Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa
File:                     b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa (raw, json)
Hash identifier:          OaFkz6R4x6pBjO6t0LrvmFPRf2pqT7Ckfk3O9RqBK28=
Subject key identifier:   63:F3:AD:A2:EA:4F:6F:DB:A0:39:43:D1:00:CD:7F:4B:0D:22:07:D8
Certificate issuer:       /CN=88ab69cc-0db2-48cd-a72a-666df1ecb5bd
Certificate serial:       010D0C9F4328584E1FA9B62FEBC7E85402861700
Authority key identifier: 88:8E:C2:2A:F9:E2:07:E5:94:15:DF:32:D9:D2:20:22:1D:7C:6E:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     14430
IP address blocks:        2605:2f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b6:2f:eb:c7:e8:54:02:86:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ab69cc-0db2-48cd-a72a-666df1ecb5bd
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=0a9db710-8f0a-4dad-8c10-eb1e3e456614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:94:5f:ad:6e:c7:d9:32:28:5a:c0:93:08:
                    8e:76:b9:55:f8:3b:46:c5:11:cd:a0:eb:f2:05:b1:
                    a2:a1:4f:50:be:ee:94:9c:44:12:e8:00:fc:8c:e6:
                    78:3d:75:09:c4:60:00:b5:1f:2d:04:0e:65:0f:92:
                    48:ca:0f:a7:22:8c:2e:cd:9d:39:06:75:0a:47:97:
                    d0:c5:74:1c:1d:49:ce:29:03:28:a0:da:73:99:c2:
                    81:fc:b5:fe:0c:d9:81:d1:80:99:6b:cc:ca:b4:d7:
                    0d:9d:3c:58:d1:fd:80:9c:5d:98:ad:06:79:5c:b7:
                    6e:66:b7:24:58:f1:39:56:fb:cd:a6:69:9f:f5:27:
                    a4:b0:b0:1a:80:88:a8:28:df:fa:4b:10:ee:4a:34:
                    9e:6b:17:c7:28:9c:0f:d6:3c:97:bf:74:27:16:db:
                    37:f7:4f:80:c8:98:48:af:9e:c9:0d:9f:39:e7:7e:
                    3d:40:be:a7:47:52:7a:23:42:d3:e5:dd:76:d7:c4:
                    5d:31:7c:f4:d4:0a:8a:4e:af:ec:d7:1d:ec:b7:ce:
                    96:28:75:9c:d1:cc:a6:39:14:43:64:5d:eb:83:61:
                    fa:a9:10:41:2c:2c:23:6b:cb:58:b4:c1:5b:f7:23:
                    46:c6:b8:d7:ab:13:81:6b:ff:c1:84:c0:4a:73:4f:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F3:AD:A2:EA:4F:6F:DB:A0:39:43:D1:00:CD:7F:4B:0D:22:07:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.crl

            X509v3 Authority Key Identifier:
                keyid:88:8E:C2:2A:F9:E2:07:E5:94:15:DF:32:D9:D2:20:22:1D:7C:6E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ea:42:a7:7d:bb:36:67:20:a3:ea:92:1c:45:3c:6f:2f:f8:
         84:7a:9b:3e:f0:9d:b5:71:f9:57:79:4b:26:94:3f:de:2d:13:
         2d:86:c7:91:71:61:c2:8c:c2:56:27:f9:35:0c:9f:63:46:9d:
         1e:43:4d:b4:43:d7:70:46:d3:54:f1:32:de:96:6d:40:6d:c5:
         a1:6a:6e:9d:b2:2c:fc:f5:a1:b0:1f:e1:62:db:f5:98:cd:56:
         a0:41:23:f4:82:0a:ab:16:4e:f3:51:df:cb:1d:c5:d2:86:19:
         6a:3b:bd:3d:55:55:12:7f:04:2b:d7:c3:24:43:13:fd:05:11:
         c6:23:b7:ba:39:78:73:bc:4d:cb:d3:71:b4:55:14:84:a9:07:
         10:30:ec:ce:40:90:6f:66:1f:50:89:c9:e0:8f:b2:19:33:74:
         2a:a8:17:33:d7:1d:70:a3:aa:e4:e0:48:e3:a9:1e:c4:36:8f:
         92:c1:a6:32:96:18:2d:2b:a2:b2:5f:70:b8:0c:36:e0:6f:0a:
         09:19:bb:d3:af:fb:30:28:22:c0:f7:78:34:7e:92:c4:1d:c8:
         ac:1d:09:e1:93:29:3c:80:6a:8f:d2:28:63:ee:28:dc:e7:ae:
         c9:21:1b:a5:61:27:03:3d:f5:6b:79:8e:5d:48:c1:e9:a6:ba:
         b4:d8:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:09 2026 by rpki-client