Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/fe4c1e7a-796b-32fe-b0a5-7864d574191b.roa
File:                     fe4c1e7a-796b-32fe-b0a5-7864d574191b.roa (raw, json)
Hash identifier:          5iY6PLvraXkDUg4kbzGuFTm8Qlbjx2W0vdLv1X1o53s=
Subject key identifier:   09:15:6B:2A:A0:6F:AA:67:BB:3F:7C:E8:5C:82:AB:E0:1A:25:69:20
Certificate issuer:       /CN=122e6c80-f523-4555-a85c-d2640af24cd2
Certificate serial:       010D0C9F4328584D6C6B90858104660C63C50980
Authority key identifier: D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/fe4c1e7a-796b-32fe-b0a5-7864d574191b.roa
Signing time:             Tue 07 Apr 2026 04:05:36 +0000
ROA not before:           Tue 07 Apr 2026 04:05:36 +0000
ROA not after:            Fri 05 Jun 2026 04:18:14 +0000
asID:                     402256
IP address blocks:        2620:8:f080::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:6b:90:85:81:04:66:0c:63:c5:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122e6c80-f523-4555-a85c-d2640af24cd2
        Validity
            Not Before: Apr  7 04:05:36 2026 GMT
            Not After : Jun  5 04:18:14 2026 GMT
        Subject: CN=94acf4e8-186b-4fb4-be80-f65a4024076c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:45:0a:b2:c3:f3:5c:a1:a3:4b:22:2f:89:
                    0d:52:39:19:8d:cb:41:a7:81:d3:92:16:03:1e:1e:
                    63:d8:ad:02:2b:15:6e:9e:b9:f9:13:6d:18:fd:7a:
                    fa:8f:6b:f5:0e:57:da:b3:5c:84:53:0a:45:41:bf:
                    5c:cb:84:8f:7c:7a:57:39:0d:eb:4c:68:0e:f2:46:
                    c9:c8:04:32:b8:67:9d:72:2d:c8:58:4f:9c:b5:eb:
                    ce:36:75:ac:89:c2:ba:82:7f:74:74:de:b8:b9:cd:
                    00:38:c7:c6:be:7d:54:3e:20:62:77:9e:1e:ef:67:
                    34:0f:ab:2f:24:44:1c:f4:52:26:5c:62:1c:4e:02:
                    db:32:ee:a4:24:4e:06:e3:3c:d2:8c:bb:c8:d3:81:
                    2b:89:c0:29:e4:1d:b2:b4:01:42:09:ce:8c:e4:c4:
                    4c:f4:8e:60:ac:6d:16:a9:b8:61:0c:9f:b3:5a:8c:
                    5f:54:25:8d:f9:dd:3f:a6:d2:13:37:88:b7:29:94:
                    fe:85:31:53:46:5a:ab:2b:73:48:ac:4a:7f:2a:c5:
                    08:01:05:d9:71:12:66:67:94:01:72:47:20:71:52:
                    c0:89:69:4a:4f:17:84:86:62:d4:95:4e:ec:3a:0b:
                    60:91:02:07:e4:96:67:16:24:32:f8:69:6c:79:75:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:15:6B:2A:A0:6F:AA:67:BB:3F:7C:E8:5C:82:AB:E0:1A:25:69:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/fe4c1e7a-796b-32fe-b0a5-7864d574191b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.crl

            X509v3 Authority Key Identifier:
                keyid:D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:f080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9a:ff:66:36:1e:36:de:88:4a:6f:1f:c7:f2:e8:fd:43:12:
         90:32:ae:16:37:23:d8:f3:19:ed:64:05:f4:bc:6d:db:b9:dd:
         2e:f7:be:0b:ee:f9:c6:86:27:9a:75:ec:79:ba:4e:78:48:7e:
         f1:85:60:98:93:f5:55:38:f4:98:34:57:12:06:0b:00:6c:4c:
         dc:44:e5:1b:4f:31:73:12:58:94:3a:83:8d:0f:b6:76:5c:35:
         a9:c9:65:ef:91:47:38:e6:ae:47:af:a5:55:5e:ac:b0:0c:c9:
         de:04:cf:9b:0a:7d:5d:e0:fe:22:bc:9b:1e:ca:2a:3c:66:8b:
         f7:48:9a:a4:eb:7c:f5:d0:96:07:38:2b:5a:b8:d7:b9:2e:c0:
         5f:06:0d:1c:2f:2b:e7:bc:df:98:ec:4a:5b:cb:86:67:6d:34:
         a4:f0:7e:94:66:1e:1d:9a:0e:e5:0b:d5:1a:02:ea:29:b1:c9:
         2e:90:77:a9:3e:93:fb:a4:3d:06:2b:b6:33:9a:04:0f:00:79:
         10:e3:e1:08:22:69:28:d5:d5:25:dd:d1:cf:35:5c:56:a0:b7:
         06:05:c9:46:91:c5:06:a7:13:06:81:4d:6e:b7:c6:92:5a:bb:
         6e:a1:56:61:2f:2d:e7:9e:40:01:e5:8e:1f:a4:a1:7f:2c:dc:
         ad:78:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:20 2026 by rpki-client