Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa
File:                     0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa (raw, json)
Hash identifier:          GxZ6m5+gBI2jMGVCUwmqzJ5720fY6Q4BvRyfnVfNwVc=
Subject key identifier:   31:F5:04:48:CB:07:BA:6A:9B:65:1A:EB:DF:92:D0:7E:12:B5:55:9A
Certificate issuer:       /CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
Certificate serial:       010D0C9F4328584DB4A5AF2976FE47893813CA00
Authority key identifier: 99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     25693
IP address blocks:        2602:f6b0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:af:29:76:fe:47:89:38:13:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=5f7dfec5-ab83-4ad2-8642-d91784bf9b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:07:3c:ba:44:66:14:b2:fd:0f:d8:08:83:
                    ab:1f:94:2d:28:82:ef:37:05:28:d1:44:f0:a4:bb:
                    fa:c9:89:d3:39:ee:cd:ff:4c:40:fd:fc:0c:4b:98:
                    17:bb:df:f9:12:7b:69:9b:3d:f6:b7:77:58:b3:2e:
                    d6:31:2c:b6:c6:b0:d7:95:0c:95:f8:4d:58:db:b3:
                    a3:2f:ad:e9:f6:7a:e3:22:48:1f:a8:b2:32:ef:0f:
                    60:4b:2c:af:81:0e:1c:2b:7a:d9:4c:e1:d2:a2:5d:
                    08:20:db:15:c0:49:8c:61:2b:60:5c:72:fe:cd:ef:
                    20:8b:93:4b:01:20:3e:78:7e:e8:fb:5e:8e:16:a0:
                    66:5c:06:5b:63:39:3d:c9:cd:82:1f:2b:9d:61:da:
                    be:9c:e9:a3:f8:5a:a7:10:b4:12:5b:a3:26:15:4f:
                    3d:69:23:c7:82:4d:7f:9f:df:cc:bc:87:7e:53:96:
                    35:99:67:9e:a8:a8:42:69:2b:8b:64:a3:02:52:61:
                    de:f8:d0:7b:6f:de:a1:a4:d8:d5:1c:56:85:57:c8:
                    a4:f0:d2:6f:14:22:a8:89:d4:09:16:21:78:38:dd:
                    8e:d3:7f:4d:3f:17:cd:7e:9f:1b:21:94:79:70:da:
                    f1:fb:4f:c4:25:bb:61:94:7c:b4:c8:9e:c2:70:d6:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F5:04:48:CB:07:BA:6A:9B:65:1A:EB:DF:92:D0:7E:12:B5:55:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl

            X509v3 Authority Key Identifier:
                keyid:99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:11:65:b6:94:e8:95:24:17:c4:a9:97:c6:0a:ac:28:d2:6b:
         0e:e5:d6:20:99:f1:20:e8:9c:59:12:a6:1b:01:6b:9f:fe:25:
         d0:2e:fc:5b:76:9b:f8:9a:32:4e:b2:14:eb:74:36:69:4f:9b:
         c4:49:fc:83:5a:16:a7:39:b6:b1:fb:64:4b:e8:73:83:75:4a:
         1e:4c:ea:60:5d:81:ef:93:a3:22:fd:30:12:ba:44:85:85:ef:
         df:6d:65:bc:ae:9c:7f:01:2d:1c:1b:6e:23:7d:76:37:e5:26:
         13:12:6b:89:80:55:ad:97:31:02:78:50:c4:1a:94:75:8b:bc:
         99:c9:50:d3:9f:af:c1:cd:74:96:93:b1:05:15:21:5e:71:2e:
         6f:fe:3a:c5:d6:92:41:ae:b3:1f:f7:86:3e:4b:e1:ea:5a:a2:
         ef:36:39:69:76:42:e8:72:67:c0:58:ca:0a:49:8a:6b:7d:30:
         4b:32:b6:ab:90:5e:ec:f8:95:81:ce:27:de:2a:96:8c:7a:b9:
         6b:03:d3:c1:7c:bb:2b:2a:a7:b5:58:15:c3:c3:82:86:48:9b:
         18:b2:6d:36:a3:c2:f8:e9:1b:7c:60:8d:11:51:20:c7:e0:40:
         61:27:6a:fd:73:2c:42:b0:7c:08:d0:6b:d5:40:05:54:d6:d6:
         c6:e3:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:03 2026 by rpki-client