Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
File:                     70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa (raw, json)
Hash identifier:          3mNuKPCMRB1jbZNcXQeOO6bN8atcGVmgD/2qUfdruxI=
Subject key identifier:   C1:04:FC:28:D4:D2:E5:2D:FF:3F:E8:E5:B8:D4:EB:D5:2B:1C:ED:6D
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584DF4DB5BBF609F6DD0827B6DC0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     18672
IP address blocks:        2605:bb00:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5b:bf:60:9f:6d:d0:82:7b:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=f5ef317b-4aac-445b-b8a2-eab3aa368148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:1f:31:39:99:f3:d7:45:4f:75:72:c6:af:
                    4c:56:61:b7:bd:a7:93:64:db:03:f2:62:fc:82:b4:
                    b9:1f:0e:f9:6f:ee:6a:f0:86:00:94:d8:6a:52:d6:
                    53:ce:c0:4d:b9:35:39:3f:3b:aa:fd:d7:27:d0:b3:
                    b9:ba:23:4a:f4:6f:54:e0:18:46:90:e0:ca:8c:a0:
                    16:58:5b:94:77:0e:eb:88:45:b5:8c:3e:cf:fb:25:
                    aa:52:9a:ab:30:dc:08:25:a0:3c:a2:8b:84:60:f2:
                    7d:ac:26:65:bb:73:fc:2a:aa:61:ef:aa:aa:12:1d:
                    36:8b:27:04:cd:89:d7:dd:74:6e:47:4a:26:ea:5b:
                    73:36:cd:ac:c5:3b:ec:a4:69:a8:37:01:b9:9b:bf:
                    f1:0c:5d:84:ee:59:bd:e7:fd:ee:0e:b9:c2:44:24:
                    a4:71:a4:ea:5c:ea:ea:83:1f:57:a5:ec:57:08:28:
                    bc:27:47:31:fa:ae:90:51:8f:75:e0:fb:b3:f5:79:
                    66:23:ab:3e:a7:73:cd:35:1e:10:8e:cc:a5:5d:dd:
                    6d:e2:2c:0a:90:6e:a6:70:28:2b:da:d5:9f:1f:2d:
                    dc:f0:74:7e:24:23:22:1d:37:41:bb:ef:c2:d9:a4:
                    59:f8:3b:a6:05:53:50:f8:ed:7a:50:91:12:ac:c0:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:FC:28:D4:D2:E5:2D:FF:3F:E8:E5:B8:D4:EB:D5:2B:1C:ED:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bb00:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:89:03:75:6a:bc:5b:1c:7d:91:c6:e3:e5:f3:a7:1e:9f:
         45:e4:3b:99:15:24:c3:39:3d:91:4c:df:27:1d:c9:13:f8:f5:
         5a:fe:86:7d:20:34:5d:44:20:cb:96:3d:53:7a:a2:f7:24:af:
         a1:36:73:e0:55:f5:19:20:d4:fb:ea:0f:a8:eb:1b:40:13:0e:
         a3:b0:c1:5d:11:46:a7:26:b6:d8:bc:86:c4:0a:36:4c:d8:c6:
         2c:d9:e7:90:5f:51:0f:f1:55:7b:82:d5:77:03:0c:2f:10:ed:
         42:6b:fb:06:80:88:e5:71:4e:fa:14:dc:bb:3a:5e:bf:8d:49:
         58:0a:af:65:c1:13:8a:58:1c:21:c9:ec:91:c5:a3:d8:43:f8:
         e4:6b:e4:4f:b6:db:c0:8f:a3:a3:58:8f:a9:90:c1:05:0c:24:
         c3:c3:34:8d:53:d7:95:68:c1:1f:5b:e2:1e:26:78:0c:16:6a:
         d6:0b:8f:23:52:47:6c:75:11:1b:d9:58:3a:52:da:1e:e1:a5:
         61:fa:7b:e8:d2:d2:5e:6e:fa:f6:47:42:c1:af:59:d3:cb:a4:
         b4:19:f4:02:d1:e9:68:e5:e6:12:1c:35:55:19:72:fc:d3:d8:
         c1:66:9c:5d:14:4d:fc:ed:74:67:9a:d0:f1:e9:49:25:5a:6f:
         9b:42:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:03 2026 by rpki-client