Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa
File:                     89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa (raw, json)
Hash identifier:          FtqgZF6389DqFyY/dPIrKjJi3riVVKMFYq9O1lZLgWE=
Subject key identifier:   87:77:EC:B5:37:92:F6:A8:A9:EE:72:01:48:2E:55:62:A9:78:BD:55
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584DF0AB3EABB82FBAA51905CF00
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        2620:117:bfc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3e:ab:b8:2f:ba:a5:19:05:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=229006d3-6443-4dbb-a657-3be8ee0950ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:57:d5:ba:c1:c4:09:d4:75:c9:93:25:c7:
                    55:10:85:43:20:f7:00:fd:c6:b5:3b:22:1c:ec:8a:
                    c2:90:ac:5e:a1:99:58:12:e7:f9:43:45:8b:bb:6f:
                    a7:7b:9c:85:c5:2f:57:f4:4e:8c:75:ba:6d:a4:78:
                    0a:fa:ba:e1:cc:6e:bf:91:46:ef:e8:e2:d3:6b:f4:
                    fa:0c:2f:14:4f:de:a3:1f:35:2a:63:92:fb:26:05:
                    a2:11:36:c7:d4:73:77:69:18:22:e0:45:87:4d:d5:
                    a2:14:97:b2:66:68:c6:4b:ca:78:cd:e2:3b:c9:00:
                    31:ca:bc:4f:f8:d9:a1:fa:47:20:51:51:4f:9f:10:
                    59:63:e9:3b:6b:19:95:2f:be:35:50:87:9e:af:ed:
                    cd:ea:ff:7d:48:dd:74:5f:38:28:51:3b:48:b1:af:
                    c7:96:d4:f5:63:ef:f4:30:80:3b:b4:52:3a:67:d7:
                    df:42:ac:02:e0:54:7d:97:a8:8b:aa:7a:78:35:b6:
                    e7:c9:27:f7:7c:a8:4e:7c:8e:45:90:0a:1a:6e:4f:
                    94:b3:77:a5:16:c2:5a:e2:09:cb:aa:36:d6:77:76:
                    2f:40:07:5f:04:68:ac:44:4c:ff:ca:d6:c1:ea:32:
                    40:9e:29:5f:2e:aa:a5:ef:c0:11:90:0b:7e:f5:c0:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:EC:B5:37:92:F6:A8:A9:EE:72:01:48:2E:55:62:A9:78:BD:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:bfc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:99:8b:a6:a4:72:f1:8d:d7:ff:0b:6b:16:0e:2e:f8:c0:
         8f:96:bd:14:cc:a3:7e:61:ef:40:a7:03:d6:72:07:8d:25:43:
         7a:e5:ee:03:f9:2b:28:a0:d6:37:b3:33:b6:27:36:5b:07:fd:
         54:3f:43:2d:17:e8:3a:b6:71:12:ce:40:28:dc:2d:2a:18:64:
         bb:7a:4d:ae:f9:52:4f:01:46:68:d3:c0:2a:57:60:42:26:03:
         87:54:a7:22:80:f7:3c:b4:81:68:be:dc:cc:7e:49:6d:ea:29:
         62:6a:4c:f8:87:46:cc:53:09:90:20:61:85:12:84:24:79:e5:
         d8:05:96:14:cd:ba:b6:9d:42:27:ac:79:44:6e:8d:c4:51:bf:
         29:02:ea:23:64:9c:a8:b4:f0:94:65:c9:d9:73:de:c9:7d:85:
         11:84:5c:bd:b5:59:1d:f5:00:85:da:81:77:b8:3b:77:ba:97:
         cd:1b:e0:48:dc:49:6d:bd:68:67:d1:23:7c:13:5a:c2:5c:8d:
         50:bf:e9:63:86:9a:47:b5:85:16:12:63:63:fa:75:ae:cd:43:
         b4:a1:ed:15:a7:20:d9:84:04:73:46:07:f6:e7:c3:87:39:b2:
         f4:7b:75:5c:0b:e3:3f:84:2c:df:59:1f:b3:00:f2:2b:98:e5:
         3a:11:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:30 2026 by rpki-client