Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd569701-eb63-3a49-9ffa-95c8ac740600.roa
File:                     bd569701-eb63-3a49-9ffa-95c8ac740600.roa (raw, json)
Hash identifier:          cTZi+TKhx6rW8qAQdQJJ2StDnVJM+aMT6NMn7dVgL5U=
Subject key identifier:   2E:C9:54:78:DA:30:A3:C9:BE:8B:E9:09:BA:6D:C4:1F:B0:BA:2A:EF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E1A143D9E9FAEB5B22BFC3EE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd569701-eb63-3a49-9ffa-95c8ac740600.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:5200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3d:9e:9f:ae:b5:b2:2b:fc:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=d4504086-1cd6-4e8d-acc9-ab4fc534abe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:9b:9a:74:6d:15:98:9a:fd:b3:39:f4:d7:
                    d7:72:d6:66:7b:50:35:d1:9e:50:01:00:bf:88:da:
                    91:b3:23:ad:a9:6f:7d:f9:62:23:46:8f:e7:9a:a1:
                    17:ae:b9:50:7d:55:59:5b:8f:b8:47:7d:79:45:b2:
                    8a:33:3a:86:88:6a:84:1d:49:41:df:a6:ad:ab:23:
                    2b:e9:09:76:aa:cd:6f:e7:80:80:e5:c2:4c:0f:63:
                    17:6d:ed:5f:53:3d:fa:dc:34:be:14:db:89:c0:35:
                    dd:e9:34:15:99:8a:76:81:73:23:74:50:0b:23:ed:
                    47:bc:e5:ac:c2:d0:d9:54:44:de:9d:9c:fd:55:17:
                    32:af:a6:5f:36:1d:5f:c0:94:45:5f:bd:6d:61:80:
                    2c:61:0f:14:d6:7f:35:d4:dc:0e:06:02:4f:b6:05:
                    15:3a:46:cf:29:41:e6:b6:d2:4a:2a:32:7d:ce:36:
                    33:7b:3a:f4:79:43:3c:f7:80:9b:47:02:f4:35:4c:
                    cc:12:14:fd:bd:8b:58:11:c0:a1:25:a3:ec:1d:b0:
                    90:98:b8:6c:1e:b8:c1:ed:b0:9b:e5:c0:40:b1:8b:
                    70:f7:95:ce:20:d6:1f:28:8a:d6:9c:5b:30:7b:7a:
                    74:fb:9d:fd:df:b0:a3:d3:33:4f:0f:10:9a:78:91:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:54:78:DA:30:A3:C9:BE:8B:E9:09:BA:6D:C4:1F:B0:BA:2A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd569701-eb63-3a49-9ffa-95c8ac740600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:1b:11:b3:d0:7d:f7:20:44:6a:f8:b1:be:3b:15:87:1c:
         fc:67:0a:35:a3:3b:cc:58:86:de:f1:c8:96:21:49:4f:5b:5a:
         aa:59:06:8e:d8:e3:6f:c1:36:94:03:d7:b8:8e:82:ae:f8:73:
         17:45:36:e3:55:f3:92:e0:2c:c2:7e:cc:16:80:a2:62:9c:11:
         cb:36:96:74:4e:2d:bb:d4:f1:42:f6:4d:e2:fc:be:41:31:7d:
         3b:23:33:e5:f5:54:1f:82:40:2b:38:11:08:7b:1c:9f:9e:06:
         1d:3f:11:f9:f0:b5:9e:26:37:b1:96:e7:c9:5d:bb:1e:15:c4:
         14:4a:6d:ca:2b:eb:6c:2f:7a:2b:f2:54:64:a5:74:fe:a3:5f:
         54:c0:bd:d8:d7:29:23:bd:0b:6e:b2:f8:15:61:43:40:b3:04:
         ed:cf:60:79:29:5d:c6:8a:cd:35:15:21:d5:66:86:3f:24:5a:
         18:a1:7b:55:c6:63:68:fb:65:36:68:29:92:b0:ab:2f:64:19:
         ce:b6:20:63:17:70:41:5d:d3:00:3c:9c:41:ec:16:8b:d2:5d:
         5e:87:8d:7d:4a:dd:a2:5a:e3:88:37:99:54:f8:90:74:14:9c:
         e6:f7:9d:16:a3:39:ab:5d:14:1d:28:77:80:7c:aa:7a:3e:d0:
         9c:44:39:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:05 2026 by rpki-client