Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa
File:                     f393c755-1aa5-3164-81e7-6f8c412d59a2.roa (raw, json)
Hash identifier:          FD1LMMyhcUDxUW5szH9oDsX9iH3jL7UnwF4+VHl/35o=
Subject key identifier:   8B:C5:94:E6:BE:28:54:BD:63:9F:03:3A:F9:F6:B4:4B:5C:83:9B:FE
Certificate issuer:       /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
Certificate serial:       010D0C9F4328584DCFF6241C8CF63A3F6672CCA0
Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa
Signing time:             Tue 12 May 2026 19:49:51 +0000
ROA not before:           Tue 12 May 2026 19:49:51 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     397376
IP address blocks:        2602:fdff::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:f6:24:1c:8c:f6:3a:3f:66:72:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
        Validity
            Not Before: May 12 19:49:51 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=99bd83f9-0b9f-4ced-a1cf-084b09f08069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:f7:96:81:b0:a5:3f:d4:c0:bb:de:9a:4c:
                    99:65:73:61:bf:21:1d:70:a7:63:0a:de:dd:2a:a9:
                    74:34:59:b5:6c:a6:48:99:d4:46:18:0b:a4:02:dd:
                    68:5e:b1:b4:df:8c:07:5d:96:d3:b4:2e:ca:21:58:
                    2e:da:0a:92:f8:ca:3f:9c:5a:ca:f2:bf:4c:3f:f3:
                    fb:9d:ee:be:a6:42:26:b5:92:59:34:aa:55:28:dc:
                    b8:77:83:ae:6d:c2:1d:97:2f:e6:d4:3b:e3:f7:a3:
                    84:d6:91:b8:63:73:f4:ec:34:f4:9e:de:e2:f4:31:
                    f7:e9:c4:b0:4f:7d:08:48:79:82:0b:0c:30:7f:bf:
                    27:94:a6:72:90:83:f6:28:71:6f:1a:84:e4:f9:bc:
                    92:c4:8f:ed:a2:34:c1:94:70:aa:c4:2f:55:22:76:
                    13:14:c3:66:27:f8:0f:5d:f3:4d:b4:34:fe:f4:e1:
                    df:cb:be:c1:c0:b4:17:f6:53:73:e1:1b:80:61:3a:
                    73:7d:0a:74:60:48:f2:ab:c0:a8:52:1a:69:cd:91:
                    04:99:e1:bf:03:34:e8:2f:8a:23:03:bc:2e:14:a9:
                    7d:5a:51:c9:67:23:2a:25:f2:20:1b:46:5f:4f:23:
                    97:ec:7e:4c:16:ad:d5:79:7d:50:6b:0d:fa:d3:8c:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C5:94:E6:BE:28:54:BD:63:9F:03:3A:F9:F6:B4:4B:5C:83:9B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdff::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:17:0d:88:56:09:64:eb:24:4c:bb:2c:4e:19:32:8d:76:
         b5:b3:38:5b:b0:c9:da:2c:9c:d0:e6:9c:ec:a2:e9:7e:b8:a7:
         1e:06:79:91:cc:a1:86:f7:a7:ae:b3:36:0f:31:52:99:f8:bd:
         e7:93:29:41:05:4f:9e:f4:94:e7:dc:13:16:aa:67:f1:3b:26:
         f5:35:f4:8b:22:ba:08:94:6d:17:ec:3e:1d:c3:f9:81:73:4c:
         a4:f0:ac:61:02:f1:ca:cb:d5:53:ff:aa:f5:84:ab:02:45:93:
         54:fd:ac:84:88:65:f7:fc:a0:f3:25:7e:b1:2b:e0:7e:d5:2f:
         15:5e:26:1b:b9:04:71:16:44:2b:19:53:ec:a6:7e:36:3f:7a:
         a2:19:e3:0a:7f:1f:ff:0b:46:08:a9:6b:9e:23:0b:58:41:90:
         ec:43:21:fb:5b:cb:2c:63:65:ab:5f:1b:43:8a:24:08:6c:75:
         8a:63:09:13:08:4d:58:96:cd:f1:28:84:67:7d:03:fd:6e:30:
         e8:96:73:c4:69:48:d0:cb:af:38:ca:33:a4:0f:52:f5:06:32:
         bc:49:f4:91:8f:44:fa:4b:2f:3e:0d:79:b1:8f:73:16:06:33:
         bf:ca:01:8f:27:38:d7:d3:4d:f5:a8:5b:63:ca:52:e2:64:9e:
         90:12:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:44 2026 by rpki-client