Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa
File:                     4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa (raw, json)
Hash identifier:          +AY8wfD9BlCTZTyCmKSIEx2q36inXq2SzHxnIfXku2I=
Subject key identifier:   D5:35:F4:0F:D9:21:1C:C8:04:92:41:63:06:8E:06:D4:CD:E6:39:DF
Certificate issuer:       /CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
Certificate serial:       010D0C9F4328584D9FB55CBE7B816FF4441F4D60
Authority key identifier: 91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6304
IP address blocks:        2602:f714::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:5c:be:7b:81:6f:f4:44:1f:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=e942b844-87ac-4aa3-9093-3657844ef707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:72:53:7f:04:e0:37:80:aa:06:a6:9a:f5:af:
                    1c:12:fa:30:5f:c6:d2:27:64:36:67:55:e4:5c:0a:
                    97:51:fe:91:8e:df:60:49:6a:b2:a4:b6:e5:74:53:
                    5b:82:03:fc:e7:e6:0d:1d:62:6b:73:6b:5d:47:41:
                    97:2f:08:98:09:52:74:69:00:a9:5b:94:8d:23:35:
                    d8:8e:3b:08:2a:47:51:7c:e5:4e:60:94:6d:00:5b:
                    a3:be:b9:08:8f:c9:ce:ac:02:2b:ca:91:aa:a9:64:
                    ea:6f:e7:fc:6d:f3:f0:7c:e3:56:58:ca:86:b2:e0:
                    06:f5:ed:8e:06:1d:f3:0f:37:47:d4:42:13:ce:8f:
                    e7:f1:5b:59:42:49:86:3f:95:6b:38:e0:ef:1d:82:
                    20:2a:28:bd:2e:46:05:7e:41:8c:9e:b7:cf:13:f9:
                    7e:7f:ad:21:c2:8e:8e:96:ac:a0:57:59:1e:da:2a:
                    ac:60:3e:b2:8f:55:bb:fe:82:f0:01:32:58:06:bf:
                    11:d9:51:eb:a8:a5:3c:a6:b1:50:50:79:fa:d3:31:
                    5a:e1:08:61:57:ab:21:bb:d5:b3:65:85:40:13:da:
                    0a:9b:0e:1e:d0:d7:76:92:2a:fb:71:28:7a:11:f8:
                    5b:36:25:6f:e4:cc:bf:21:9e:51:50:3d:41:0e:c6:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:F4:0F:D9:21:1C:C8:04:92:41:63:06:8E:06:D4:CD:E6:39:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl

            X509v3 Authority Key Identifier:
                keyid:91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f714::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:38:c1:06:fc:fa:2e:d0:46:d2:49:f4:1c:b8:5b:31:f3:
         4b:5e:c9:f5:ed:ea:24:e0:66:c7:56:64:67:92:8d:9d:be:34:
         fe:eb:6a:93:1a:f5:b2:a5:4f:b3:0a:e0:d4:3f:de:69:18:3f:
         4b:d6:48:93:13:e7:fd:a5:1b:b0:4b:49:08:01:32:78:1f:16:
         7e:6f:fb:8f:38:4c:1f:38:5c:46:7d:70:0e:e7:2e:23:73:53:
         8f:ad:e6:89:05:a7:58:22:de:a9:67:ae:22:2f:6a:93:f0:80:
         9e:a7:6d:cf:44:11:92:be:57:e9:b0:ec:ca:10:be:53:69:ef:
         c6:29:67:e4:e1:91:bf:ad:45:ec:0c:87:47:ca:5b:6f:29:94:
         6f:ff:99:a9:d0:dd:d7:20:24:58:a9:c0:43:c0:9e:7f:36:86:
         ac:8c:3e:3e:c0:10:e8:e5:e3:57:79:e4:ff:7f:c1:3e:10:d2:
         e1:16:6f:7b:fe:cf:5d:9c:f3:16:cc:e9:48:36:17:16:d3:8d:
         27:e0:01:fe:bb:df:cf:f8:4c:c1:0a:28:1c:b4:e4:3f:4c:bb:
         43:77:5e:b3:17:4c:ae:41:fd:b3:bb:8e:ba:68:fb:a8:bd:d0:
         4b:0b:eb:83:1e:5b:b9:cc:1f:af:6f:51:12:f3:5b:2c:22:2e:
         36:cf:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:42 2026 by rpki-client