Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/88e987a8-27f1-33cc-9855-6ff4e5893806.roa
File:                     88e987a8-27f1-33cc-9855-6ff4e5893806.roa (raw, json)
Hash identifier:          7aVRhZFEj0HgYduQ2VidQsfI67MPaP57HJ2CgYKoj8I=
Subject key identifier:   C2:CC:40:94:9C:8A:89:B5:7B:E9:A8:E2:76:B6:18:2D:F8:5F:7A:6F
Certificate issuer:       /CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8
Certificate serial:       010D0C9F4328584DADAAEE989D40C93245644680
Authority key identifier: BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/88e987a8-27f1-33cc-9855-6ff4e5893806.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     400619
IP address blocks:        2602:ff9e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ee:98:9d:40:c9:32:45:64:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=4c500af1-3384-4ed9-ab62-1ffc76b082a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:79:0a:76:34:38:fd:7c:99:fa:91:ba:f6:
                    9b:bc:ad:24:f2:c7:45:db:57:f4:6e:03:f3:da:50:
                    2b:9e:70:67:ca:2c:d4:f0:20:d1:c2:86:73:7c:ce:
                    e6:2a:55:a9:af:9e:18:6c:11:f9:47:92:0b:76:e6:
                    81:a3:c4:50:4c:23:76:0b:6d:66:fa:1e:ba:5b:21:
                    71:75:fb:c5:67:0c:5c:1f:2b:d4:d8:7c:9a:a0:a2:
                    7d:1b:fe:76:fb:2c:41:c4:01:22:b7:e5:65:5d:7e:
                    cf:59:55:09:d9:7c:63:4f:f6:83:ab:99:c5:89:79:
                    a2:11:17:ed:0f:f4:d7:42:75:98:ce:45:27:01:15:
                    1b:51:2b:e0:79:eb:0b:d2:29:51:1a:0a:11:bb:e4:
                    97:c7:b2:75:80:c2:06:a4:2b:c3:36:1e:e0:05:32:
                    a3:35:6c:37:b8:d1:29:a3:51:c2:0e:b2:79:de:f4:
                    ff:45:48:c2:a3:1f:cc:a2:ce:3a:28:d0:6b:c2:05:
                    61:af:48:b3:2a:ca:33:d2:b3:da:a4:db:15:4c:15:
                    76:65:d7:06:86:2a:9a:b6:ec:2c:af:4c:dd:d6:0c:
                    a6:73:0f:9f:a0:7d:95:c9:44:98:ec:ae:82:6a:3c:
                    ea:8f:fa:ff:a0:04:83:46:a0:15:7f:35:b9:f0:14:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:40:94:9C:8A:89:B5:7B:E9:A8:E2:76:B6:18:2D:F8:5F:7A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/88e987a8-27f1-33cc-9855-6ff4e5893806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff9e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:f1:82:5c:25:37:0e:86:f4:75:8b:a0:dd:1b:71:76:dd:
         d4:41:df:a4:e4:45:e5:41:52:f0:78:ec:b1:17:e9:ed:ab:24:
         a7:42:d8:4d:15:25:99:62:9a:11:73:d7:6f:93:b1:18:fc:6d:
         b9:89:ed:43:dd:59:c0:e1:0c:54:a4:52:d6:03:b6:03:3e:b8:
         af:74:e7:4d:7b:69:34:2d:22:e9:b6:2f:29:00:71:26:6e:4f:
         7f:ee:a1:5a:b5:75:fb:e0:af:10:67:80:1b:7e:a1:0d:2b:ba:
         55:65:86:92:c6:e0:fb:ef:c1:62:22:7b:70:47:a0:f8:cd:a7:
         29:89:80:f7:51:99:d3:80:fa:f2:c2:8b:30:af:ec:89:ab:3f:
         36:89:fd:4d:0b:0f:ec:71:d3:dc:f0:eb:3b:3b:12:34:d1:85:
         0c:dc:77:0e:e8:7d:01:12:95:70:96:b8:a3:84:ff:af:2d:d6:
         7d:94:94:c1:ea:d0:c8:29:b9:f4:4b:4c:9d:7c:eb:e6:c0:a2:
         da:da:63:c1:3a:00:a3:62:7c:e0:26:7f:df:07:fa:0d:88:b1:
         ef:8b:12:54:70:a8:b2:5a:58:34:81:57:6b:ad:2b:2d:49:64:
         97:c1:9b:c0:85:f6:36:a4:fa:9c:b9:95:e5:3b:ce:f9:b4:d3:
         fc:c2:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:07 2026 by rpki-client