Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/0b5500fc-03d6-398e-8d7f-254c1db89c75.roa
File:                     0b5500fc-03d6-398e-8d7f-254c1db89c75.roa (raw, json)
Hash identifier:          eaGd5igfxK1Xt5OR/BpHbeAx/DreKABkUJcWv4z6cEk=
Subject key identifier:   72:B2:04:41:77:C2:B9:FA:01:4F:8B:7E:4A:DC:8B:72:3F:F9:BC:9E
Certificate issuer:       /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e
Certificate serial:       010D0C9F4328584E08665C81B94EFB1E43386900
Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/0b5500fc-03d6-398e-8d7f-254c1db89c75.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     20014
IP address blocks:        2604:1080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5c:81:b9:4e:fb:1e:43:38:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=23720b4e-1860-4149-93cc-cceeff64a351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:48:3d:34:a6:2a:aa:eb:f0:1e:24:8b:b1:
                    58:fe:01:ab:fa:ad:54:d4:51:ab:87:67:da:73:1f:
                    dd:9e:73:00:bd:0a:05:0a:58:96:f1:70:cc:f5:91:
                    e6:52:ee:19:3b:47:3e:69:d4:9c:21:c9:b3:fd:7f:
                    38:fe:51:97:ed:70:67:55:03:47:0c:7a:f8:6c:f4:
                    49:4a:4c:71:55:63:f0:87:3a:c3:54:ff:90:58:a9:
                    ca:45:2d:18:37:c5:b3:fd:66:d1:f2:30:e1:0d:fa:
                    3a:9f:29:6b:1a:41:a8:79:e8:17:37:e6:e4:b1:6f:
                    fa:10:e8:5c:1e:34:e9:6b:26:0a:8c:20:64:27:6f:
                    41:d2:ba:1c:6a:e0:d2:74:2a:79:ac:f0:6d:d0:b0:
                    ac:98:b1:d6:1e:58:61:e9:b5:93:1c:35:78:f6:58:
                    57:ce:c3:9c:0f:c1:07:37:b4:a4:58:1b:3f:ae:60:
                    e3:0b:e0:2d:90:71:aa:bb:14:17:b9:ca:00:24:b0:
                    33:9e:dd:e9:45:7f:fe:c0:35:75:80:68:e5:c8:4c:
                    1c:e2:a8:57:a4:5b:db:64:27:ac:3f:78:e6:12:73:
                    1b:80:4b:9e:3d:c6:2e:b6:af:66:83:a9:b0:2c:63:
                    3f:ab:4c:3c:a9:cb:7d:00:e5:1e:ab:0c:34:37:29:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:04:41:77:C2:B9:FA:01:4F:8B:7E:4A:DC:8B:72:3F:F9:BC:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/0b5500fc-03d6-398e-8d7f-254c1db89c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl

            X509v3 Authority Key Identifier:
                keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:06:8b:55:be:29:e0:dc:0a:c3:6f:88:c5:f0:7e:09:0e:
         c2:e6:d5:2a:70:77:f2:bb:76:53:da:fd:2a:bb:5e:d1:db:9c:
         23:f0:0c:15:b6:e5:1e:7c:26:de:3e:96:0e:dd:27:ab:6e:da:
         47:8e:0f:f5:b3:bc:e0:a2:c8:f0:e1:8d:2c:cf:9d:e0:16:b0:
         b0:ed:6c:9f:05:fc:d6:03:df:f8:ab:60:0e:16:c8:27:d3:6d:
         36:05:88:95:37:b2:94:cc:69:e1:b9:81:e6:8a:a8:3a:62:35:
         1b:ea:29:ae:fe:03:0a:8a:b9:4d:ca:88:2e:d7:1b:1c:15:9f:
         80:e1:00:eb:c3:0b:c2:56:84:03:9e:69:8e:5b:95:25:30:11:
         e7:5d:53:4b:eb:fa:1e:46:9f:b0:00:34:39:98:5d:f4:be:2b:
         f3:21:e2:f6:2d:06:0e:dd:2e:1a:57:18:5c:2c:db:c7:82:89:
         9b:1e:b9:a1:0e:08:63:3d:5e:12:45:08:97:95:ad:61:00:77:
         85:31:fa:1d:a3:45:56:d9:41:a8:71:2a:a6:82:30:bf:bd:a0:
         94:ba:28:cb:56:b0:c2:84:ee:1c:f8:b0:11:5a:78:aa:43:55:
         b6:2d:45:33:a0:ab:73:4c:56:9a:48:77:3b:45:b9:4e:cf:79:
         e3:18:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:14 2026 by rpki-client