Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa
File:                     52d8a1d9-779e-3dc7-99e2-52574eefe881.roa (raw, json)
Hash identifier:          MIYoW4wnYXUrsQzpROuGdegBP0uFodnY0wbxKxE+Ka0=
Subject key identifier:   DB:A7:F5:F0:FA:92:DF:2D:D4:B2:86:7A:87:E4:BC:0B:C8:08:BB:02
Certificate issuer:       /CN=be7047c2-33bd-411c-802c-e79eb6aea35f
Certificate serial:       010D0C9F4328584DFBD626E14D59420A085AB280
Authority key identifier: 55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     401602
IP address blocks:        2604:960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:26:e1:4d:59:42:0a:08:5a:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7047c2-33bd-411c-802c-e79eb6aea35f
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=2cf9e431-6ab5-4925-b9f6-9cd5bf1793a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e2:48:09:03:53:63:ba:3d:3f:85:bd:37:38:
                    3e:48:be:04:3b:39:39:61:19:ce:54:e5:e9:e6:9e:
                    7b:72:38:50:19:46:ba:90:a7:4a:fa:4b:68:46:2c:
                    cc:47:d2:69:75:9e:a6:5d:61:9d:63:46:cf:3a:6e:
                    ab:bc:d0:5c:d9:d6:cd:05:24:ed:d0:49:44:15:3a:
                    02:ad:df:4e:8d:78:99:93:e9:67:b7:63:57:dc:53:
                    6e:c4:e4:91:84:dd:c5:3a:aa:bb:ca:a7:9b:a3:32:
                    af:24:45:09:0a:4d:6a:e6:c4:e1:15:59:9f:6f:33:
                    41:6b:02:1b:ed:d9:40:35:c7:92:bb:35:70:9e:32:
                    ca:a4:23:67:8f:f3:f5:dd:8a:c8:4a:ba:30:0f:d4:
                    2e:0d:e9:13:c6:49:f8:0c:f9:f5:9d:0a:bb:f8:4a:
                    05:4a:e7:8c:7b:3e:a9:57:a9:12:77:13:0b:cd:52:
                    d4:00:29:e8:68:70:02:f5:0d:b2:4e:9d:d4:b7:45:
                    11:ee:20:94:f0:d0:cb:3c:8e:07:96:cd:06:70:8e:
                    54:d0:0d:8f:af:7a:f0:43:67:9e:8b:b4:a8:de:6c:
                    01:41:a3:5f:d7:2f:9f:48:77:0a:55:90:9e:f2:4e:
                    c4:89:84:e8:61:0e:b0:c7:02:b2:8c:1d:f2:16:e1:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:F5:F0:FA:92:DF:2D:D4:B2:86:7A:87:E4:BC:0B:C8:08:BB:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl

            X509v3 Authority Key Identifier:
                keyid:55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:960::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:37:6a:81:26:0c:85:a5:a0:be:50:f4:0f:63:13:0b:72:
         0b:cd:91:e2:7c:8a:ce:d6:40:ae:a6:d7:fc:d9:79:19:9a:7c:
         ca:86:96:92:28:87:1d:22:aa:ff:36:98:ed:4f:f9:50:ea:ca:
         78:60:13:96:28:8f:cf:fe:b0:b9:36:3f:ca:43:0d:27:fa:e5:
         9f:f1:a1:e3:63:98:5c:b2:9e:30:8c:93:a4:f6:a2:63:7f:44:
         cc:9f:90:76:09:64:b1:da:16:51:80:5b:eb:8b:c2:1b:c0:dc:
         6f:d9:18:a8:b1:df:3b:50:30:c1:1c:84:3f:70:cf:d3:82:7e:
         7b:07:df:f0:c1:50:25:2d:5b:44:11:fb:df:2b:d4:6b:ca:f8:
         d7:8b:dd:b9:64:a0:2b:7f:56:d3:ab:ad:4e:12:da:b3:34:a0:
         65:8c:a9:5c:ae:d3:71:12:88:91:3b:c1:7e:d3:38:a7:c1:87:
         83:01:3f:61:23:e5:cf:55:53:cc:53:fd:5d:46:15:ba:44:96:
         d7:c4:4b:4e:07:f8:d9:c2:77:1b:a6:33:3d:2c:69:00:e3:8d:
         3c:08:d6:93:e2:6b:88:3c:ba:28:3e:53:50:03:14:f6:5f:ff:
         f3:52:07:4d:b0:98:fa:48:a4:6e:3b:8e:a1:1d:e8:05:4f:fe:
         c0:09:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:22:45 2026 by rpki-client