Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa
File:                     600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (raw, json)
Hash identifier:          tfjdD2qtKRNKqMac7Vq/Cc88QrkdVOghQlAqqPamQdU=
Subject key identifier:   B9:88:10:4B:06:D8:DA:0C:15:D9:99:19:9C:E0:69:7A:05:05:0A:52
Certificate issuer:       /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
Certificate serial:       010D0C9F4328584E07009B383B57DAF3D248B700
Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     26258
IP address blocks:        2620:123:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9b:38:3b:57:da:f3:d2:48:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=b18c8113-db13-43c6-baac-d1cfff294c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d0:74:b6:e9:f9:de:36:88:9e:28:92:21:77:
                    f7:ea:b1:e6:b5:7d:04:1d:04:ad:49:3c:e9:20:d6:
                    1b:2c:1e:81:ab:b5:4e:92:b8:23:50:3f:d7:13:6b:
                    7e:67:a6:f4:64:ac:ab:90:de:aa:7e:ae:56:d3:51:
                    28:db:34:7e:f6:81:fd:c5:78:7d:fd:dc:d2:75:dd:
                    58:d1:6d:eb:1e:6b:e5:5c:f7:a0:83:f1:bd:74:9b:
                    a7:1a:07:9f:be:8e:ac:ea:d4:9d:0e:0d:1f:7a:d6:
                    06:2e:84:1f:a6:c9:9d:4d:b2:0e:61:cc:64:01:99:
                    bd:70:8a:43:fe:bd:a8:a8:01:ed:c8:40:b5:93:12:
                    96:8c:21:fe:cb:21:8a:30:df:93:f1:54:6b:af:30:
                    86:4c:14:98:7d:65:48:99:02:9e:b9:16:c7:c0:c9:
                    3f:00:10:48:3c:be:52:be:55:93:0d:0f:58:7f:cb:
                    20:c3:ba:1b:6c:c3:c8:3a:55:ac:fb:e1:da:c0:2f:
                    cf:95:92:28:29:1b:19:ed:3b:be:12:76:8d:7c:fe:
                    66:f6:cc:c8:29:34:ed:84:cc:5a:69:3b:20:3b:71:
                    27:52:15:cf:09:28:cb:cf:0b:de:e7:10:ec:98:00:
                    98:1d:e7:c5:17:55:42:5e:3f:45:3b:c2:25:07:88:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:10:4B:06:D8:DA:0C:15:D9:99:19:9C:E0:69:7A:05:05:0A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:32:31:4a:ea:e8:ae:69:da:48:0d:ae:69:8b:a2:77:14:fc:
         45:83:34:4f:56:a4:c8:8a:b0:fa:06:b1:b2:84:66:cc:5b:0f:
         8f:63:fb:3a:fa:2e:ae:5d:f3:de:41:32:25:35:d2:67:34:14:
         51:ed:fb:50:0e:8d:91:53:21:60:16:56:17:87:0d:40:6c:bb:
         ec:79:09:c1:56:7e:64:df:24:e9:25:0c:f2:de:bb:b7:fc:d7:
         27:12:69:4d:0f:40:62:31:63:a3:1e:c7:f4:cf:ed:46:98:c7:
         0f:13:b5:be:ed:56:13:8d:83:0d:6f:f8:22:1c:2a:64:87:4c:
         07:15:1d:25:4d:62:36:70:2f:88:81:f2:49:30:20:75:0d:5e:
         3c:71:75:12:b6:e3:95:ea:ee:bb:24:a2:8d:35:6a:b3:b4:b2:
         5e:f5:cd:5d:9a:9a:59:2e:1c:e2:e0:39:2c:34:01:e7:b0:e3:
         54:09:38:73:f7:a2:40:94:90:33:36:15:24:0a:0d:ec:0b:40:
         6e:da:1c:ea:7d:38:25:b6:1f:52:53:1d:b2:ba:b2:3f:7b:d3:
         43:86:21:1f:7b:50:b2:8f:fd:a3:9b:bd:f9:e6:af:e9:df:a7:
         9a:25:4b:dd:6d:bb:2b:ea:59:15:93:58:f1:be:d8:5e:c1:da:
         33:44:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:43 2026 by rpki-client