Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
File:                     c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa (raw, json)
Hash identifier:          KUcyrCTMvYbo7TU9mXsbD7i3GSTt+Rm0SLYUvnSuGPY=
Subject key identifier:   3D:BD:91:81:F5:7D:7C:80:2E:9D:D5:30:38:9B:52:B4:9D:81:28:28
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584DF640A90BDABAC62272362480
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     36519
IP address blocks:        2602:80a:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a9:0b:da:ba:c6:22:72:36:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=36e67c79-937b-4136-bd89-2f9aa9b6b07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:5f:5a:b7:d4:b6:3c:f8:5a:11:e5:aa:e5:
                    5a:3e:2d:91:6b:ab:3d:54:87:d6:a2:4b:b3:e6:b9:
                    25:c9:2f:c9:be:95:6d:d4:3c:27:e8:ef:16:ad:56:
                    3b:78:49:5c:d9:b7:51:ec:1d:ec:ca:86:a1:46:47:
                    9d:34:4d:61:bd:64:ef:a0:b8:97:80:07:f7:31:2f:
                    cb:84:4c:4f:c7:70:a0:1a:e7:db:a2:78:d5:46:b4:
                    f9:72:d0:b1:f2:40:3f:50:93:ee:92:7e:75:06:65:
                    3a:4d:08:c3:ad:54:cf:f6:4c:df:62:bf:2b:d4:76:
                    39:72:63:2d:9b:a3:58:48:7f:6a:45:8e:ab:4d:55:
                    87:a4:56:ed:91:e1:dd:ff:d1:1f:8e:ce:da:ab:86:
                    10:97:7a:e9:83:32:33:f8:64:b2:79:28:c9:b5:54:
                    5d:75:e5:fb:8b:57:44:95:2a:19:54:7a:d1:83:b3:
                    f3:e7:10:30:ca:34:3d:ec:8e:71:c6:e3:ba:25:29:
                    05:4e:52:bf:c3:e7:3c:f5:7a:1b:3f:70:25:44:7e:
                    8e:54:a5:39:7d:99:83:3f:9d:5c:1a:2d:07:da:4c:
                    40:f4:fb:fe:32:d3:84:46:5d:cb:b4:11:2a:f9:7f:
                    b5:82:70:1c:45:d1:5a:0a:c0:04:c7:77:22:1a:7a:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BD:91:81:F5:7D:7C:80:2E:9D:D5:30:38:9B:52:B4:9D:81:28:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:14:21:12:ab:44:15:4d:9e:4d:fa:35:31:17:88:b7:31:9f:
         51:bf:cb:91:02:1e:72:55:81:34:43:3d:95:31:8f:a2:32:c4:
         f8:5f:4d:9c:16:b9:cc:da:85:af:d1:02:87:3c:d3:4b:e7:0e:
         a9:53:0a:a5:4b:4e:59:29:37:b5:62:81:31:bd:df:6d:fc:af:
         b4:77:47:28:06:49:08:f2:7e:29:d2:39:6f:db:af:fe:59:01:
         1a:9a:91:c5:c9:ec:1a:7f:cf:d9:e5:36:5a:d0:d3:f9:4a:2b:
         84:3d:e3:69:66:c9:de:2c:07:62:7f:16:62:73:ec:b8:80:53:
         e3:ca:aa:f9:f5:98:73:c3:8b:74:de:ca:ef:78:24:27:db:9c:
         fb:e2:c6:04:37:6f:4c:b8:11:e4:0c:c3:16:ec:05:c9:8c:af:
         f4:3e:6a:f2:24:49:46:cb:98:0a:ec:78:b1:f1:21:ce:f7:5b:
         98:ae:a0:06:d5:f0:e2:d2:01:7c:85:0f:11:14:6a:f9:9e:07:
         1f:7c:d1:6d:5e:ae:8b:d9:dd:2e:ee:da:0f:28:61:5c:1a:7d:
         0f:7b:1e:be:4b:16:e7:26:10:96:f8:e1:33:15:ce:aa:21:22:
         1f:e2:b0:56:d8:b9:74:1c:2f:02:55:cb:c3:65:d1:2b:10:9b:
         ff:28:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:13:55 2026 by rpki-client