Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa
File:                     55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa (raw, json)
Hash identifier:          piXwOZiZyKkJYbRynwLrvfTlBL5qd0lxrDdKeoai82g=
Subject key identifier:   12:E7:D4:E0:F3:8A:72:BE:DA:2B:D2:E4:22:72:36:33:FC:E8:D8:2F
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E4AEF48DBD17DE340FD840E00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     25855
IP address blocks:        2602:f891::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:48:db:d1:7d:e3:40:fd:84:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=75a43b7d-6046-4ca6-8643-01e7532de50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:cc:2b:f1:05:5a:e5:a4:f0:59:e0:96:98:
                    cc:c1:b7:98:a6:b6:22:dd:68:42:2b:59:c5:71:2d:
                    a6:54:8b:00:f9:02:88:4d:8f:35:e9:0e:06:e8:be:
                    f1:a1:42:0c:7b:1c:46:55:38:67:2d:4f:04:a2:ca:
                    23:47:03:04:98:cd:a3:6f:60:2d:4f:b2:ef:87:d6:
                    f8:21:72:eb:88:51:4a:c4:ba:66:00:4b:7d:83:7b:
                    b2:c9:ec:97:75:2e:0f:cb:92:87:26:83:01:94:4e:
                    f2:03:62:7b:90:0a:1a:58:af:53:00:61:f9:b5:74:
                    e1:e0:35:68:60:9e:27:c4:3f:d6:f4:83:bb:92:0d:
                    ae:0e:14:11:1f:b6:d7:0f:b7:77:dd:31:05:be:c2:
                    b2:e2:21:8d:7b:5b:01:c3:48:c7:55:0e:1a:3f:0f:
                    d6:94:3e:69:b1:13:5f:1e:6c:48:a0:94:bd:d1:88:
                    1b:40:81:ea:c2:68:8b:3c:39:a0:32:60:84:f3:3d:
                    6b:45:4f:ea:6e:43:4e:c8:61:c2:14:70:9a:a4:d0:
                    96:65:80:63:f5:ef:c7:6f:0b:77:5b:2c:d1:12:8b:
                    76:2d:39:7c:60:3b:71:8d:9e:4b:a1:c8:44:f7:d4:
                    1e:f3:a4:ec:a9:1a:18:71:7c:49:32:b8:0e:7b:31:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E7:D4:E0:F3:8A:72:BE:DA:2B:D2:E4:22:72:36:33:FC:E8:D8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f891::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:7d:dd:14:3d:a4:72:5e:93:f5:ee:5c:3f:a2:3f:c5:d1:
         89:da:2b:d3:db:b0:57:f7:7f:38:0a:bd:63:96:f5:5a:72:1b:
         d9:04:80:f1:32:e6:d1:4e:bd:53:b1:c2:35:31:98:a1:99:9c:
         f6:41:e2:cd:0c:76:63:1b:65:f1:2b:6e:8e:f3:ab:69:95:31:
         d6:da:05:41:19:1f:dc:29:63:83:e6:de:57:6d:3f:9e:e2:09:
         35:e3:67:c0:2e:c9:64:fa:41:87:1b:fd:c0:19:b3:12:f7:71:
         26:ca:06:31:f6:f9:9a:60:e3:af:44:df:96:e0:a7:a3:e1:f5:
         fa:ac:04:46:10:d0:6a:49:45:10:27:1a:43:ee:b8:4f:7f:ca:
         e1:15:c3:f6:09:77:5a:59:ad:90:60:6b:e6:78:30:ca:39:cf:
         b6:a5:ee:f5:0d:f1:2f:ab:81:4c:ab:f7:38:e4:f9:45:7e:19:
         08:29:10:ec:9b:6a:25:9b:15:da:70:97:26:4c:c9:f5:7d:38:
         f9:a5:05:09:7e:2d:5c:c6:ad:fc:0c:42:34:2d:db:51:4a:ef:
         d6:47:fb:8f:7d:73:20:65:83:a6:2c:b3:b2:94:d8:8a:2e:2b:
         e1:12:a2:c4:58:fb:eb:dc:ab:e7:be:3d:6f:4a:6d:39:12:55:
         43:74:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:03 2026 by rpki-client