Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/4c5c699e-0dc3-3c0f-b5a7-beb22567c42b.roa
File:                     4c5c699e-0dc3-3c0f-b5a7-beb22567c42b.roa (raw, json)
Hash identifier:          OVcOI42InWQ1NmFRDLEU0trqZNwPFPqYyuhawWbkkfU=
Subject key identifier:   58:72:C1:49:8E:F5:98:10:F0:C8:58:39:DF:6A:A9:4C:B5:15:C9:57
Certificate issuer:       /CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
Certificate serial:       010D0C9F4328584D7CCFDB85B3CB1BD29E9C4D80
Authority key identifier: 44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/4c5c699e-0dc3-3c0f-b5a7-beb22567c42b.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     16827
IP address blocks:        2602:feb7::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:db:85:b3:cb:1b:d2:9e:9c:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=7bc62360-dbdc-4171-842a-e28e28262471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:85:8e:62:80:4f:cd:19:2b:dc:0e:d2:e8:
                    77:0c:7b:4b:e7:64:b4:4a:0a:c8:1c:65:5d:d9:47:
                    62:40:62:36:3d:ae:e7:34:03:9c:84:2e:b5:d1:ce:
                    c2:77:29:98:1f:a0:6a:91:34:8f:ea:64:9b:8c:da:
                    79:f4:e0:e5:29:c9:90:dd:45:e6:47:1a:95:67:76:
                    0d:f4:2f:17:db:fe:cd:c6:63:a7:9b:03:51:2b:88:
                    28:42:ab:61:09:0e:27:0c:d9:64:65:2b:30:ea:e2:
                    1c:69:66:4a:8c:e1:15:c1:55:10:7a:35:95:42:58:
                    0f:96:8e:cc:8a:1e:a5:67:4a:53:55:32:87:d0:5a:
                    f5:62:bf:d6:aa:8c:bb:33:74:a0:28:b3:14:f1:44:
                    f4:b9:86:a3:40:12:ac:22:19:51:d1:2b:2a:15:13:
                    ac:b1:57:82:1c:08:e4:a2:3b:ee:6f:58:61:26:52:
                    54:1b:04:ed:1c:6a:4c:69:bf:01:88:ab:b8:2c:3c:
                    d7:c9:ff:c2:49:59:af:fe:cd:72:74:ef:12:db:6e:
                    8c:b2:8e:3d:8c:b6:a5:91:a2:21:a5:6c:0a:d3:c1:
                    2b:0d:aa:ee:8b:17:56:6f:17:6e:47:38:9e:a4:1c:
                    a2:27:eb:10:d9:21:42:5f:2c:b5:6a:ba:ef:83:17:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:72:C1:49:8E:F5:98:10:F0:C8:58:39:DF:6A:A9:4C:B5:15:C9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/4c5c699e-0dc3-3c0f-b5a7-beb22567c42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.crl

            X509v3 Authority Key Identifier:
                keyid:44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feb7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:59:b8:51:ee:85:41:e7:3e:cf:d0:f6:8c:2b:27:a2:b9:3c:
         de:7c:6f:0b:7f:72:41:58:f3:ed:67:07:70:b7:dd:c3:11:e7:
         e5:0b:86:39:24:b2:f2:fd:1c:06:5e:08:a1:60:e1:70:69:80:
         42:06:f7:48:13:e0:d1:70:32:27:d5:81:21:f7:96:cd:30:59:
         d3:6d:d1:43:aa:78:2a:7a:29:5b:6e:fd:94:c0:97:e0:51:5d:
         16:bb:d2:26:08:59:19:fa:e2:39:01:53:66:d5:2d:e9:84:03:
         d2:82:bc:11:77:35:53:20:f4:6b:0c:50:e0:b5:71:cd:de:df:
         95:5a:18:85:7f:29:a3:c9:f3:db:bd:28:75:bd:2a:1e:11:7f:
         f4:4a:fc:39:58:b7:33:bb:f9:d6:14:96:94:ea:30:5b:65:88:
         fd:9d:1d:07:d6:e0:9a:a3:39:cb:f3:7b:c7:7b:6b:0a:7e:51:
         34:90:fe:a2:a6:64:98:ae:82:f5:06:c6:d3:14:d6:01:d6:6e:
         74:f0:74:0a:30:0a:4e:16:2e:9f:e8:83:b5:a9:8f:a4:21:d8:
         fa:68:0a:b4:25:3a:75:cc:8a:2d:cd:5b:75:a8:f1:78:45:dd:
         c6:f4:ef:0f:f8:fe:ed:de:83:40:2a:ce:c5:b5:96:3e:d4:71:
         b8:eb:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:25 2026 by rpki-client