Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b/17ce4ccf-b153-346c-98c6-786221406a38.roa
File:                     17ce4ccf-b153-346c-98c6-786221406a38.roa (raw, json)
Hash identifier:          WjNBNW7SUodSj1mNhLXwDF7EjK1MHhnlcORThyiJgyk=
Subject key identifier:   24:14:FF:AA:0A:DE:DD:A6:6E:27:47:2A:DB:44:EE:20:2F:0C:65:70
Certificate issuer:       /CN=befe8aba-36fd-41b8-9d2e-4659beb3b02b
Certificate serial:       010D0C9F4328584DADAAEF14B8CADEFEF7B43008
Authority key identifier: D0:A6:E6:FC:C5:E1:6C:FB:8F:4F:F1:30:76:AD:F2:35:F3:70:F7:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b/17ce4ccf-b153-346c-98c6-786221406a38.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     152179
IP address blocks:        2602:f492::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b/befe8aba-36fd-41b8-9d2e-4659beb3b02b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b/befe8aba-36fd-41b8-9d2e-4659beb3b02b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ef:14:b8:ca:de:fe:f7:b4:30:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=befe8aba-36fd-41b8-9d2e-4659beb3b02b
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=a39b56de-d727-4087-8d19-5c8f93bf3d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:31:5d:4a:f0:a6:53:66:ed:c1:5c:c4:25:
                    30:4b:cb:f7:26:6f:3b:b7:df:90:1c:9a:fc:bc:95:
                    b4:3f:6f:5d:34:4f:09:91:a7:4a:5f:b2:12:22:aa:
                    98:6b:8d:0c:a0:a6:20:25:f0:2f:d9:47:48:26:0e:
                    42:f0:8a:bd:d7:39:cf:d3:4d:ba:ab:52:e7:ca:a3:
                    e0:2e:98:9b:4c:89:07:19:2c:0b:0d:45:95:77:97:
                    15:78:fe:36:a1:5a:f8:29:c8:d8:cb:ef:b5:f9:a7:
                    21:68:05:9c:b1:08:12:7b:4a:3f:c5:9f:31:fa:89:
                    07:75:2d:04:47:68:9d:f7:25:81:93:60:2a:6b:a7:
                    b8:c8:d6:82:3e:2c:06:26:ab:00:16:c6:77:15:3a:
                    66:0f:58:9f:52:0f:3b:18:a4:41:bd:dd:90:a3:61:
                    1c:cd:1b:90:be:c0:c7:56:46:b4:2a:6f:ed:28:60:
                    cb:a5:89:01:d3:29:cf:52:31:45:c1:20:6e:70:55:
                    72:fc:3b:d9:2b:11:7c:cd:43:5c:d4:0d:9a:c4:99:
                    d7:15:74:e2:1c:b8:50:ea:4d:38:9f:ba:a0:5c:22:
                    5c:74:de:7b:e6:b5:06:d9:27:9f:54:90:d6:e4:02:
                    b5:32:8a:05:fa:a5:6d:0c:b6:88:8a:d5:98:38:03:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:FF:AA:0A:DE:DD:A6:6E:27:47:2A:DB:44:EE:20:2F:0C:65:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b/17ce4ccf-b153-346c-98c6-786221406a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b/befe8aba-36fd-41b8-9d2e-4659beb3b02b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:A6:E6:FC:C5:E1:6C:FB:8F:4F:F1:30:76:AD:F2:35:F3:70:F7:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/befe8aba-36fd-41b8-9d2e-4659beb3b02b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f492::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:02:85:9d:1f:fe:52:4e:fc:4d:8f:99:15:89:5b:b2:95:
         18:e3:f8:ff:83:3c:96:79:c1:52:2b:83:cd:76:8a:2b:8e:b8:
         0d:bd:0e:41:da:70:c8:3a:2e:ad:5f:32:61:30:a0:d5:c0:56:
         f8:ce:d8:55:ca:8e:8d:12:e1:ed:c8:d1:11:0c:68:2b:db:18:
         d2:fc:ee:5f:cb:6a:ab:1d:28:89:71:95:8e:f0:d9:9b:9a:34:
         24:28:dd:a4:d8:2b:22:52:82:cd:b2:17:5f:6a:12:32:99:d6:
         de:c2:e2:7f:0b:43:80:87:62:4b:53:59:02:7b:24:d0:55:a2:
         a4:e4:50:2f:03:52:e8:57:41:95:02:92:0b:6d:e1:63:b2:ae:
         33:25:47:bf:c2:fd:a1:94:61:ba:7d:b7:5a:0a:24:50:0b:af:
         a0:8f:6b:29:ce:20:9d:29:0f:d2:8c:b8:91:a6:13:7e:15:89:
         ea:11:15:91:64:fc:6c:e8:e3:e7:f2:3b:ce:da:61:6e:3e:f4:
         07:89:79:bd:dd:73:9c:22:34:a6:70:46:dc:1d:3f:bb:ac:d8:
         57:2c:79:d3:d9:74:9d:75:5d:cc:94:87:5a:a9:b7:bb:ce:65:
         ab:ee:81:0e:f1:96:42:8f:e6:1a:1e:e7:bb:64:2a:73:ab:f3:
         95:25:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:55 2026 by rpki-client