Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8f32bc3b-b8dc-3dfb-933f-a3cecee84ca1.roa
File:                     8f32bc3b-b8dc-3dfb-933f-a3cecee84ca1.roa (raw, json)
Hash identifier:          E4LUVcTmXPa89ZCsEYbp8LFwUwbHFrF6+ykcuHVKtTU=
Subject key identifier:   4C:30:B2:34:0F:C2:F8:FE:42:80:E7:49:2D:E2:FE:44:6A:B5:5A:17
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584DD1F5B27FCB970D7A2A85EF80
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8f32bc3b-b8dc-3dfb-933f-a3cecee84ca1.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     399728
IP address blocks:        2620:98:e00f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:b2:7f:cb:97:0d:7a:2a:85:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=590663a4-5040-4e55-b230-04463d50dc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:6e:ca:21:68:b3:74:19:5b:36:b8:1f:b8:
                    e3:38:02:13:3a:32:b1:56:7d:76:54:7b:1c:7d:58:
                    a3:08:95:cf:4c:a6:97:82:13:24:c2:bc:3e:d4:0b:
                    6a:61:f7:56:47:fd:87:50:9a:10:2f:29:a6:2d:d0:
                    49:18:a8:d1:47:ee:06:c3:1d:b8:a2:73:ba:85:68:
                    df:9d:d1:20:a4:d4:1f:a7:96:b2:d0:58:23:bb:a4:
                    b1:2f:f9:a3:ff:e5:30:a8:69:8b:c3:b4:64:02:9a:
                    59:17:00:2d:4c:c4:c3:e2:b1:ac:c4:33:b8:2e:64:
                    d5:08:94:d9:03:ca:ef:93:41:dd:50:9d:2d:b6:49:
                    b8:da:61:5f:5f:61:39:86:e3:e3:70:87:66:8a:69:
                    df:2f:ff:9b:0d:4e:7c:be:47:4a:d1:dc:e6:26:f1:
                    28:32:63:70:17:64:b1:06:0c:e3:a1:d6:a9:33:59:
                    1b:73:a1:5b:11:fe:4e:4a:f5:78:7a:f7:e0:2e:34:
                    24:52:3a:9f:4b:d6:0e:99:f7:56:90:02:03:e3:a4:
                    aa:cc:0e:76:55:96:f7:93:b9:d0:d3:9a:2b:31:76:
                    7c:bc:3d:72:35:77:17:04:b8:e0:2f:86:29:13:9f:
                    d4:0b:cb:66:0e:f8:a6:30:92:10:8f:ed:d8:71:45:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:30:B2:34:0F:C2:F8:FE:42:80:E7:49:2D:E2:FE:44:6A:B5:5A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8f32bc3b-b8dc-3dfb-933f-a3cecee84ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:19:2b:ff:c2:99:ac:a8:82:19:e7:66:25:cd:77:39:6d:
         1a:b0:5a:16:6b:e4:8b:ac:68:9b:62:4d:01:39:27:68:f0:7f:
         0a:62:7f:ee:1d:0c:07:c3:57:97:7e:c9:26:9f:b8:40:70:e6:
         60:a6:49:0b:12:9a:3a:04:8f:56:f7:d8:5d:c2:f9:23:1a:41:
         92:3f:22:d0:24:52:3d:c7:49:5c:af:49:b6:74:b1:06:43:a0:
         93:20:ae:12:b8:0e:95:2a:0d:a0:37:0b:19:da:7a:b8:52:39:
         a3:f1:63:05:b7:40:a8:fa:6c:89:80:a3:4c:35:c9:de:31:c0:
         eb:de:05:1c:73:12:be:d2:a7:93:7b:5a:5c:2a:4a:32:e6:e2:
         35:92:95:a8:2b:e6:b3:1a:f4:40:f6:de:85:15:ef:b5:f1:bf:
         55:fd:3e:5a:50:15:41:bb:c9:fc:b9:48:cd:a4:3a:b7:25:1f:
         73:7b:ec:b6:38:25:da:ac:e5:c8:8a:9f:85:6a:a4:9d:ad:18:
         31:07:4f:82:f2:c4:54:a0:ba:6b:4f:5b:2c:bb:21:89:6e:e4:
         10:19:ee:dc:b6:d2:b8:f4:04:77:9d:dd:f3:36:d0:a9:51:e2:
         25:f8:5e:06:c9:19:b0:25:e5:0e:27:bc:86:fa:95:c0:c8:ce:
         c4:25:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:29 2026 by rpki-client