Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa
File:                     d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa (raw, json)
Hash identifier:          JnM30jv7pg31g4vOMM2iSHTHZdYHTJ3LZXFpLWptdxQ=
Subject key identifier:   7D:B9:3C:8D:1A:C4:A5:33:98:AF:12:AE:4C:83:44:99:2E:BD:1C:1E
Certificate issuer:       /CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
Certificate serial:       010D0C9F4328584DF7A5EBBE7F157192154D3888
Authority key identifier: AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     401637
IP address blocks:        2602:f71a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:eb:be:7f:15:71:92:15:4d:38:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=5aea94af-f4ff-45a1-818e-6e394f302a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:f8:47:2c:68:36:a8:7a:0c:25:01:29:9e:
                    7b:dc:57:c0:a3:1c:26:35:27:65:f3:15:55:b1:8b:
                    1e:d7:9e:54:05:c7:e5:87:81:90:b0:81:b2:37:39:
                    9e:7e:38:af:3e:c4:eb:a4:d8:0c:bf:e4:32:f0:f5:
                    be:30:b0:a6:9b:0d:3a:e3:15:7c:b9:6c:a2:1d:87:
                    1f:8a:7c:1d:0d:02:97:ea:4a:5a:02:d2:0a:bf:a9:
                    4d:e9:cb:40:96:24:8b:d7:96:14:ec:d3:7e:1c:d2:
                    26:bb:9a:82:06:66:4d:d2:ee:12:88:7f:6c:b8:fa:
                    d4:18:78:66:7f:18:52:80:65:b7:53:31:78:e1:6a:
                    bb:52:37:d2:d3:68:7e:dd:26:35:80:ce:06:1e:19:
                    df:a0:8e:2c:8c:09:52:06:50:4e:e6:5a:89:35:b0:
                    4f:f8:41:77:7a:dc:ec:ee:15:75:89:50:42:58:67:
                    40:bb:58:d7:cf:60:28:7f:88:1e:77:97:64:8a:02:
                    be:63:0f:f7:2d:37:dc:85:be:3d:f2:51:51:2d:13:
                    ae:f7:e4:44:d0:6d:6b:1f:b6:14:40:75:e0:4e:bb:
                    24:33:c0:fe:e9:9b:c1:ba:13:1a:82:73:8f:78:62:
                    81:81:17:f8:df:d7:bf:5c:d3:17:b7:30:b2:8d:d2:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B9:3C:8D:1A:C4:A5:33:98:AF:12:AE:4C:83:44:99:2E:BD:1C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:d9:a7:83:c9:3c:70:f6:ba:ba:73:e2:d9:24:ac:2c:62:
         f0:db:b3:29:c0:64:02:b7:9f:2c:be:57:1c:0e:b7:aa:46:04:
         f0:b6:cd:62:e2:a5:79:49:7b:c7:17:cf:51:71:ea:c7:d7:db:
         ba:3e:00:5a:38:6c:47:1d:1c:85:95:20:d6:98:98:2e:59:ea:
         89:5e:59:10:2b:4f:f9:bf:73:99:70:ba:b2:70:5d:b6:87:c3:
         b4:39:03:7a:3a:37:c6:60:4e:2c:1d:02:97:8d:a7:8e:b7:dd:
         ae:e3:6b:e0:f9:ca:64:b6:7c:ee:c4:b9:ab:10:54:dd:63:d4:
         8e:62:9f:ba:18:d9:f4:96:a6:0f:2e:76:8b:33:35:75:12:83:
         48:f6:af:aa:aa:30:d8:a0:92:4c:37:18:af:df:cf:d1:83:cf:
         d3:f3:7b:11:f2:5b:2f:e5:22:9d:8f:df:f2:f1:b6:33:59:37:
         7b:70:2b:2b:c4:6a:21:dd:16:c4:97:55:bb:ae:08:60:3b:39:
         68:f7:69:36:3d:90:1e:33:8c:cf:ed:6f:14:bd:ee:9c:ea:80:
         b7:e1:9f:ce:0b:14:77:44:81:4c:dd:72:0d:49:34:fc:1b:0b:
         47:8f:0e:63:01:96:bb:09:b1:b1:72:39:f5:93:61:2d:a8:6d:
         dd:ca:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:42:07 2026 by rpki-client