Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/7054621e-1dac-3c1f-8da2-e05571e13452.roa
File:                     7054621e-1dac-3c1f-8da2-e05571e13452.roa (raw, json)
Hash identifier:          M530afiaqGGk743ddoyqguUXIZGAJT+9KMqNARgEJPM=
Subject key identifier:   F5:EB:BC:4B:DF:7C:70:89:90:59:0F:11:C3:6F:EC:47:D6:7C:FF:B7
Certificate issuer:       /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
Certificate serial:       010D0C9F4328584DB3402A4D5D85305A8C5C4100
Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/7054621e-1dac-3c1f-8da2-e05571e13452.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2602:f702:222::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:2a:4d:5d:85:30:5a:8c:5c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=21cbbe5d-9d72-4252-8cfc-c07809040006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c4:d7:54:20:7a:9a:e1:42:ef:71:b5:7d:ba:
                    aa:61:56:43:9d:81:44:04:31:da:f6:f7:c1:7d:26:
                    3e:95:9f:e4:da:3a:58:28:6b:13:03:ac:38:17:0e:
                    ea:c7:3e:d6:8d:8e:c5:6e:39:b2:32:36:60:4c:6e:
                    89:55:24:97:b9:b8:4f:2b:28:06:1b:49:2f:d9:ab:
                    71:66:29:ea:0a:a9:51:b6:68:b2:73:63:c0:da:b5:
                    11:40:03:5c:3f:18:a6:f4:73:da:4f:ac:e2:a6:09:
                    ee:3f:5f:0f:7b:82:54:ac:13:93:b2:e6:be:a8:00:
                    c3:3b:86:e2:eb:66:6c:02:91:62:0b:9e:a2:ce:74:
                    2d:8a:fe:8f:8f:b0:9f:48:5e:80:9c:ed:5b:05:9f:
                    8e:03:a4:58:14:b3:9f:ad:3f:d9:26:fe:6f:a0:36:
                    52:e3:e9:8b:4d:5a:ef:c1:ac:15:7c:56:20:e4:56:
                    56:b1:54:08:63:22:f1:c6:de:a9:6c:1d:79:af:1e:
                    e1:e4:a4:eb:df:6a:3f:ee:b1:2f:8a:6a:c9:e2:58:
                    68:74:73:e2:84:05:ba:2d:96:51:69:1a:c6:ee:85:
                    c0:83:5a:60:e7:d7:8f:50:34:1f:ea:80:9b:18:58:
                    ae:ae:bb:f4:f9:3e:8d:ae:9b:c5:7a:8f:66:54:62:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:BC:4B:DF:7C:70:89:90:59:0F:11:C3:6F:EC:47:D6:7C:FF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/7054621e-1dac-3c1f-8da2-e05571e13452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl

            X509v3 Authority Key Identifier:
                keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f702:222::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f0:73:7c:30:07:f2:54:b6:e8:e5:10:2e:a1:4a:d1:6e:ca:
         c4:62:e3:0c:07:22:27:88:66:05:0a:56:bd:63:97:7a:37:0f:
         73:62:37:77:8b:3f:27:62:fa:85:ee:cf:27:ab:8b:cb:98:d9:
         64:f9:1e:ca:be:40:93:e3:70:7d:0e:aa:e4:59:41:dd:27:7f:
         9b:e3:03:ae:4d:c7:d7:3b:a2:ca:0d:d4:b8:9b:05:f8:15:80:
         05:e3:cb:26:cd:ea:88:4b:5b:2d:0b:30:50:e3:f6:88:b9:04:
         23:59:ed:8a:5b:2b:dc:b1:9c:75:98:20:79:b6:13:54:2d:5e:
         b2:5b:fe:6b:58:f2:88:4a:3c:a9:df:37:42:76:a4:cc:1c:2a:
         13:73:5f:2a:0f:eb:df:59:c4:59:68:e5:a8:49:13:81:a8:19:
         98:3c:c3:9c:c3:71:be:4c:98:59:e2:31:94:13:50:24:b0:54:
         b6:ed:b9:84:78:be:49:af:ae:f4:37:e7:2e:d6:c4:6d:a1:f7:
         25:b8:48:95:eb:ce:48:b6:f9:16:4a:ab:1d:2f:62:fa:10:e2:
         b6:13:50:4f:18:ea:87:4b:50:53:3b:6f:e8:b8:2d:e0:3d:ec:
         a4:c5:04:4a:96:72:d4:b8:89:45:82:a8:bf:fd:ac:80:6c:65:
         36:19:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:26 2026 by rpki-client