Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa
File:                     2cc6c38a-68cb-3c34-9564-f77e506f710d.roa (raw, json)
Hash identifier:          vI9PMCN+w+myq4WgyUeWOmTK1Mc3MBlSTIateGcSq10=
Subject key identifier:   8C:8F:FA:27:46:C6:77:CC:54:18:D1:93:F0:55:9A:8B:5D:81:68:4E
Certificate issuer:       /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Certificate serial:       010D0C9F4328584DD4C07E5B0AADD7699A008C00
Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     395494
IP address blocks:        2605:2cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7e:5b:0a:ad:d7:69:9a:00:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=ce610c88-7b8c-42e9-b0ba-c8c3bc39bd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:59:ec:69:ee:8c:66:11:61:dd:b5:ce:8c:
                    13:68:f3:a5:80:cf:15:7f:de:a0:7d:42:62:d2:37:
                    b9:5e:e4:0c:d3:ad:5f:cc:8b:a5:cd:5a:cb:0f:38:
                    36:7c:b5:91:3d:91:29:2c:97:0f:ff:da:b0:30:a8:
                    1e:5c:ec:c4:43:74:71:7e:60:5d:dc:0f:f8:e4:bb:
                    d6:49:f9:6a:ce:43:bc:c3:37:13:e9:90:71:20:7e:
                    23:b0:ea:df:f8:b3:37:ed:4c:b3:b8:7b:f8:48:ab:
                    45:4d:5c:ab:35:12:61:e3:1e:36:bb:59:2d:9d:60:
                    9f:41:ba:6e:31:91:0c:81:98:e8:5d:e1:25:06:dc:
                    45:55:a2:a0:f9:99:11:ed:b4:d8:f8:53:a5:a9:54:
                    b7:be:c6:8c:1c:94:ae:f3:94:4a:3b:22:85:25:bb:
                    88:fb:a3:d4:6d:2f:51:23:d2:4e:9d:72:1f:de:5d:
                    bb:1b:50:bc:bd:f9:0e:0c:48:5a:96:8e:1f:16:cb:
                    26:b5:1e:6e:8f:d9:ec:0c:11:c9:b5:ac:98:6a:66:
                    a7:b5:67:7a:be:82:26:45:b4:a8:af:11:23:7a:24:
                    44:45:56:d1:66:d7:8a:43:2f:c7:5c:fb:8b:4c:23:
                    15:05:19:a3:b2:29:f5:6f:83:e2:ac:96:15:e2:d7:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:FA:27:46:C6:77:CC:54:18:D1:93:F0:55:9A:8B:5D:81:68:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl

            X509v3 Authority Key Identifier:
                keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:81:84:ea:48:4b:6f:23:33:33:2e:a6:c0:6c:0c:c3:cd:dc:
         48:7f:49:56:15:4b:bd:d2:51:da:dd:48:02:51:60:3c:cb:4b:
         49:db:27:66:36:2a:40:b7:2d:82:c8:56:e3:d4:ed:77:c6:31:
         b1:4d:e9:2f:fe:90:9a:43:22:bc:1c:06:6c:e9:9b:a3:0c:5f:
         04:c6:52:23:1b:8c:1e:fe:f3:6c:e4:11:91:e4:fe:6c:c4:81:
         fd:67:eb:b2:02:92:b9:68:e0:90:e0:36:a7:4b:f4:02:68:0c:
         fc:aa:aa:fe:c1:59:1e:5d:44:30:42:3d:c4:9a:0e:14:4e:48:
         01:57:16:e0:f1:d8:f9:c7:10:49:aa:a3:c6:ef:fb:0d:58:b4:
         9b:f4:f5:41:97:eb:3c:2c:e0:7a:2d:fe:96:a6:5e:ba:45:f3:
         c2:b4:9d:11:08:07:74:3f:fd:ad:4d:26:b9:8b:9d:c1:40:71:
         98:5f:70:85:ee:cc:af:c7:b5:41:3e:ee:a4:8e:87:92:47:87:
         6f:31:17:83:5b:58:b3:c3:27:27:e9:63:d8:50:de:25:fc:52:
         f7:5b:13:72:90:57:ff:0a:18:ec:01:b8:09:d0:a1:fd:8f:b1:
         a7:c6:18:f6:d4:42:1b:00:cf:c1:07:c4:98:9c:49:f1:d6:79:
         e0:46:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:49 2026 by rpki-client