Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d493412e-622b-3093-830c-0325f319e065.roa
File:                     d493412e-622b-3093-830c-0325f319e065.roa (raw, json)
Hash identifier:          JBj1/vJoI5ox/4drpaa7SKNCJwkvWPel/F8YIqLtjuE=
Subject key identifier:   5D:91:FA:A8:AF:AE:B9:6B:04:CA:7F:6B:B5:4C:A4:57:31:9F:4B:67
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584D7CCFE2396D67F8B94ED6A840
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d493412e-622b-3093-830c-0325f319e065.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        2602:fd10:a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e2:39:6d:67:f8:b9:4e:d6:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=8fc418fc-b351-47d1-906a-6fe1f767b490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:2d:95:98:9e:7b:98:ed:1f:72:80:b6:dd:
                    e3:45:db:99:49:05:85:0a:8d:86:c3:79:59:22:eb:
                    fd:5a:8c:bf:80:96:16:bc:c4:37:79:5e:ff:8f:6d:
                    64:d5:09:11:d0:25:1c:a2:d3:2b:48:59:4f:6b:11:
                    5e:5d:0e:16:d6:72:71:03:0e:82:57:2a:07:31:7b:
                    7f:fd:b3:f1:53:af:cf:15:2d:4b:64:e7:76:e0:7e:
                    a5:32:92:bd:0a:73:38:42:56:9d:7d:13:fa:ac:0b:
                    66:09:6b:9e:01:c7:31:7a:2a:d9:7a:8a:2f:74:9f:
                    0b:5c:b3:8f:33:08:21:48:3e:8e:c3:75:6a:22:2a:
                    3b:60:5d:d8:ec:4d:5d:c5:c2:0c:8f:85:1b:d1:d6:
                    13:8c:bd:5a:b6:73:34:20:5c:b5:1c:f0:c5:ba:dc:
                    76:78:5a:d7:e6:fc:6f:e3:51:1d:81:1e:17:5d:f9:
                    02:31:c9:0b:44:0f:3d:1d:b0:07:f4:b7:eb:9d:92:
                    f9:83:aa:c3:d6:28:e4:14:a9:c8:ad:05:f5:b0:e5:
                    09:b6:e2:40:56:9f:42:8b:48:23:8e:f4:a6:26:37:
                    e5:7f:c3:da:d0:8c:cb:bf:4d:db:b8:5e:5f:9b:c4:
                    d9:94:7a:6b:01:20:a8:f6:08:28:ac:bb:19:26:88:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:91:FA:A8:AF:AE:B9:6B:04:CA:7F:6B:B5:4C:A4:57:31:9F:4B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d493412e-622b-3093-830c-0325f319e065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b2:81:f1:20:0f:4c:08:0e:3b:3f:4c:6d:50:8f:14:4b:d3:
         94:ed:20:5a:30:28:9f:6d:f8:b3:16:86:02:85:e6:28:da:8a:
         38:44:98:32:67:8a:d9:2b:b9:2e:87:e4:26:c4:99:1a:ca:df:
         c7:0e:00:ae:59:5d:cc:56:63:ab:c6:e0:11:6c:45:af:80:68:
         e3:55:83:9d:fc:25:22:a9:f1:5a:85:b3:22:78:a5:b3:95:b8:
         18:6c:cb:1a:79:a3:12:61:bb:c2:5a:97:f9:61:b7:e2:a2:fc:
         20:06:c7:42:1a:53:4a:fe:b3:05:95:75:8d:ae:4f:fa:bf:5a:
         c5:b1:7d:fe:9d:90:83:d0:53:f0:4b:18:b1:ee:0a:fe:9e:4a:
         d7:be:c1:a2:e3:65:9c:e0:aa:eb:be:1d:01:ef:aa:cf:e0:cc:
         fb:19:2f:39:17:93:7e:da:25:71:b1:67:6a:8b:15:4d:b1:39:
         59:1e:e6:71:70:25:9f:c6:70:b1:a9:6e:8d:cc:42:db:f3:bf:
         40:52:0f:a9:bf:e4:56:f4:31:16:63:d8:4a:a2:e7:18:cf:e4:
         cb:bb:20:37:af:5c:6d:9e:27:1e:19:b7:7b:48:7d:d0:2d:1d:
         29:2f:72:2c:25:42:db:ad:b5:59:7e:4b:66:08:ba:cb:43:11:
         ec:da:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:42:12 2026 by rpki-client