Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa
File:                     a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa (raw, json)
Hash identifier:          brU05aorSpd0npes5EfgdkvQujYIP/6x9RMimsZmQgE=
Subject key identifier:   73:BE:AE:02:19:A4:F1:DB:8A:A3:1D:33:4D:34:61:57:04:D6:C9:16
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584E0D841DDB701664A52B198840
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     400919
IP address blocks:        2602:817:2005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:1d:db:70:16:64:a5:2b:19:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=38be5351-6117-416f-85b6-c50473d31df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:be:cd:82:26:0d:f8:1e:97:dd:8a:b4:14:
                    9d:f2:e7:80:3b:5e:1d:a5:cc:0b:ae:f8:49:35:df:
                    6d:e4:20:2c:0e:51:1c:02:7a:8b:6c:c6:33:34:af:
                    fb:e3:db:aa:1c:66:03:e0:81:61:f9:22:2d:1e:c4:
                    73:63:9e:14:d3:ba:72:6d:1d:63:c5:d0:11:36:89:
                    e5:89:f1:c6:12:11:a5:f2:9d:06:a6:36:d9:b6:0b:
                    77:13:21:f2:35:14:38:07:05:dd:8e:10:60:6c:38:
                    34:c0:3f:33:d7:74:b9:17:ae:fd:ec:13:69:06:be:
                    e2:c5:21:d9:7e:fa:c8:6e:68:b7:6f:38:02:a0:c8:
                    40:f3:36:b5:f2:b9:a1:1b:96:0d:8e:7f:28:d4:4a:
                    3b:b6:ca:2d:fa:25:c3:ff:7d:6b:bc:36:80:02:b8:
                    e4:f9:42:1f:0f:16:0e:90:67:55:f3:65:00:50:12:
                    62:54:f9:49:14:73:4c:08:b7:a1:53:f7:e5:ff:a7:
                    3d:cd:cb:3c:9c:ef:7c:42:bc:4b:fd:49:ec:87:d9:
                    9f:13:c1:bd:df:79:ed:dc:a0:d0:80:f9:10:ba:e8:
                    5e:42:0b:5e:46:74:85:00:9d:3d:1d:09:2e:9f:9c:
                    1f:b6:4f:82:89:8f:98:27:7a:78:a6:5b:2a:1a:9f:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:AE:02:19:A4:F1:DB:8A:A3:1D:33:4D:34:61:57:04:D6:C9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:96:19:56:42:66:93:73:21:4f:f3:70:78:22:30:5a:8a:
         69:58:09:29:c4:de:d9:ee:5b:8f:9c:6d:79:b6:32:8b:5a:25:
         0e:cc:89:c3:be:61:c6:f9:10:48:f5:9c:66:43:8a:07:4c:35:
         f7:86:82:b1:d8:c6:ea:43:9d:1a:c4:3c:10:32:e9:1f:34:25:
         19:a8:cd:27:08:e9:b0:5c:58:82:4d:c7:90:d7:a5:ae:21:bb:
         13:09:a7:69:06:ac:23:13:cd:73:82:b3:da:0a:07:ce:09:ad:
         e6:91:eb:d2:f2:33:48:d9:b7:81:4b:55:8a:f0:d8:b5:40:16:
         78:4e:e8:a7:af:9e:e6:0b:e4:74:79:28:bb:85:9e:58:c1:4c:
         a3:a9:42:9c:c9:87:9e:31:f0:6e:41:da:c1:4c:ce:ce:ce:5c:
         d6:1e:8f:99:80:ab:73:fe:4e:f8:b5:3f:ef:81:fd:13:d2:34:
         32:31:87:50:ca:88:71:47:6a:74:5b:29:96:46:ab:18:75:b4:
         db:5d:45:0e:b4:8f:9b:6f:a5:08:9a:1c:40:53:97:e8:37:45:
         89:3e:12:12:41:cd:d8:59:2e:83:c4:d0:15:1c:0f:4f:1e:c4:
         0c:b0:56:36:db:bb:64:bc:ff:4b:8a:5b:0b:7b:46:a5:42:13:
         ae:be:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:46:03 2026 by rpki-client