46:79:6e:17:
                    13:ed:33:a9:14:90:a6:c9:75:e1:8b:3f:f3:52:6a:
                    b5:0c:77:ce:7c:ae:eb:7b:36:07:4a:a6:38:50:01:
                    44:70:b4:57:c8:aa:bc:5a:ba:86:c0:ca:a3:67:ab:
                    73:dc:ff:0c:38:d5:c1:c7:43:6a:d8:2b:d9:f4:9d:
                    31:fb:f2:06:f5:70:03:d2:dc:00:9f:4c:d4:8d:f2:
                    76:f7:c2:7f:39:b8:af:9b:a0:f7:91:3d:66:83:58:
                    3b:86:9d:dc:1e:fe:41:01:bd:1d:2c:01:cd:ac:86:
                    58:ae:d5:9f:4d:c0:8c:9e:91:61:63:bf:d5:88:6f:
                    68:4b:9d:39:58:c2:ed:cc:49:59:87:ef:1b:22:d8:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:05:C1:7C:BC:32:75:9B:4A:44:E3:CA:C0:99:06:25:92:A1:E8:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c3:09:a7:25:63:8a:c7:09:46:8b:2d:88:ce:e3:40:1d:e8:
         14:35:46:af:ee:9e:2a:2b:4f:97:10:0f:f0:9c:99:67:27:0a:
         b2:ec:99:36:9c:e9:4e:13:8f:6f:9a:bc:df:99:4e:6a:42:a0:
         f6:5c:03:82:78:c4:8b:fb:e2:91:48:47:64:7f:bf:de:c1:85:
         50:a2:7f:fb:ad:87:24:20:92:8d:c0:93:da:0e:84:2a:f6:24:
         50:58:b7:0f:f4:bd:ff:4d:81:83:d5:bb:9d:08:5d:09:48:58:
         6a:07:4a:24:5f:1e:b2:3e:e8:bc:ff:1f:1d:f7:69:b3:5c:7c:
         fc:91:1e:4a:30:e7:37:47:1d:81:40:ae:fd:2c:fc:dd:7f:24:
         b7:50:f9:1e:a0:91:69:b3:88:87:76:02:69:86:cb:e3:36:58:
         fd:30:8b:7f:ea:e4:8c:c6:e2:87:97:af:90:d3:9b:15:b7:59:
         51:69:46:81:e9:3f:e4:46:f0:5f:57:5f:55:33:e7:fb:59:b3:
         55:36:92:b4:02:d6:e8:17:94:9c:0b:0a:64:50:18:58:81:36:
         08:20:b5:7a:21:5f:17:48:74:7e:38:62:70:de:6c:e3:9a:e1:
         91:81:48:83:6a:7c:c5:f8:62:73:fd:8d:b9:96:f4:dc:0a:dc:
         77:0b:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:26:17 2026 by rpki-client