Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/3adeb91d-c162-394d-a290-6f1cbd98ad1b.roa
File:                     3adeb91d-c162-394d-a290-6f1cbd98ad1b.roa (raw, json)
Hash identifier:          rVS0WRkAaY123Z71GrcoNLSn652DAk6TBeHGaPdqr0U=
Subject key identifier:   63:69:E1:41:5E:4E:B0:26:AD:F4:DC:AD:24:96:E0:B3:BD:AB:47:5B
Certificate issuer:       /CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac
Certificate serial:       010D0C9F4328584D9216DB5830E591DBD0737A80
Authority key identifier: F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/3adeb91d-c162-394d-a290-6f1cbd98ad1b.roa
Signing time:             Mon 20 Apr 2026 15:55:39 +0000
ROA not before:           Mon 20 Apr 2026 15:55:39 +0000
ROA not after:            Sun 19 Jul 2026 15:55:39 +0000
asID:                     402410
IP address blocks:        2602:f3f0:ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:16:db:58:30:e5:91:db:d0:73:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac
        Validity
            Not Before: Apr 20 15:55:39 2026 GMT
            Not After : Jul 19 15:55:39 2026 GMT
        Subject: CN=f576d276-52d2-41ad-946c-8d3d15837fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:aa:02:14:fd:8e:7e:0a:9f:14:cb:c1:89:7f:
                    b3:a2:35:b6:8b:f0:90:51:37:e3:b2:6e:f0:dc:8a:
                    cd:bb:f5:95:1d:41:57:fb:3e:d7:8f:ed:6e:5f:55:
                    c0:f3:6b:64:ac:89:c4:19:44:2f:61:b8:3d:c7:9e:
                    85:0f:bf:2b:25:da:7c:b4:8f:86:54:68:2c:6f:47:
                    e9:50:8b:60:6e:f8:03:e6:9f:f7:2d:71:e0:e0:3b:
                    24:21:86:95:0b:84:d5:fd:9e:bc:f8:28:6e:dc:cc:
                    16:03:6c:fd:34:72:da:91:b5:36:87:e0:3b:fe:22:
                    67:1d:b8:f9:e9:de:62:79:43:b0:60:78:b7:55:bc:
                    65:6f:09:23:d4:6a:07:ee:d0:d2:cc:d2:5b:cb:f4:
                    49:32:5c:06:92:78:4f:e3:90:50:62:22:64:45:a1:
                    47:61:dd:03:79:de:11:4e:22:b3:ed:35:74:d5:7d:
                    0f:13:9d:5c:72:c8:a5:ca:ed:a1:ab:66:cf:5b:88:
                    59:ba:37:0a:86:d3:28:01:1f:79:91:1a:16:b0:ad:
                    63:a7:64:ef:e7:eb:a4:e8:33:8e:70:51:af:47:6e:
                    75:68:6f:bd:10:3b:94:9b:82:36:ec:b9:c0:e9:84:
                    3f:57:a8:11:ac:cf:0b:da:2a:cc:ff:9d:38:e6:d9:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:E1:41:5E:4E:B0:26:AD:F4:DC:AD:24:96:E0:B3:BD:AB:47:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/3adeb91d-c162-394d-a290-6f1cbd98ad1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl

            X509v3 Authority Key Identifier:
                keyid:F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3f0:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1b:28:72:fd:15:a5:1d:27:7b:ce:74:79:c9:1f:42:d4:97:
         3e:a0:9c:08:5d:30:d5:7a:b1:84:61:ea:d8:2b:a9:92:51:99:
         c2:f8:eb:1d:73:5f:e1:d1:a7:0e:ae:ef:69:8b:26:e0:e3:37:
         84:19:85:c9:6f:d5:73:0c:86:09:f4:17:11:f8:a1:59:0e:98:
         d2:50:7b:34:6c:8b:50:b7:ef:b5:10:78:6e:78:a0:38:2e:0e:
         94:3b:c9:75:c0:b2:14:10:8e:37:55:e5:23:b2:9a:92:4c:fb:
         15:a9:ae:69:b5:6d:42:4f:c7:d2:0c:c6:c0:08:73:6f:14:ea:
         5f:64:62:ef:a9:85:b8:67:28:1b:ab:85:b0:7a:40:f6:06:4c:
         b4:d7:f1:ae:78:a5:6d:69:30:2b:8b:51:d2:a3:77:56:e3:76:
         6f:11:dc:da:32:d5:24:72:34:a9:99:18:cb:75:07:fd:06:2c:
         a5:bc:72:46:98:75:f7:14:e0:58:f9:cd:1a:86:fc:b9:c3:83:
         01:42:ee:32:3f:8e:3c:84:49:a1:a4:40:84:5e:d4:27:83:25:
         79:4e:07:de:78:af:1a:90:6e:f8:cd:10:12:2b:b7:f3:8a:09:
         f2:ee:3e:12:19:6e:d5:cd:fe:5c:f1:ac:97:b8:64:77:f0:e0:
         1b:fe:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:15 2026 by rpki-client