Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa
File:                     dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa (raw, json)
Hash identifier:          L0w0Q4VcG6AaVE0/KWYEiNmuyOH1j6irNZobyRz9tVw=
Subject key identifier:   65:EB:01:66:54:20:55:C4:67:6C:DE:CA:34:91:E3:6D:E2:AE:4C:99
Certificate issuer:       /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial:       010D0C9F4328584DC4005FBEA3EC8FDE4E080F00
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     21659
IP address blocks:        2602:fdd2:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:5f:be:a3:ec:8f:de:4e:08:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=a11f8545-373e-4c41-9b74-70ad890d3eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:b5:5e:dd:11:7a:32:af:e0:25:ea:2e:01:
                    18:1c:7b:1d:c4:e8:04:32:ba:82:f2:5f:e1:74:2d:
                    a4:72:4a:f1:c1:f7:bc:27:9f:b1:d4:a1:8a:fc:9e:
                    f1:c3:36:16:21:3a:f9:9d:55:34:4f:f6:c4:73:65:
                    ac:81:cf:07:f7:23:cf:1d:6a:0e:c2:42:3a:2c:9d:
                    47:f1:c4:98:36:9a:a1:a3:d7:0b:be:af:5c:4c:89:
                    be:94:ef:bb:73:5a:46:fd:81:71:a7:77:73:82:7f:
                    05:46:72:b1:25:eb:a2:8f:f1:8b:4e:b0:ca:1b:b5:
                    8b:77:2a:a3:96:84:c3:3b:e7:f3:2b:98:fa:fc:cd:
                    25:e7:2a:3e:21:20:c7:5e:4d:87:4e:7b:2b:42:bd:
                    5d:77:12:e6:ba:61:81:35:5f:44:dc:7c:b0:31:4c:
                    58:42:a7:82:da:49:56:bf:ce:cb:bd:1e:18:0f:ad:
                    98:9e:13:be:52:8b:39:b7:20:aa:1a:07:04:7a:99:
                    3b:d2:02:d6:e9:c2:f6:0d:5c:8b:ef:a3:ed:2d:4d:
                    d9:f8:94:df:da:67:92:aa:e3:36:34:16:35:91:99:
                    20:c5:9a:c6:87:61:d5:ee:a7:9d:fb:25:38:01:49:
                    62:7b:3b:e7:4f:70:54:5f:48:e2:f4:eb:a0:6f:85:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EB:01:66:54:20:55:C4:67:6C:DE:CA:34:91:E3:6D:E2:AE:4C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl

            X509v3 Authority Key Identifier:
                keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdd2:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:b2:0c:bf:b7:0f:cb:d5:2f:e1:70:d2:ac:0d:e5:a7:2a:
         71:d2:ad:24:2b:ce:9f:e3:a7:db:c1:8e:43:c3:da:82:80:8c:
         c5:5e:df:78:bb:d7:7b:c5:97:cb:53:25:d1:ef:3e:0f:de:65:
         8e:60:0c:35:26:48:aa:b0:44:fc:37:38:db:8b:37:c6:7b:75:
         45:fa:25:61:dc:d9:8c:00:87:1a:79:47:87:1d:0c:aa:ad:94:
         0d:4f:c7:0d:80:5e:bd:e7:ab:e5:87:ce:b9:5c:42:36:40:2f:
         30:c2:ff:bc:10:18:9d:7e:e4:da:0d:4d:2f:14:50:b3:0d:09:
         80:74:5e:45:62:58:a9:bc:15:bd:ed:95:c6:33:f6:25:ca:69:
         4e:c0:31:c7:0b:03:ed:a7:c9:8e:07:cf:ae:4c:12:2a:1d:8d:
         1a:32:61:b3:20:cb:25:b5:fd:2a:f6:db:b5:bb:21:0e:bc:2a:
         10:27:ff:dd:79:cb:54:45:a4:af:bb:92:cd:bf:87:bb:fc:89:
         f3:9f:79:44:47:93:51:b1:08:93:de:0c:8f:2c:74:59:40:f2:
         3c:ef:57:e2:49:69:66:ee:1e:08:b0:86:60:20:e1:cc:ba:67:
         b5:f3:0e:9f:bb:4b:55:7c:ee:a0:e2:17:02:c4:cc:8c:45:a5:
         8a:73:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:53 2026 by rpki-client