Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/7ea8b6ad-1b37-38be-ad0f-f3a7de16301d.roa
File:                     7ea8b6ad-1b37-38be-ad0f-f3a7de16301d.roa (raw, json)
Hash identifier:          5jIieZy3PG9b8tvDecfUbO4X8gMzMn7cQxL2JoSfJfc=
Subject key identifier:   82:13:0C:43:89:0A:A3:43:3A:D4:7A:C2:08:D7:B6:25:A9:AC:D6:9F
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584DF7A5D6FF0834D8B74D439A80
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/7ea8b6ad-1b37-38be-ad0f-f3a7de16301d.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     209481
IP address blocks:        2602:f93b:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d6:ff:08:34:d8:b7:4d:43:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=1b965f6b-bb50-43de-b95d-6f5a9ea939f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:7d:08:3e:88:ff:e4:ca:cf:ba:ce:fa:af:
                    10:c6:e9:75:46:24:e0:60:b5:af:e2:6f:99:0b:d0:
                    de:cf:ce:1f:8f:54:5c:4b:b0:74:3f:7d:66:b4:dc:
                    e0:82:ec:93:40:94:52:7b:21:cd:85:09:57:0a:b6:
                    78:a0:71:22:c7:03:03:73:39:58:5d:fa:3e:0e:6c:
                    b1:b5:30:4f:af:ee:14:90:56:d7:6e:52:fd:23:c3:
                    5b:28:9e:42:04:35:54:d8:63:09:d1:7e:80:5c:3a:
                    8c:a5:7a:5d:e3:49:7d:8a:d1:9e:91:72:98:2b:9f:
                    6f:d0:15:62:e6:b7:51:45:a9:30:03:20:17:36:ce:
                    7d:b3:52:c6:0a:d4:72:ec:11:e4:5d:55:59:25:8e:
                    fb:12:27:47:23:86:4b:a1:ce:82:df:ef:b8:34:93:
                    a7:98:bc:74:ad:0f:0a:e2:5b:ae:33:e8:17:3c:e3:
                    e8:83:e9:33:fe:d7:34:f2:29:23:ac:23:98:12:ae:
                    8a:1d:7a:d6:cb:ad:ac:cc:93:01:1e:cb:27:7c:2c:
                    f8:28:f9:32:2c:b5:d7:06:88:23:e6:de:93:0a:1a:
                    e9:f8:e6:30:1b:60:86:12:d3:b4:a0:6f:06:32:96:
                    a0:ba:55:f9:be:83:99:ce:28:1e:d4:0a:75:c3:c4:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:13:0C:43:89:0A:A3:43:3A:D4:7A:C2:08:D7:B6:25:A9:AC:D6:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/7ea8b6ad-1b37-38be-ad0f-f3a7de16301d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93b:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:01:43:0e:7a:62:2f:06:83:f3:45:dd:fc:a1:cc:7e:9a:f7:
         37:2d:aa:08:63:01:71:2a:52:da:d3:11:86:22:31:28:5a:2b:
         d4:81:9c:be:ea:43:8b:a4:67:3f:01:f1:e8:d4:ef:43:5f:a3:
         cb:62:54:9d:b7:e5:b7:9c:f8:52:d0:6c:31:bf:57:50:17:bf:
         32:a1:b4:e6:73:bf:f9:3f:c2:cf:25:df:d1:a7:4e:48:bf:06:
         a7:20:e3:e4:f2:b5:2f:13:18:b7:d2:af:1b:9e:28:90:e1:b5:
         d5:01:1b:5a:fc:f1:b0:44:7b:f4:21:af:5f:ab:76:dc:21:bd:
         d2:0d:42:b4:ad:dc:ca:fc:54:bc:68:63:9c:dd:a6:c3:ae:7c:
         b0:29:c3:9f:64:4a:72:35:98:c8:cf:b0:94:a0:d7:3e:38:1b:
         61:63:4d:42:e5:98:d5:98:3e:66:bc:be:8a:a9:d4:18:42:3f:
         dd:d7:81:31:1d:66:2d:0b:ba:cc:cd:32:78:61:b0:2e:9c:bd:
         2a:9b:5f:ac:c5:eb:00:19:49:cf:dd:45:c2:b3:76:27:02:d1:
         bf:dc:24:6d:ab:12:a2:4c:b4:49:00:16:b5:29:e8:12:5f:f8:
         60:bb:35:9c:f3:d0:f3:d5:86:e3:21:15:0d:d9:11:4a:ea:5c:
         58:de:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:00 2026 by rpki-client