Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa
File:                     dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa (raw, json)
Hash identifier:          iQzPmkM9HFxR0ecdxJ099yIUJWXOJE3KqFEosr/idNY=
Subject key identifier:   98:8C:45:46:AC:96:59:AC:D6:7D:75:D4:C9:4B:AE:B0:D8:33:40:7C
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584D67DFC9423817528B44BFAB00
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     61112
IP address blocks:        2602:fa4f:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c9:42:38:17:52:8b:44:bf:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=ce42af53-e1de-4030-9b40-084f0b815d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:99:92:ef:ab:b9:e5:a8:d9:f0:de:4c:4f:
                    69:b1:d2:1c:ea:12:29:d8:5f:98:18:27:f6:53:30:
                    cb:de:0b:d1:c6:c2:1a:3b:a2:5c:36:9d:3f:75:18:
                    9d:b3:dc:bc:ad:9c:3f:ce:fd:80:57:6c:a9:fc:c2:
                    49:43:4c:fd:4a:df:25:d8:3f:37:78:a9:1c:30:71:
                    ba:07:a0:81:dc:b1:89:14:1b:dc:0b:2a:d0:5e:1f:
                    70:6d:32:7a:7a:6b:f4:b7:49:89:f6:85:b7:5d:92:
                    16:e3:6b:ba:40:7a:43:82:41:3b:15:7b:bb:fb:62:
                    2d:e5:65:08:8b:cf:63:97:0d:e2:c4:e5:12:55:db:
                    29:a0:c4:44:53:a9:9a:dc:af:0a:fe:2d:62:60:d4:
                    e8:5f:13:9f:8e:43:ea:f6:5b:8b:39:c8:17:bb:4c:
                    44:b5:82:96:39:01:aa:a4:58:15:54:28:96:0a:e9:
                    38:ab:59:46:6d:c8:50:94:34:7e:d9:dc:a5:53:59:
                    60:5a:83:1b:36:aa:11:37:a8:f7:ef:f2:56:b1:75:
                    52:b0:be:5f:52:ff:0c:b0:7d:a2:55:12:53:a2:53:
                    ff:7d:b6:e9:b8:f9:f5:4e:6f:5c:a5:e7:89:40:81:
                    1d:19:ea:a0:dd:fd:4c:71:34:f5:4e:33:2d:0c:bf:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:45:46:AC:96:59:AC:D6:7D:75:D4:C9:4B:AE:B0:D8:33:40:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:89:6b:48:cf:4f:98:f3:df:0a:fe:03:7d:35:b7:dd:61:23:
         3a:cb:0e:7b:3d:4b:3f:6d:00:fc:56:ce:8c:7a:cb:76:69:22:
         5c:00:31:4c:5e:6c:04:32:f1:4f:39:93:a1:ef:14:ae:0a:d0:
         02:75:58:69:65:0c:ff:90:ba:0b:bb:ba:b2:cc:cd:40:40:3f:
         43:17:e9:19:8f:f6:cb:c2:12:75:d3:82:40:21:92:1c:10:be:
         d5:78:dc:83:09:a6:9d:a3:57:04:04:3e:e7:8b:fc:ab:aa:62:
         72:82:02:ab:e1:b7:44:77:84:ef:1d:72:d7:b3:0c:3d:24:96:
         d5:11:93:13:0b:70:1a:51:88:ab:32:24:52:66:76:ba:9d:da:
         e5:be:79:b9:53:d0:9c:97:4c:c3:ef:e6:03:26:1d:9f:59:79:
         d2:42:62:5b:51:5c:9c:54:3a:8a:62:61:dd:f9:9f:fb:b2:78:
         ff:d9:3b:fa:21:ab:7e:ff:d2:00:0c:7c:00:64:d4:ab:3f:5c:
         10:cf:a7:a8:78:96:11:33:a9:41:fa:a3:32:dd:74:2f:c5:10:
         91:af:7e:bc:50:8b:0c:56:18:de:9a:8e:08:d0:0a:8d:3b:85:
         f0:8e:f6:6f:fb:26:9d:12:c2:74:86:cc:e3:96:35:e9:bf:60:
         d9:c8:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:21 2026 by rpki-client