Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa
File:                     acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa (raw, json)
Hash identifier:          l86eWyFyOWBcjcFx9jVK7bFKkknBMTbjMUxEqUCBRTE=
Subject key identifier:   D8:87:C6:71:0E:E1:E7:7F:E2:A3:3D:85:3C:4D:FD:FA:6F:D2:E6:A9
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584D7CCFC90E929148B20B20EA80
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        2602:fd10:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:c9:0e:92:91:48:b2:0b:20:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=8452ff9c-5555-4436-aab5-0d5b59d7fa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ad:04:73:ea:17:bb:59:cf:e5:94:0c:7e:ff:
                    a2:31:86:8a:d0:ef:7e:16:56:e8:4a:e1:3b:3f:00:
                    35:7a:f7:c1:71:3b:88:52:62:24:3a:2a:75:81:79:
                    3e:0b:e9:d4:57:0b:f8:73:f8:c6:46:71:ed:1c:a3:
                    87:f4:68:b3:b7:20:01:8d:1a:e7:f5:40:1c:e7:f9:
                    a6:f7:33:f7:1e:1b:c0:ac:66:06:96:a0:f2:72:56:
                    30:07:1e:51:8e:fb:35:b5:3d:91:2f:74:d7:44:8c:
                    4e:d2:21:b8:d1:dc:cd:ea:41:5b:ba:85:5d:5d:55:
                    0e:b1:1a:13:1b:57:fa:ca:94:7e:e5:42:0c:e7:b1:
                    52:78:07:18:d1:1e:db:2c:d4:0d:f7:e8:ee:e7:38:
                    8d:d0:8e:55:36:03:16:63:32:4e:bd:d2:9d:0f:88:
                    66:b8:ce:0e:a5:80:0f:ed:ac:18:36:20:5b:9a:fa:
                    ed:22:cd:ef:42:2c:00:78:37:2a:d2:20:28:ae:b9:
                    49:e4:cc:1e:1b:ec:cf:a9:d0:3d:7b:e6:d5:66:db:
                    f4:97:ac:90:3b:19:c3:96:6d:0a:4f:bd:bb:18:8f:
                    d8:06:e3:19:de:4a:bc:4c:e4:1b:08:9a:2f:10:0e:
                    a5:bf:65:4f:f8:e4:46:88:87:b7:24:70:df:40:b8:
                    25:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:87:C6:71:0E:E1:E7:7F:E2:A3:3D:85:3C:4D:FD:FA:6F:D2:E6:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:61:e0:d1:eb:e6:a6:0b:ce:8f:e9:fa:c7:fc:68:2b:95:e0:
         ed:e2:8f:25:da:fc:42:ec:cf:74:bf:e7:9a:dd:c4:8d:0c:fc:
         1f:ed:64:15:e8:30:f4:dc:47:a3:c4:7b:4e:13:01:98:cd:4f:
         1f:b8:61:cc:4a:87:d8:19:5b:f8:e8:cc:84:02:0b:d4:17:52:
         0f:d8:fa:6d:5d:88:9c:42:66:22:0c:c1:69:46:94:5d:24:0e:
         80:b2:db:19:1d:35:89:a9:5e:6e:ea:b1:a0:ff:0c:cd:35:45:
         a1:99:72:c9:84:0b:f9:7d:7c:79:84:e6:4b:76:5c:e4:cb:0e:
         32:45:a3:99:ea:97:89:ad:0d:43:94:bd:e8:48:3d:00:a9:f4:
         b5:fe:8b:90:b3:8d:44:9e:cc:73:3a:0f:e7:26:f1:c8:f3:0f:
         40:1a:44:86:bf:8d:b7:23:67:bc:5a:c6:83:ad:81:71:af:18:
         59:c4:76:f3:94:18:53:97:dc:6d:30:7c:db:cc:cc:cb:b8:a4:
         71:fc:cf:27:6a:a6:63:f7:b5:bc:b1:97:39:29:ef:8c:0a:a5:
         ff:cb:07:a6:cb:f1:6f:0b:51:92:e2:a3:c6:b1:9b:5c:d6:f4:
         19:cc:51:e2:09:aa:dc:1f:25:5a:e5:ef:0f:d0:7a:e6:a1:6c:
         02:6c:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:47 2026 by rpki-client