Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa
File:                     30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa (raw, json)
Hash identifier:          x6jBgkMTD2BlbiWzGEZDxOx7ocdRYbxwp8ZE+9bDH3A=
Subject key identifier:   85:C4:2F:FC:C1:AB:43:70:56:E3:4F:2F:65:CF:1F:8E:33:D3:47:DE
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F4328584E0005E899A648623A377AAB80
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     395934
IP address blocks:        2620:ac:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e8:99:a6:48:62:3a:37:7a:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=71023588-9ae4-4a14-8aa0-54e40d4b3d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:14:ac:b5:81:5b:78:bb:bc:51:50:0a:3a:
                    5a:db:44:8c:61:46:cd:ce:31:28:c4:21:31:e9:8b:
                    24:6c:9c:92:0c:d2:e7:ea:eb:23:c6:e1:6a:ff:b0:
                    69:c3:b1:e2:3c:e0:9e:d2:6f:af:d3:a6:40:31:e9:
                    8f:46:ca:b0:d0:7c:8e:52:f8:1a:86:46:57:e4:d2:
                    fe:3a:21:44:5a:57:f7:11:0d:d6:66:75:79:75:86:
                    fe:20:17:e8:bd:8f:c5:71:77:5d:29:8e:d3:2d:7d:
                    bf:06:cd:55:e8:26:cd:1b:d1:00:bc:5b:5d:20:95:
                    6c:1c:f8:2b:33:e0:7b:84:ac:b0:c8:35:92:84:d0:
                    39:0c:6a:0e:74:9b:8d:a0:10:07:36:68:71:eb:ac:
                    50:a6:33:2c:19:84:79:b5:cf:53:fc:04:0c:8e:9c:
                    62:2b:e7:32:10:ec:70:89:56:1f:41:7e:61:7f:cc:
                    07:0b:ab:22:3e:92:32:d3:5d:8e:7b:5e:09:8d:2e:
                    9d:b8:b0:ad:9f:84:dc:02:55:b8:85:be:6d:bd:ab:
                    45:bf:c9:83:6d:76:73:f5:32:ce:63:56:fb:5e:e1:
                    91:2a:fb:59:79:43:a9:72:82:d9:87:f6:25:85:4b:
                    97:e2:16:54:81:6a:54:7f:d0:f4:55:d6:66:5f:68:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C4:2F:FC:C1:AB:43:70:56:E3:4F:2F:65:CF:1F:8E:33:D3:47:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ac:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9e:8f:f4:3d:6a:c3:cd:33:e4:02:f9:34:8b:64:b1:3f:04:
         e3:57:b0:27:b0:71:6e:97:27:9f:dc:30:1e:52:38:a1:41:1d:
         14:e3:90:58:34:b0:3a:1e:ca:07:28:28:4f:a9:fa:55:d4:d3:
         74:89:63:00:da:04:ca:39:27:36:a9:4a:48:34:76:24:fa:8c:
         28:b0:a5:bc:53:dd:f5:a5:bc:00:dd:3f:f4:f4:51:6d:31:95:
         31:5e:7d:d7:79:da:0e:2e:bd:ab:0c:00:ca:a0:ce:05:cf:bb:
         0b:08:1b:1f:8e:60:2d:da:d3:70:36:06:df:77:7f:7c:4f:c3:
         bb:c5:45:3d:08:c9:9f:55:7b:d5:c9:f3:b2:be:51:db:1e:cb:
         bb:b1:31:2c:99:14:ea:7d:29:ec:4b:fe:65:16:05:07:f0:14:
         c9:6f:6b:a2:56:14:7a:ba:25:73:c5:b2:12:e3:94:71:33:74:
         00:e4:c5:e2:e4:c0:f1:e5:a8:4a:45:97:ae:87:50:c1:df:f0:
         d6:75:24:b0:38:c2:64:7d:1a:e1:74:1f:3f:86:8a:a0:8e:b4:
         c2:ee:0a:22:5b:95:cb:4e:4c:13:2d:d5:65:af:1b:95:b6:b0:
         16:2f:99:2c:ec:f4:d6:00:8d:2a:83:2f:d3:ad:9b:65:76:bf:
         31:70:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:09:41 2026 by rpki-client