Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/ae5e8174-4c63-37d5-be32-52fa6eab8d84.roa
File:                     ae5e8174-4c63-37d5-be32-52fa6eab8d84.roa (raw, json)
Hash identifier:          w7q2mjX3n2D9mpmDfcy1hJIgZKTQGGv3MEteN/Z97ow=
Subject key identifier:   41:D9:7F:DF:1B:2E:86:76:05:C5:F8:D0:CA:C4:ED:EE:91:08:BF:AC
Certificate issuer:       /CN=a5c518d0-6c8f-4cc0-8433-e63522746509
Certificate serial:       010D0C9F4328584EA15BFC767BD74438EB8D8200
Authority key identifier: 2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/ae5e8174-4c63-37d5-be32-52fa6eab8d84.roa
Signing time:             Sun 26 Jul 2026 19:59:00 +0000
ROA not before:           Sun 26 Jul 2026 19:59:00 +0000
ROA not after:            Sat 24 Oct 2026 19:59:00 +0000
asID:                     402778
IP address blocks:        2602:f33f:800::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:5b:fc:76:7b:d7:44:38:eb:8d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c518d0-6c8f-4cc0-8433-e63522746509
        Validity
            Not Before: Jul 26 19:59:00 2026 GMT
            Not After : Oct 24 19:59:00 2026 GMT
        Subject: CN=494f12fb-fdc7-4f1d-aa88-527009e94c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:1d:eb:9c:09:c0:61:41:61:cc:b8:f0:af:
                    fe:f6:a0:71:00:25:3c:08:41:b4:c1:51:e8:4f:40:
                    04:50:a6:b8:85:9f:df:dd:ac:a5:0c:b2:e9:31:f4:
                    3d:3c:14:78:4a:1c:65:82:e6:6c:a3:33:b9:fa:cb:
                    3a:74:22:16:a1:89:3a:3e:e5:44:2d:ca:b7:b8:cb:
                    c4:fe:bb:5d:d6:39:50:f9:01:7e:7d:f8:65:35:34:
                    2a:d0:e6:e0:1b:fb:86:b0:69:5c:83:89:6b:8e:b8:
                    ea:2e:26:fc:3c:87:93:16:77:ff:9d:59:5b:cb:1a:
                    14:1d:2f:3b:ae:e4:53:32:cb:7c:eb:25:4a:df:17:
                    24:6c:48:60:7e:74:7b:20:90:1d:c9:65:3a:bd:10:
                    22:09:43:44:82:ec:b5:b1:42:38:72:73:24:c7:22:
                    b5:20:a5:90:88:db:3f:95:c4:ac:6a:4b:79:fe:05:
                    cb:4e:cf:68:08:0c:ec:fd:6a:b7:90:b8:c8:9a:76:
                    87:af:0d:b4:93:4d:e9:98:45:f7:8d:c3:35:dd:18:
                    b7:c6:d8:70:ac:84:2a:1d:a4:5a:22:a3:09:a6:f8:
                    2f:98:01:e0:0f:62:51:cd:5d:61:7c:65:44:60:fe:
                    1f:ca:a1:e5:4b:20:76:3d:68:36:da:e2:b8:e8:50:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D9:7F:DF:1B:2E:86:76:05:C5:F8:D0:CA:C4:ED:EE:91:08:BF:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/ae5e8174-4c63-37d5-be32-52fa6eab8d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl

            X509v3 Authority Key Identifier:
                keyid:2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f33f:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:d6:f6:0c:78:b4:3f:85:8d:fd:4b:83:aa:38:e6:35:de:
         46:f5:e3:ae:26:12:9a:c0:8f:cd:30:a0:20:13:46:b3:83:bc:
         2c:42:1c:d2:ff:1b:bf:6e:ba:e7:97:9f:b4:07:7c:f0:48:fc:
         62:df:11:e2:36:9b:ae:e3:86:93:38:ff:8c:d4:03:87:b1:25:
         a4:b8:e3:f5:22:40:1e:33:23:65:7e:b3:4f:5b:45:80:77:70:
         1e:58:ff:a5:d1:3a:b6:39:c7:8b:30:fb:b6:20:a8:48:24:9d:
         07:5f:79:fd:b1:28:62:13:06:da:e4:fa:dd:17:37:d4:f5:e4:
         18:10:a3:ad:b6:6b:a8:72:bb:01:e2:e6:48:b7:bc:3e:a5:f8:
         3e:bc:bd:e1:3f:de:df:59:db:2f:35:5a:f9:08:a3:1a:fd:0c:
         82:19:35:08:80:fb:c0:0c:0c:bc:3a:c0:a1:c0:a8:58:0d:c5:
         e9:9d:9d:12:ae:8d:5e:30:85:27:48:bf:ea:e3:e1:19:ba:69:
         4c:58:df:56:fd:4e:b6:94:e2:be:b2:56:76:dc:32:1e:66:1d:
         be:53:f3:d3:7e:3b:38:32:14:d3:c0:2c:59:82:ac:91:a8:65:
         7b:8c:3a:2e:7a:b2:7f:ba:e6:ae:df:df:fb:ad:ba:90:31:44:
         be:f1:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:42:25 2026 by rpki-client