Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/25220123-7101-3a64-bce2-034598454027.roa
File:                     25220123-7101-3a64-bce2-034598454027.roa (raw, json)
Hash identifier:          QAdTf5VpYj+i/AY5fbuQuEKaqmMJ7xh9/kzX1vSJSHo=
Subject key identifier:   50:ED:6B:44:62:35:43:88:B6:DD:6B:8E:13:90:E2:26:DA:85:2E:16
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F4328584E0C1EEB5B495B3BB87E8CBC80
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/25220123-7101-3a64-bce2-034598454027.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     213510
IP address blocks:        2602:f718:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:eb:5b:49:5b:3b:b8:7e:8c:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=c862a3eb-26a8-4b26-8c69-71fef44412bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:f3:b3:d9:05:a5:d8:98:ab:bd:92:e8:56:
                    e2:89:3c:9d:06:1f:2b:b2:24:f9:b1:6b:47:17:b3:
                    9e:55:87:ff:bb:74:24:8b:11:ec:77:c2:ef:e8:6a:
                    d3:73:79:62:93:c2:52:8c:39:97:9a:ce:0d:5d:40:
                    aa:82:0b:2b:a9:f2:bf:50:11:e4:55:e1:c0:81:0c:
                    d8:3b:16:dc:71:f7:15:a7:56:ac:09:64:89:d6:79:
                    f3:11:a8:28:df:5b:52:6b:10:45:25:82:19:7c:ed:
                    da:c5:f8:78:13:9c:2f:5b:98:d3:90:54:97:05:76:
                    ae:a1:18:d8:5e:03:be:ae:d0:31:1e:72:ff:22:b9:
                    ea:c5:12:8b:e8:f8:9f:af:93:f5:30:93:bc:f9:0b:
                    b7:33:83:b0:a3:ea:95:02:fe:c2:7c:b3:be:15:a3:
                    98:9c:e4:84:5f:59:19:d4:99:48:7a:18:40:2e:6e:
                    f1:39:45:37:c7:65:c1:61:75:cf:1c:68:fa:13:06:
                    b2:3f:5e:45:ff:04:28:f7:a2:14:82:35:ef:8a:88:
                    01:10:40:db:e7:fc:61:b5:75:4f:c3:60:ee:79:66:
                    33:74:8a:1d:1b:54:29:81:54:40:47:9e:de:38:9e:
                    16:37:33:60:13:9c:72:bf:c1:5f:17:ee:89:72:8e:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:ED:6B:44:62:35:43:88:B6:DD:6B:8E:13:90:E2:26:DA:85:2E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/25220123-7101-3a64-bce2-034598454027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f718:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:ef:06:8c:07:2f:bc:14:ba:5d:c8:b8:29:1a:67:9d:47:
         63:4f:61:2d:6c:39:1b:fa:08:75:f1:94:93:7d:f5:0c:f0:d4:
         15:cf:cc:98:6a:94:09:be:a5:17:49:7f:83:d3:89:87:bd:c5:
         70:22:73:9b:9a:e2:30:de:f2:3e:ac:45:47:36:53:75:37:e5:
         f9:f4:7f:14:63:77:28:9f:c8:1e:d7:34:c9:97:7d:70:97:97:
         74:aa:14:49:a0:50:d6:ec:40:bc:28:a2:17:6a:8d:f4:3e:05:
         4b:a1:19:9a:23:bb:b6:cc:9f:03:00:0e:83:16:ae:6f:f2:a2:
         bc:0e:5c:8d:9b:c2:71:a0:13:28:ac:62:2c:2a:72:fc:c8:af:
         90:48:84:54:f5:72:37:72:ef:45:e4:1f:c1:dc:58:1d:6b:81:
         27:de:bd:44:8b:26:e8:59:38:07:62:bb:78:2a:51:ea:6b:e1:
         97:b1:5a:3c:66:a2:d9:15:91:ba:90:07:8d:d5:16:b5:5c:94:
         a4:0d:8a:7f:1b:87:9b:c9:cf:b5:46:d9:95:19:52:0c:c1:19:
         fc:c9:1c:03:16:2d:a9:69:b1:ac:42:76:6d:64:9e:40:01:b0:
         65:95:70:b4:b4:e7:25:ff:7c:8a:ca:bd:fb:41:0d:bb:5d:da:
         5d:16:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:09 2026 by rpki-client