Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa
File:                     02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa (raw, json)
Hash identifier:          8wReydD09ZvtKLlO1bLcoN02hFNGwmkeAeJvOv6Owf4=
Subject key identifier:   57:78:A1:79:65:29:EF:E8:E1:CA:74:83:D5:CD:8E:16:C6:A8:3A:0F
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584D91C01C0E909582672DA0B840
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     398014
IP address blocks:        2604:7ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1c:0e:90:95:82:67:2d:a0:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=266d25d3-8252-4bee-92fd-6be309224da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:93:97:6c:a9:d6:fb:f3:fa:75:03:d7:4c:d2:
                    a5:c4:af:04:f4:83:3e:66:de:6c:82:3b:03:45:1d:
                    21:50:3a:64:cb:d3:fb:61:ff:6d:97:ed:b8:d7:4c:
                    14:ba:02:42:64:af:4b:66:16:73:2b:29:39:34:a5:
                    3a:cb:7b:f3:f0:10:db:16:5f:e8:a1:9f:41:cf:ba:
                    d9:a2:ec:ed:81:e9:18:2c:cd:c9:63:1a:54:8b:7f:
                    c4:56:c9:9b:31:4c:0d:56:30:ee:90:d0:53:bc:58:
                    87:15:85:6a:07:3b:60:44:e3:e7:42:20:62:b9:2b:
                    15:29:5d:9e:a4:14:6d:cd:a3:f7:06:fb:52:98:bf:
                    73:20:63:24:52:ba:f2:37:0c:9d:1c:b8:d9:85:27:
                    73:a0:81:15:65:d0:9c:71:86:23:7a:8f:0b:b3:a0:
                    6f:a8:8b:da:b4:a6:04:97:71:6f:bc:8a:8f:98:16:
                    d6:e0:c3:fe:ca:07:d9:e9:65:03:4e:08:a3:6a:dd:
                    d6:dc:57:37:9f:68:43:55:cf:e6:42:72:e7:c8:ba:
                    c0:ed:f3:b0:2f:dc:bd:cf:45:48:a5:1d:ca:06:f1:
                    a0:99:34:78:2f:af:dc:4c:49:82:36:b3:0f:db:58:
                    50:f5:9b:50:44:8c:d6:ba:26:76:59:19:48:99:01:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:A1:79:65:29:EF:E8:E1:CA:74:83:D5:CD:8E:16:C6:A8:3A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:11:97:12:9f:ae:48:3e:e3:72:fe:94:eb:37:5d:c4:7a:21:
         cc:10:91:68:bc:f8:f6:1f:69:1d:37:e6:a2:3b:11:02:e5:b4:
         10:f0:5e:a0:55:bf:a1:f5:f7:70:d4:fa:7a:e6:2c:14:13:7d:
         ef:6f:7a:55:43:c9:83:41:64:d3:ef:09:9f:16:84:67:f3:85:
         92:47:65:e2:97:7c:20:5f:d7:05:45:10:e3:38:ca:d8:c4:0c:
         df:7a:7a:49:2e:86:1c:14:67:2c:b0:9a:e0:e0:6b:70:95:a3:
         31:d6:62:5f:43:8e:70:6a:48:2d:ae:0d:aa:39:48:fd:28:4f:
         8a:a1:1f:c9:f0:81:be:1d:57:df:87:4b:38:ac:37:00:0a:a6:
         88:97:5b:6c:72:0c:19:1e:ab:ff:b9:d6:fd:a5:4c:5d:ff:c3:
         43:1e:79:55:f7:9a:b0:01:39:95:a4:d3:e9:68:ed:c5:fa:b9:
         00:4e:6b:66:c0:e3:a5:96:23:aa:7e:69:25:b3:7e:0f:77:c5:
         ed:10:53:fd:d9:f3:95:d4:f9:62:f2:10:da:d6:56:e2:c1:57:
         78:02:31:f1:f1:d0:55:50:4b:fd:a2:e9:6e:40:ef:dc:34:79:
         eb:b5:8b:d3:df:b7:f9:89:8a:fd:e3:ac:80:11:cc:8e:8c:67:
         72:4a:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:39 2026 by rpki-client