Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c72f7bda-9842-3eff-9d1d-50d42fca430a.roa
File:                     c72f7bda-9842-3eff-9d1d-50d42fca430a.roa (raw, json)
Hash identifier:          HKAL5crGSDQdg2zHFVJVQEN98ncHBRYUQIl1lf6K+94=
Subject key identifier:   43:32:56:34:92:06:DC:A2:BB:01:04:E4:00:C6:61:7C:F7:AD:33:BA
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584D80FFE4B9B61532EDA6EDFCE0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c72f7bda-9842-3eff-9d1d-50d42fca430a.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     142418
IP address blocks:        2602:fd92:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e4:b9:b6:15:32:ed:a6:ed:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=e3a97ed9-fd6b-494d-ab62-54279e37953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:af:4f:1f:fc:7c:57:2c:bd:69:0a:b9:27:
                    2e:e2:c6:40:2a:a2:54:e8:97:bd:33:ce:94:e6:08:
                    e1:1c:29:e9:9a:8a:7d:e2:b2:2b:8a:00:36:8b:f4:
                    3c:25:f6:4a:f4:96:01:72:c7:47:e1:5f:04:68:7d:
                    7e:68:a4:7d:27:4c:be:86:19:27:a7:86:13:ed:f9:
                    6a:76:a6:20:5b:69:46:b3:dd:3e:6c:f5:7e:2f:a0:
                    23:89:6b:32:23:60:7e:19:93:42:40:78:e6:31:1a:
                    5d:ff:d3:a9:d5:05:90:ea:d8:84:24:d5:62:a9:d7:
                    70:d7:b7:af:3f:d6:48:5d:5e:3f:86:dc:58:46:a1:
                    bc:63:54:78:2f:8a:68:89:08:ce:da:02:c0:9c:b3:
                    16:48:38:a0:e4:16:51:d9:0a:25:80:9f:bf:46:40:
                    3d:6f:93:05:ca:63:c3:6f:55:3a:c6:e2:5d:b9:fe:
                    52:67:72:71:cf:66:4a:62:dc:42:20:01:09:f9:bf:
                    79:d4:e8:b6:13:71:72:d6:7a:ee:37:a4:2f:84:2a:
                    3a:7c:09:50:be:07:b9:06:69:f9:8c:73:90:91:fe:
                    da:38:59:2d:a0:38:8d:fd:1e:02:c7:ff:91:96:d0:
                    63:cb:4e:eb:46:7b:ec:03:4c:c9:45:e4:81:b2:4f:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:32:56:34:92:06:DC:A2:BB:01:04:E4:00:C6:61:7C:F7:AD:33:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c72f7bda-9842-3eff-9d1d-50d42fca430a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:ca:a2:63:fb:cc:fd:15:bd:a8:52:86:c0:e3:8c:ba:ed:
         68:17:db:c9:e2:5c:25:24:c9:98:64:62:76:44:df:ee:6b:19:
         3a:03:f3:ef:41:45:68:0b:7e:23:57:91:88:e5:8b:e3:21:a3:
         84:bb:53:5b:c1:09:36:3c:51:9b:6d:d1:9b:0d:ed:04:d6:72:
         ec:67:0f:29:fc:16:5d:3e:fe:56:b0:6c:7c:64:d7:29:50:77:
         e9:b3:14:9a:71:b8:17:e8:45:64:00:1a:db:85:8f:70:e1:13:
         ac:6f:7f:48:6a:98:da:7d:c7:bd:1a:44:e8:db:f7:8a:32:25:
         87:6a:24:e6:40:b1:26:57:44:49:92:ed:7d:de:d8:f0:1c:22:
         79:f5:99:d6:22:6f:08:e0:da:0c:09:12:d2:29:c6:00:c3:3a:
         b8:64:c6:5b:d5:20:24:21:88:45:4d:69:b8:6a:f1:01:f2:2a:
         3d:68:3c:c6:ee:ce:5d:49:8f:93:07:ed:f4:40:9c:c3:d4:7c:
         f1:f4:d8:8c:2d:19:e6:f9:42:26:d2:64:3d:d1:23:e8:ff:b4:
         0f:49:e5:c0:c0:35:a7:e4:30:f0:4f:2a:aa:22:9e:75:9f:9f:
         d4:b7:94:e3:f2:f3:a0:68:72:5a:e7:4f:70:76:37:cf:21:d8:
         14:e4:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:10 2026 by rpki-client