Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa
File:                     39d37bab-e9cc-3fec-86ef-a7daf491525a.roa (raw, json)
Hash identifier:          503aLEBYYERyeu/xqNed45z/kQPR/l25gN0NZrska5g=
Subject key identifier:   87:97:FB:28:E7:0A:4F:C9:F9:FE:BF:40:B6:6D:74:C3:72:41:CD:42
Certificate issuer:       /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
Certificate serial:       010D0C9F4328584DCAFB055406DB3AAB62D5A640
Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:f6fc::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:05:54:06:db:3a:ab:62:d5:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=a3292cc5-3b1c-4be6-875e-d0b071bfc355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:97:9f:0b:39:c7:25:88:14:f9:9c:ff:26:
                    4b:6d:7c:98:00:e4:27:51:90:c7:03:61:c1:d2:0b:
                    b7:a0:a8:4c:df:78:5e:9a:b6:f8:86:46:32:31:df:
                    e4:bc:00:ad:71:1f:e0:ec:2c:64:47:8e:21:b7:39:
                    46:61:ce:b5:cd:a1:0d:f4:14:24:14:29:6a:6f:17:
                    8e:e5:60:eb:51:77:41:67:4d:77:a7:47:54:ab:1b:
                    35:e8:58:8e:50:6d:2b:14:fb:01:aa:17:55:72:0d:
                    bb:a0:a9:bb:e2:44:27:02:c6:39:1f:cc:15:59:29:
                    68:95:ed:5d:6a:fc:a5:8f:90:b7:cf:f8:7d:a4:62:
                    d1:5b:e1:86:bc:84:fe:b6:e6:08:f6:ed:01:5b:dd:
                    48:85:b9:01:b3:81:4d:70:1b:4b:fb:8b:08:a9:91:
                    24:3a:e3:1d:0a:7d:ee:27:ba:4c:b9:3d:28:2a:7b:
                    e2:56:a6:af:db:85:e6:4b:02:c4:1b:d1:d8:9f:72:
                    c4:9f:e8:ac:93:1d:40:19:d8:25:ec:60:a8:6a:ff:
                    60:38:a9:4e:a0:73:a1:7b:e8:5a:ea:14:66:f9:5a:
                    e1:cc:b3:ec:98:37:87:86:0f:3f:41:48:95:d7:5c:
                    a8:2d:cf:f5:d0:96:0d:f6:44:b2:90:98:d6:69:05:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:97:FB:28:E7:0A:4F:C9:F9:FE:BF:40:B6:6D:74:C3:72:41:CD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl

            X509v3 Authority Key Identifier:
                keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6fc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:07:8c:44:39:4f:12:55:78:2a:be:cb:72:4d:dd:f0:ae:cc:
         e3:58:88:c6:21:62:f7:86:c3:e5:fb:b3:6c:63:46:7b:b4:09:
         6f:8c:81:8e:45:d9:c0:ba:b5:94:e0:1e:c2:09:a9:f6:a2:5f:
         a2:e7:6f:66:2c:72:66:19:b0:58:30:7a:46:b3:3d:84:ef:4b:
         93:a4:3e:96:0f:95:2a:3b:0a:56:70:ff:b3:37:98:53:a3:25:
         7b:e2:16:c1:4f:95:b2:a2:26:42:33:48:db:44:78:4f:47:c2:
         58:b0:d5:2f:11:86:6c:c9:8b:b7:dc:e2:33:74:a0:d5:4b:69:
         b5:f2:52:fc:bd:55:cc:f2:d1:21:67:2f:7c:8e:dd:69:d6:bf:
         c3:d1:49:c7:66:79:5c:e7:78:4a:d1:33:48:2c:de:55:e7:4f:
         d4:89:be:f5:bc:1c:a7:30:ab:5a:95:c8:94:2e:1f:59:02:f1:
         60:76:b5:a6:0a:70:1c:ad:90:41:e4:89:89:cb:38:2f:60:c9:
         71:74:33:5c:cb:5a:06:ce:41:53:09:62:b0:4c:a0:5c:de:fb:
         c3:65:47:d1:13:f3:8a:09:28:4e:a5:e9:62:30:65:3e:54:98:
         5c:32:ec:e1:31:84:ff:56:61:52:83:ad:43:67:f0:0a:da:10:
         42:0e:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:20 2026 by rpki-client