Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/c826e4a1-261b-300b-a45a-a68bc2f882db.roa
File:                     c826e4a1-261b-300b-a45a-a68bc2f882db.roa (raw, json)
Hash identifier:          XSyeVmWCiUeBh6mLJ0UzKsZ04qlP1qUMWFk5M8isGFw=
Subject key identifier:   39:42:7A:78:D5:B1:9A:FC:FC:0E:09:DC:2B:A1:48:BB:37:A8:1B:F6
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F4328584D746FBA7C32593F978A4489A0
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/c826e4a1-261b-300b-a45a-a68bc2f882db.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     23344
IP address blocks:        2620:138:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ba:7c:32:59:3f:97:8a:44:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=eea5527c-c1d1-4f9e-beba-578d7ace4d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:b2:07:94:8d:86:c1:61:62:b1:bb:5e:33:
                    90:84:ca:57:77:df:d6:d9:2b:0a:5e:5c:3e:94:a1:
                    04:0b:74:8d:dc:3c:64:0d:b5:07:9b:bd:1b:20:44:
                    c0:64:df:d4:32:56:d6:7c:38:9b:00:63:f7:ec:e6:
                    8e:3f:f1:69:dc:4b:21:30:77:e5:bd:dd:5b:32:d2:
                    5c:9f:d0:8f:35:19:f9:e7:2c:e0:d3:13:08:10:0e:
                    e1:97:0e:fb:50:73:35:09:2f:57:1c:9f:e6:df:47:
                    0b:08:f1:ce:aa:ad:ab:cf:ad:6b:52:00:13:1d:aa:
                    d2:11:e3:4c:d1:56:22:fd:c5:9e:a9:4c:36:b2:0d:
                    80:ba:a5:fa:3d:b0:91:74:0e:73:20:77:f5:a4:35:
                    7f:26:5b:6a:af:2d:dc:eb:1e:3b:7a:84:06:bf:a1:
                    25:fd:e6:90:58:3b:36:80:93:63:27:1a:87:99:5e:
                    76:51:3c:7c:29:95:5a:41:c3:8c:89:48:dd:46:bb:
                    2f:ff:68:4f:a7:f2:68:3c:1a:3f:f2:2d:48:33:5c:
                    bb:86:50:dd:71:16:17:f9:91:38:2d:70:67:8d:b4:
                    8a:74:bb:9b:21:47:70:88:bc:0a:f0:df:0f:5a:cd:
                    13:06:42:03:07:4e:91:47:d2:68:ab:b4:60:d2:b7:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:7A:78:D5:B1:9A:FC:FC:0E:09:DC:2B:A1:48:BB:37:A8:1B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/c826e4a1-261b-300b-a45a-a68bc2f882db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:63:00:df:7b:67:52:c3:a3:4d:53:f0:e3:f7:1d:d8:b3:29:
         08:84:e1:b3:7f:09:a1:a0:41:64:51:ef:fd:c7:cd:85:27:df:
         0b:c8:b4:b2:ba:be:fa:6c:7a:86:8f:fa:c5:3d:3e:4d:ad:73:
         88:ea:4c:5e:9f:31:dc:46:26:1b:91:02:2c:e4:04:c4:2f:dc:
         f4:0a:9c:af:b7:9c:cf:4f:b5:19:3a:e0:fb:7a:9f:5d:7d:e5:
         a7:ef:ed:b0:4f:c5:44:0a:90:86:3d:8a:cd:1c:64:95:9f:33:
         68:2c:fa:b9:ed:f1:7a:0a:f0:f6:68:c8:de:31:9f:9c:05:15:
         3e:6a:00:b6:9e:bb:e7:3c:01:f9:9e:a5:e6:42:ee:c9:0c:7a:
         c6:d3:a7:96:29:91:77:c4:46:75:c5:a3:4e:e5:44:c9:75:d8:
         8a:d4:7b:3e:15:2d:ce:7a:07:a1:eb:cf:4f:0e:d3:87:e0:80:
         15:65:86:17:43:8d:fe:dc:6c:0f:55:04:0b:97:ae:44:11:59:
         de:f0:6d:3b:68:84:ef:0c:f5:af:a5:44:56:ba:6a:91:08:43:
         27:a3:df:e7:7d:4a:e6:1c:11:ed:9a:9f:d1:e1:9e:f2:3a:1c:
         14:82:9c:94:4b:41:b8:2b:3b:c0:fb:7e:90:c6:ee:af:55:1e:
         e4:43:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:49 2026 by rpki-client