Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
File:                     2a070509-9ba8-3201-ae15-b6c4334f1efb.roa (raw, json)
Hash identifier:          mJIi/wuRthx9T2ZExRrQKWraSSA3aYjeEOcIJ2wyl4Y=
Subject key identifier:   FD:9A:B1:DA:A5:1E:9A:72:4F:C1:3E:48:40:C5:11:A9:28:73:30:38
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584E210EEBB85872E8AA9551CF40
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     1403
IP address blocks:        2606:6d00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:eb:b8:58:72:e8:aa:95:51:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=de2e18ac-1e94-4384-a6cd-cb0788e0ded4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:1c:67:37:66:e3:36:1a:92:b2:79:51:d0:
                    d1:2d:e2:0a:84:61:5e:8f:97:3d:4d:b4:70:98:df:
                    dd:e3:5b:fc:e0:f5:1f:c2:b7:e0:09:ab:42:f5:77:
                    fe:a1:28:6b:b5:0b:a3:48:3d:2f:9c:ba:66:31:d3:
                    37:e9:52:a3:6a:5a:f6:a6:b0:e8:62:3e:d5:be:d8:
                    33:31:75:d4:cd:aa:84:e7:87:02:32:6a:be:61:2a:
                    f7:9e:d5:83:6a:0b:8d:01:0b:b4:8a:6d:a8:45:a4:
                    fd:f0:07:de:27:11:27:47:58:c0:e3:4d:4f:97:39:
                    17:15:33:5f:78:21:88:6e:5d:7b:5f:a1:22:a7:a6:
                    6e:d5:46:78:df:ba:e3:cb:1b:33:a7:b0:69:e8:06:
                    38:f7:7b:fc:8c:1a:a6:6c:e9:fe:1a:d2:b7:43:51:
                    59:0d:b1:19:06:0b:77:32:09:4c:40:77:54:bb:78:
                    ae:42:09:33:38:2e:33:2b:1f:81:20:16:d2:19:6f:
                    7d:f5:0a:ac:67:1c:8f:ab:4e:dc:f9:18:ad:4a:12:
                    fa:9a:86:48:81:80:2e:19:8c:fa:0c:10:87:11:a0:
                    c4:7d:1b:f6:9e:11:22:e3:2d:92:c4:98:29:85:6e:
                    5f:a4:11:c4:a6:df:68:d0:1e:fc:36:81:b6:5a:44:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9A:B1:DA:A5:1E:9A:72:4F:C1:3E:48:40:C5:11:A9:28:73:30:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:6d:83:2a:85:b0:51:5f:9f:2f:d6:e1:42:9d:1e:83:e1:ea:
         d5:9e:c8:f7:24:a6:25:41:0f:70:54:c6:b9:46:e3:f2:83:e3:
         eb:27:b1:65:cf:fe:52:5d:45:57:cc:22:4d:12:7b:12:a0:cc:
         21:82:20:75:00:42:fe:d5:f4:a4:0a:c0:1b:5a:f7:56:fa:39:
         f5:41:cc:80:56:d7:89:bc:c0:71:53:bf:1d:33:7f:39:da:0e:
         6e:4f:9b:b2:05:78:a1:08:8b:97:df:91:a9:b5:0a:2a:59:7d:
         9e:44:a1:49:ec:b3:3d:ed:9c:a9:b4:ca:58:ec:4e:bd:24:24:
         52:20:a7:68:0d:66:39:b9:17:1b:35:5a:da:c8:f9:e2:fd:db:
         52:27:e3:91:5a:38:a5:22:bb:a3:10:2b:02:ba:dd:09:14:aa:
         cd:8a:e0:b6:97:a2:c4:05:d3:2b:47:5f:3c:56:19:ee:c0:93:
         81:6e:b9:7a:60:6d:5d:1a:0f:a0:9d:2e:66:48:c1:4b:2d:d1:
         d2:ad:92:d8:13:60:c7:92:06:ea:51:37:b7:9d:1c:08:52:03:
         c4:5d:96:bb:1a:8c:fd:5a:d3:e0:e7:3f:9f:4b:5c:e5:63:7c:
         3a:e2:96:07:77:36:f7:dc:85:5c:ae:bd:fd:41:b1:10:de:08:
         a9:ce:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:59 2026 by rpki-client