Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
File:                     5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa (raw, json)
Hash identifier:          kM/L8Q3MNPdGe1NGi2Vd4ZeeuyHCa5nI6Dbjs4T2xrc=
Subject key identifier:   2D:EF:5C:FE:24:49:4C:45:BA:5F:40:E3:5A:03:56:DA:BE:06:80:14
Certificate issuer:       /CN=22ce2863-e26f-47ca-8b36-16048be7f337
Certificate serial:       010D0C9F4328584D7F9A86D816B19C1A5D107EC0
Authority key identifier: 26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     398931
IP address blocks:        2620:af:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:86:d8:16:b1:9c:1a:5d:10:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ce2863-e26f-47ca-8b36-16048be7f337
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=a8846d0d-c9c0-426a-8d6b-98889deabf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:2e:5e:91:f5:15:76:35:64:94:b7:15:97:
                    f4:df:43:37:93:82:c8:72:22:a1:eb:71:89:56:e1:
                    90:87:70:24:97:02:ec:fd:c9:9d:6c:f0:3c:7e:ea:
                    af:23:8d:7f:3c:9e:f2:b5:01:26:3b:cf:55:45:60:
                    c8:70:28:80:61:6d:4a:7e:78:ac:ef:de:56:6a:fe:
                    18:e4:0a:b7:b1:32:79:b6:60:6b:e1:72:79:ad:65:
                    cd:87:44:e0:87:4a:9c:c5:48:2c:30:ee:1d:f9:d2:
                    90:6a:55:df:78:70:e6:a1:90:ee:96:34:75:85:9d:
                    e2:0f:95:cf:2c:50:7e:ca:18:4d:29:49:cb:3b:89:
                    23:74:8c:d1:18:5f:88:e7:73:fa:07:c1:e7:ec:2a:
                    c7:46:7e:5d:19:37:5a:aa:a8:ee:19:d7:a8:c8:57:
                    5a:67:fd:68:c4:cd:c9:fc:10:31:39:92:fe:df:c5:
                    7e:51:49:2d:47:7a:10:6a:00:bf:ec:d1:14:03:a6:
                    13:86:ac:8f:71:6a:2b:70:80:bb:d5:16:b0:f4:75:
                    50:f8:77:d5:b8:0b:69:d0:53:84:6a:11:05:f3:0a:
                    de:6c:c3:d0:03:41:48:d8:74:03:8a:77:03:cb:05:
                    b8:d6:93:4c:97:a3:76:07:28:19:cd:31:a6:85:23:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EF:5C:FE:24:49:4C:45:BA:5F:40:E3:5A:03:56:DA:BE:06:80:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl

            X509v3 Authority Key Identifier:
                keyid:26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:af:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:04:27:c3:50:64:f0:e5:bc:f4:6a:87:1e:75:b0:86:88:a2:
         bb:89:89:a5:d8:65:2a:95:82:43:a8:e9:8e:51:1d:30:05:f6:
         f2:26:b6:5a:76:38:f8:f9:00:17:6e:e0:19:56:6c:72:2d:46:
         fa:0b:4e:c5:4f:b9:53:52:83:23:10:c5:61:62:e3:df:0d:86:
         60:1d:9c:b4:7d:84:3a:7c:39:3e:7d:42:0a:e3:07:c5:ee:5a:
         39:10:ef:82:36:5e:48:e1:6b:56:f1:96:71:f9:67:bd:ca:78:
         9e:63:99:51:56:56:e2:22:bb:48:25:8b:1c:fc:3d:12:97:c0:
         be:9b:0b:bb:51:7d:35:65:56:9e:cb:e0:f9:0a:8b:df:2f:c3:
         ea:7a:9d:1a:5c:35:86:2c:da:5f:c2:91:ca:2b:2a:0d:99:64:
         3d:66:8d:96:a4:d0:f5:ae:3f:20:9f:0a:38:e7:8e:bd:4b:fc:
         f5:fd:21:30:df:ac:f0:df:0f:3a:c5:75:a8:05:a3:57:14:b8:
         22:b9:3a:5a:62:f4:84:e7:cb:33:ce:bb:9a:a4:3e:27:c6:71:
         09:9d:2e:04:96:98:7b:4d:9e:44:20:1d:43:0a:93:5f:97:1d:
         24:ac:88:06:cf:f8:a1:c1:18:77:f1:4a:9b:f1:c6:69:85:0b:
         ef:9c:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:09 2026 by rpki-client