Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa
File:                     5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa (raw, json)
Hash identifier:          Cu3y5GiT9F5A7bZideIa6VOOUOE5/7/4+F/bchuEcWA=
Subject key identifier:   31:38:03:C4:CE:B4:4E:5A:44:CB:C9:BF:99:5E:2D:5F:3B:AE:B6:28
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584DFBD6227227789B18D2A8A140
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     763
IP address blocks:        2620:1f7:c052::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:22:72:27:78:9b:18:d2:a8:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=e16ce2a8-f52c-4688-8e2a-1933cde8fe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:a1:ef:62:89:4c:f1:70:26:0e:5d:bc:f3:
                    76:c9:7e:f6:71:e9:35:a6:7f:73:89:2b:88:40:90:
                    39:24:e7:08:b6:d9:cd:11:d7:33:e0:ca:9c:5b:a7:
                    b6:63:35:83:17:8e:9a:4e:b4:bb:6b:b5:f7:7f:4f:
                    01:f9:4d:c5:88:13:fe:b9:a3:6c:1d:08:0a:27:d3:
                    47:66:db:25:5b:8c:6f:3a:ac:c2:c9:89:1e:56:05:
                    f9:b9:7e:c6:e8:0b:16:9f:b1:ad:48:c6:66:79:2a:
                    3d:c4:54:74:a6:60:51:51:05:91:30:68:28:f0:20:
                    07:d5:fa:d9:66:37:ee:35:29:21:d2:4d:e0:07:27:
                    eb:1f:7b:3d:5f:bd:30:30:fc:5f:6c:e1:33:c5:13:
                    eb:37:97:7b:f2:89:a8:ad:85:f6:07:74:c2:96:40:
                    37:ff:55:1a:51:95:e1:53:31:f9:bb:32:e0:0c:d8:
                    7b:c5:7a:41:3a:87:83:4f:37:21:ff:41:47:f1:e9:
                    57:8d:64:fe:18:7b:d1:e5:92:a8:52:80:ee:d3:53:
                    00:39:94:97:15:7e:72:a9:b2:6f:c1:da:6c:c4:8d:
                    58:ed:1f:2d:70:97:0c:af:13:8d:ea:8b:01:dc:5d:
                    3f:5b:39:f1:c5:90:61:c9:8f:cb:11:c4:d8:90:9a:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:38:03:C4:CE:B4:4E:5A:44:CB:C9:BF:99:5E:2D:5F:3B:AE:B6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c052::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:13:d0:79:ad:8e:77:59:e1:17:31:88:e5:7e:b4:f8:21:
         5e:a3:e4:b4:31:99:3d:1e:25:10:0d:1f:8d:13:3e:26:d8:11:
         b9:c3:78:51:2f:09:7a:2b:46:bb:66:cf:da:ed:b4:af:7f:4c:
         28:d7:ac:3d:37:8f:4d:ae:b6:77:07:60:9a:51:3f:91:f0:64:
         60:60:59:06:b3:6d:21:3e:d7:d3:38:63:35:ff:4c:5b:8f:9a:
         a5:95:30:e7:ce:c2:44:d6:4e:7c:17:db:d7:68:61:03:cc:8c:
         8d:d3:02:38:5d:2b:72:ed:36:18:71:80:0f:91:96:66:da:b7:
         f6:c6:7a:10:fd:3a:75:7b:66:80:d3:83:b2:d8:d2:72:9d:95:
         cc:d3:0b:69:d2:58:80:18:03:da:9d:ef:a6:df:93:c4:8d:5f:
         d3:89:dc:44:e4:27:cd:f4:98:44:12:6b:0f:f2:cd:05:65:52:
         fb:8c:63:91:84:d9:5f:63:a5:2c:71:ab:35:b8:6a:12:9d:0d:
         19:a0:f5:f5:99:cf:0f:9d:70:eb:8e:e7:6f:54:94:22:a4:1b:
         85:fb:fb:04:5e:2a:cc:43:6c:4e:b0:8f:f6:ae:ce:0f:a8:de:
         b8:8c:cb:8d:68:9d:6b:d4:b6:0e:51:6f:bd:3c:1e:8f:bd:db:
         d2:f4:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:00:15 2026 by rpki-client