Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa
File:                     3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa (raw, json)
Hash identifier:          aApnxWizS0RJMeBiwky25k7sQqV0X4U7+ng/DV+/3ww=
Subject key identifier:   6A:BF:98:CE:07:0F:92:AE:C2:1D:C6:E3:77:F5:75:F2:B6:0C:26:E8
Certificate issuer:       /CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
Certificate serial:       010D0C9F4328584D7F9A9D139E1E00C34FFDB680
Authority key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     33083
IP address blocks:        2602:ff65:b22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:9d:13:9e:1e:00:c3:4f:fd:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=b712ea55-7e9f-4b54-8180-bac553121dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:83:d1:c3:c1:c6:53:cc:3f:6f:a6:c1:9e:
                    0a:de:70:03:bf:8f:7d:5c:df:91:84:98:ec:61:49:
                    a9:70:84:08:01:19:07:50:4d:13:bd:a7:b9:da:8f:
                    d9:b2:f1:ef:dc:b5:2a:26:43:da:d8:4d:9c:0b:28:
                    5f:e0:ad:5e:ec:99:ec:7a:d2:af:e4:0c:0b:8f:ef:
                    16:f9:26:64:66:96:5f:ce:fd:ae:87:7d:d0:94:bf:
                    e9:b8:95:0b:4d:07:f2:3f:48:dc:15:0b:5e:e4:ec:
                    ba:e2:ef:2a:49:b0:66:c2:d7:7d:51:49:2c:18:3b:
                    33:27:de:2f:36:1b:d6:18:97:07:e0:5a:cd:e8:7e:
                    69:74:05:c0:76:30:a7:21:0c:b7:c1:62:d9:96:0e:
                    48:6f:2b:17:8d:25:65:7a:34:42:9a:37:0a:38:be:
                    cb:60:5f:34:22:36:d4:e9:44:6f:34:c6:51:a8:f8:
                    bc:35:1e:2a:61:a9:85:06:62:2d:e1:27:6b:83:d7:
                    e4:4b:13:5d:d8:8c:7f:32:52:d6:29:17:a7:17:50:
                    50:8b:35:74:a1:13:99:e4:bf:ca:91:0d:02:31:11:
                    66:0f:ae:33:f4:f8:da:4a:ac:d1:ca:78:84:8b:ca:
                    f1:33:20:a7:d1:37:5b:c7:99:bb:a2:aa:31:fe:e9:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BF:98:CE:07:0F:92:AE:C2:1D:C6:E3:77:F5:75:F2:B6:0C:26:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl

            X509v3 Authority Key Identifier:
                keyid:B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff65:b22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:e3:71:52:87:e5:77:81:f0:6c:e9:c2:ce:1c:89:0b:0e:
         1e:f8:a3:40:9f:7b:5b:1a:c1:19:f6:34:d4:ee:9d:41:e7:84:
         a5:d2:cc:9f:b9:3e:c1:fc:97:11:03:4e:cf:11:1f:13:0c:9e:
         d3:53:ae:7c:1a:13:16:93:5e:9c:c5:18:a9:c0:6b:d1:21:f5:
         12:1f:34:b1:72:fe:28:d1:a0:d6:cb:58:23:f4:c7:05:41:f6:
         d3:4a:c3:1c:e5:74:ab:33:58:6c:bd:d7:b9:60:64:41:28:cb:
         9f:ec:83:e8:28:f9:ad:5a:30:d6:a7:4f:9d:0a:6c:10:6c:ae:
         a4:ab:9f:a7:35:dc:01:15:cb:4c:a1:0b:83:ca:f6:b1:d3:07:
         6e:71:6c:68:a7:3b:16:91:ff:8f:f5:2e:62:e9:fe:ee:05:43:
         5b:fd:3a:1f:e8:4b:71:75:21:c7:78:ec:27:79:20:3c:e2:f8:
         c6:ae:9e:fe:8d:f0:a3:52:ad:85:b6:8a:d8:9d:4d:7b:16:a9:
         4f:24:46:d4:f0:0a:13:c8:99:2e:13:35:e8:1e:a9:37:3c:e2:
         99:3a:55:2b:61:7b:b4:2a:80:81:20:ea:5d:a3:e2:b9:80:f9:
         88:eb:bf:87:e7:e0:9c:76:f0:95:d6:8c:28:f7:49:09:f5:fe:
         ac:24:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:55 2026 by rpki-client