Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa
File:                     fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa (raw, json)
Hash identifier:          fRcV8xiaYOfIjIiUGVH5fbyN/7DhoXDlgSywssUi+CU=
Subject key identifier:   B7:8D:81:00:A8:18:61:D8:6D:5E:72:72:0F:BF:ED:B3:A6:CA:2B:95
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584E0005D5F5861D60CC1E0F4320
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     54702
IP address blocks:        2620:130:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d5:f5:86:1d:60:cc:1e:0f:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=d5b6e12d-9257-4e1d-8ef8-43b8a619cfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:19:2a:b5:07:fe:6e:22:a7:a3:3b:2a:1d:
                    91:74:d1:ee:19:0d:40:51:1c:ef:31:c5:d3:b1:24:
                    17:8f:b4:c1:b5:9a:ba:60:4b:e8:42:3d:39:98:03:
                    a0:31:1b:6a:11:6b:00:1a:53:06:5c:b8:2c:95:81:
                    25:74:f5:9a:f2:1a:87:13:42:89:a1:a2:06:4b:e8:
                    3e:c4:36:76:5c:3b:51:0d:57:76:6f:f8:76:be:22:
                    1f:fd:75:8a:f1:0b:66:7e:2a:b0:07:2d:b3:06:61:
                    1c:2f:9e:ef:2e:17:54:67:61:e0:3d:a9:86:f8:34:
                    35:55:75:e6:d9:96:95:03:75:02:ee:90:6a:2c:d7:
                    3f:65:cf:a6:fc:f2:57:fd:b3:35:94:67:b2:59:cb:
                    e6:14:92:6f:fd:ab:14:a6:98:76:75:e4:d4:d7:42:
                    fc:19:3a:6b:63:c1:42:07:12:61:b7:7c:77:77:ce:
                    cd:a7:63:e0:f0:39:e7:f9:7b:f5:83:79:96:b3:4c:
                    e9:be:22:a5:93:2b:5c:a2:13:15:68:cc:4c:d6:07:
                    22:df:57:98:d6:13:bf:4b:cd:f5:ae:ff:58:80:c1:
                    43:f3:db:ec:19:44:58:2f:8e:5a:e9:78:85:d4:8c:
                    7a:bb:b0:ac:f3:a5:25:c1:bf:d4:c0:cd:dd:54:e6:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:81:00:A8:18:61:D8:6D:5E:72:72:0F:BF:ED:B3:A6:CA:2B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:130:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:aa:e2:fc:88:cb:81:6c:57:0e:f6:e8:53:d0:b8:cc:1e:f9:
         f0:bb:d7:b5:0c:2b:d2:cf:bc:dd:ff:e2:66:fa:04:d7:76:8f:
         e1:89:6a:ac:7d:a9:c7:bf:59:51:7b:b5:fd:ad:a4:25:42:42:
         c4:dd:b0:75:80:35:e6:2b:61:e8:af:c1:27:73:ad:3b:07:de:
         11:1e:a5:08:17:5d:e1:0b:28:17:93:3c:72:ec:33:e6:3b:0b:
         87:1b:95:a8:92:8a:7d:e7:c5:e2:77:d0:6f:35:a7:ec:21:e3:
         e2:ee:29:03:b6:89:4b:60:f1:d3:72:d9:47:60:32:35:07:17:
         a8:a3:7d:38:48:0b:4a:70:1c:7d:98:8d:83:c5:20:7f:2a:00:
         22:0b:a4:35:12:b9:6d:69:f4:98:9f:cb:20:a1:bb:04:6e:ac:
         1f:81:2c:6c:53:1b:07:ab:10:00:17:aa:e3:14:f7:b2:fd:47:
         cd:15:cd:93:e3:e4:5e:41:89:25:d8:f6:e4:66:9e:ab:32:6a:
         52:8b:0f:ef:a0:42:21:7a:d5:ea:b1:7a:d8:d2:12:c1:ab:33:
         15:15:63:15:ce:79:51:c7:0e:b1:ae:05:a3:10:88:4c:0d:a3:
         a0:25:99:9c:d2:13:cf:1c:17:ce:e1:7e:98:46:4c:57:f4:ec:
         d7:1b:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:37 2026 by rpki-client