Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/ac49952e-2159-3a31-b598-2ec3221841e2.roa
File:                     ac49952e-2159-3a31-b598-2ec3221841e2.roa (raw, json)
Hash identifier:          VluU7XW51dFYgBgeheAgYQL5arxeOamCC0DtJb7W+Vw=
Subject key identifier:   A1:4F:E6:B1:C0:9B:06:D2:4A:91:68:24:84:9D:33:BC:B2:ED:A7:65
Certificate issuer:       /CN=7d8919a2-53bd-40db-a4f8-099f622423b9
Certificate serial:       010D0C9F4328584D91C01D54EACD147F7C98CA20
Authority key identifier: 59:3A:5A:86:CA:D3:89:08:5C:7A:97:45:99:1C:42:B0:80:10:DB:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/ac49952e-2159-3a31-b598-2ec3221841e2.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     13335
IP address blocks:        2602:f58a::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/7d8919a2-53bd-40db-a4f8-099f622423b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/7d8919a2-53bd-40db-a4f8-099f622423b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1d:54:ea:cd:14:7f:7c:98:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8919a2-53bd-40db-a4f8-099f622423b9
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=ecce4e0b-ec63-4f27-95a2-1feb63fe8475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c2:64:b7:3f:97:2e:6b:8e:ea:6f:ac:f5:14:
                    39:4c:f5:26:54:99:58:d6:f8:26:e3:6e:30:84:7d:
                    6c:82:5d:71:a1:d3:87:f5:2d:9d:b9:cb:98:30:06:
                    c3:2a:bf:f5:41:dc:64:ce:59:7f:74:76:03:79:94:
                    37:70:cd:db:7e:4a:07:37:1f:8c:87:43:41:66:2a:
                    bc:77:6e:0b:53:cd:41:4c:62:a1:3f:6a:97:13:9e:
                    e6:44:3d:59:8d:6c:35:db:ee:62:47:a1:a0:2c:27:
                    ed:63:5e:28:da:95:c0:8b:29:cd:b2:f6:4e:91:7c:
                    43:76:0d:11:28:fa:3b:e7:68:f7:b3:d6:be:ea:16:
                    44:48:a0:37:b3:5b:ac:03:8e:d9:72:46:15:c3:e9:
                    4f:e9:5e:ae:73:d8:28:93:ac:de:e3:b7:f0:01:20:
                    c2:99:6e:4f:57:4a:51:05:f7:46:b3:cd:74:7d:7e:
                    49:90:7c:04:54:1d:d4:4a:04:c1:d8:3a:f9:ee:c9:
                    e4:f0:81:23:54:62:53:86:17:2b:96:a6:5c:62:8a:
                    c6:54:2c:69:6e:f3:ab:46:eb:93:8c:cd:09:72:57:
                    32:71:c7:c4:38:3c:62:c2:49:78:7c:f1:c7:cb:37:
                    f4:6b:e4:98:ae:d8:7d:dc:12:f1:07:e0:02:91:ff:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4F:E6:B1:C0:9B:06:D2:4A:91:68:24:84:9D:33:BC:B2:ED:A7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/ac49952e-2159-3a31-b598-2ec3221841e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9/7d8919a2-53bd-40db-a4f8-099f622423b9.crl

            X509v3 Authority Key Identifier:
                keyid:59:3A:5A:86:CA:D3:89:08:5C:7A:97:45:99:1C:42:B0:80:10:DB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d8919a2-53bd-40db-a4f8-099f622423b9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f58a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:14:61:cd:2b:7d:48:4f:66:ae:b1:b3:2b:d1:8d:49:6e:bc:
         38:a4:0b:64:27:f5:8c:ef:ba:41:b5:8d:df:4a:3d:92:a1:cc:
         c8:82:a9:43:23:69:e4:66:71:c8:81:37:f7:ab:64:64:fb:9f:
         c2:b7:0b:2f:45:e3:1a:37:5e:59:3b:02:2b:29:1e:3c:a9:c9:
         05:45:79:04:8d:51:be:00:6e:ac:8c:3b:59:a2:4e:36:89:a3:
         d6:c3:21:4c:e2:fa:f2:7c:d0:7e:d0:b2:42:ae:ef:5b:41:2d:
         30:19:f5:6a:b2:89:9d:75:13:54:ad:ab:80:81:42:f3:55:30:
         f4:b3:a8:9e:b1:22:3b:a7:49:e9:2d:03:0a:a0:01:94:f0:42:
         f4:51:1b:51:8f:29:f4:51:fc:33:6d:d5:79:85:0b:32:7a:61:
         a5:6e:53:af:12:5f:5e:29:5a:aa:c1:d9:79:59:54:1b:b6:79:
         10:65:68:2a:e2:c1:c7:57:20:9f:d1:6c:a2:ff:b9:1f:25:63:
         78:71:ef:fb:f9:59:6b:8d:00:dc:3e:e5:32:fe:ab:59:e9:08:
         23:21:66:07:78:37:e3:e5:fb:b6:22:29:40:c9:15:53:16:58:
         13:91:28:89:1f:e8:cb:28:63:bc:c0:d6:6e:14:26:af:a4:dc:
         10:ae:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:17 2026 by rpki-client