Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
File:                     a113376a-69b4-3631-b2a6-f93305a0611a.roa (raw, json)
Hash identifier:          hKM8a5nBrj/OyuzN1eaNIxCwQh3TXimMTy8AKynGQ+Q=
Subject key identifier:   0F:9D:48:BA:B9:27:F6:37:1E:34:86:A4:80:12:BA:93:F7:0E:AD:C2
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584D5E1A79FD7985D7E5B7DCFC00
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     206434
IP address blocks:        2602:f7a7:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:79:fd:79:85:d7:e5:b7:dc:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=3260233a-79bb-4f9d-96eb-feac2a27c384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:98:cd:8e:61:50:28:9b:d8:35:5b:5a:af:
                    f2:17:39:00:18:70:c7:f7:f8:36:65:6a:c8:63:c2:
                    57:52:ba:19:c8:b7:ef:cf:6c:86:a7:7f:b2:5f:69:
                    9c:95:a1:e8:3f:f9:04:1c:c5:f9:0b:67:9e:79:f7:
                    77:f9:e6:46:31:47:b0:81:dd:c5:fb:ae:d3:b9:d9:
                    1f:49:31:b9:08:01:3b:01:47:4b:53:bc:60:c5:91:
                    0f:7b:d2:2a:20:06:94:57:81:23:06:d8:81:4d:c0:
                    c0:09:2f:4c:3d:db:58:fd:29:42:12:3e:1f:a8:90:
                    82:27:6f:19:d2:53:cf:3e:5e:d8:90:17:71:30:c9:
                    e4:dd:dd:78:4d:08:d8:8d:18:21:f6:0b:0f:f7:38:
                    2c:54:75:75:35:16:45:e7:d9:7a:24:f0:71:de:0c:
                    30:44:0a:ad:13:e7:e2:f9:11:b1:fe:11:10:30:6b:
                    fc:31:d5:a7:5b:1d:ed:df:c3:82:4e:1c:f2:e4:f9:
                    d5:3b:a4:68:b4:95:6d:64:76:53:8a:31:6b:6c:c6:
                    99:bb:9d:ed:4b:9d:9c:46:22:77:13:5d:f0:54:f6:
                    2f:6f:6a:bd:3b:4b:ac:e5:1f:7a:ff:3b:cd:3e:de:
                    19:ac:b2:81:17:8b:b6:24:78:9e:a9:ce:36:63:e6:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9D:48:BA:B9:27:F6:37:1E:34:86:A4:80:12:BA:93:F7:0E:AD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:b3:7d:f8:8d:10:30:25:ce:69:6d:b0:97:ab:ab:87:bd:
         4e:81:7b:62:79:d5:17:5c:d1:97:0e:b9:85:86:68:43:d0:29:
         4d:51:c6:68:60:39:c7:d6:08:08:3f:b9:57:b1:74:cf:e1:45:
         87:51:73:0f:17:7d:aa:e0:e7:b3:6a:1d:46:18:74:b9:9a:59:
         3e:64:db:01:3e:f1:2a:60:92:95:4c:c2:49:38:54:3f:65:89:
         e3:25:2d:bb:67:91:70:8f:90:1a:d2:5e:e6:1f:7a:76:b6:f8:
         73:ce:fc:98:f1:99:5e:5b:1f:d6:ec:dd:f4:a8:e2:f8:e9:5e:
         0a:0d:92:30:03:58:66:6a:86:6a:05:67:6c:9c:f0:da:cd:fe:
         eb:1e:05:ca:2d:35:0b:af:e2:ce:5d:78:91:59:97:ea:c6:4f:
         87:31:e5:a5:48:45:70:87:e0:34:44:2d:cb:5b:13:14:6b:c7:
         ca:a3:a2:83:ac:cc:8e:22:12:61:23:5a:32:28:02:bb:95:bb:
         0b:63:2d:94:40:1b:9d:57:fb:2c:a1:84:d6:90:20:8b:2a:66:
         ae:53:16:f9:a0:25:a9:b2:8b:85:9c:ae:73:9e:69:6d:82:14:
         f3:83:ea:f6:0e:5f:0b:91:63:3e:c9:56:93:35:5d:6e:0c:8b:
         a0:83:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:48 2026 by rpki-client