Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
File:                     9c5e49fc-a177-3465-bd18-2f3d04e61638.roa (raw, json)
Hash identifier:          sUdWxp1SqYsMqC1pYkbO7qKunUPWTgu74ZNo2+/AeUc=
Subject key identifier:   38:3B:91:6F:01:40:63:FA:D7:34:11:B1:DA:FE:1B:3A:0E:00:B1:37
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584D80FFFB6715077F98A8386AC0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     16839
IP address blocks:        2606:3600:5520::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:fb:67:15:07:7f:98:a8:38:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=e56f53f2-2fa3-49d1-8518-29fb8d8bf578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:dd:ba:de:85:d8:be:d5:01:1a:69:c5:22:
                    21:21:df:69:1f:92:a3:8a:f5:36:0a:e5:43:05:a9:
                    28:e8:32:0e:28:ce:65:d3:2c:8f:8e:ee:48:05:db:
                    c2:e8:74:e9:ac:20:4c:46:5c:1a:93:ed:aa:0e:f8:
                    2a:53:10:40:83:2b:c3:46:41:fa:d0:b7:7f:86:62:
                    54:01:48:0b:3c:b3:2c:b4:b3:9f:a9:f6:1d:46:64:
                    82:d8:69:df:b9:7e:54:29:26:d7:2d:0a:e0:b4:a5:
                    2e:f2:12:38:a6:ff:d4:eb:51:d6:77:c4:c2:6d:1c:
                    a8:c9:6b:f2:dd:47:93:23:c4:06:fb:bd:36:fa:2a:
                    48:84:87:af:b3:bf:d4:79:4b:e4:09:d5:a1:1a:b2:
                    87:cf:61:8e:75:57:72:06:0f:c5:a7:67:ea:17:0a:
                    04:69:67:bb:32:4e:e4:6a:d0:da:11:cb:b8:85:bb:
                    17:3b:e5:22:2f:f3:50:bb:71:3f:da:99:cc:fc:dc:
                    25:a4:4e:c6:51:7c:6a:45:70:d6:7b:49:ab:c2:19:
                    e1:7b:57:62:64:2d:76:43:a1:2a:94:d9:e5:d1:c6:
                    4f:7e:1d:9a:1e:4f:7f:59:3e:56:cd:2b:07:d6:42:
                    ab:fb:68:27:1f:62:b7:d8:46:4d:d9:ae:dd:9c:6e:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:91:6F:01:40:63:FA:D7:34:11:B1:DA:FE:1B:3A:0E:00:B1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:5520::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:01:7c:7a:7c:ce:06:48:8c:15:c1:f8:c4:e6:ef:7e:52:f2:
         61:4b:88:c2:45:fa:1c:18:c5:99:a8:b7:e6:ae:a7:63:57:d6:
         45:b6:dd:89:a9:f3:8f:d4:aa:bf:a6:0b:24:15:73:2c:42:32:
         51:cc:f0:44:89:96:76:0a:d8:07:29:71:c4:6b:0b:15:20:dc:
         c0:dc:0c:ae:16:89:9c:0a:43:36:a8:92:ba:3f:de:f6:63:73:
         74:6c:d2:a2:ed:5a:d8:10:34:d7:7c:b5:8d:a7:63:02:1e:bc:
         5c:c2:9f:47:d3:09:4f:99:66:27:c3:10:e8:fe:25:72:c5:0d:
         73:4a:e7:a7:29:6c:ba:e6:36:0b:2e:23:47:fb:8f:23:6a:b0:
         c1:ed:ec:21:c5:b3:20:39:1e:b6:28:dd:94:d1:c9:27:f9:b0:
         cf:ae:f9:c8:54:81:be:05:97:7d:1e:99:7d:2d:3f:ef:ae:e5:
         42:d9:93:20:2c:7f:f4:10:40:64:45:e8:73:b5:87:52:ec:b2:
         a3:10:b8:26:62:c3:e5:f7:ac:d6:9b:c8:94:b6:fb:e1:cf:c7:
         40:52:c3:33:49:44:38:3c:3f:a1:70:be:dd:43:9a:c7:ae:d1:
         ae:47:8e:e7:3a:f8:70:c2:d3:f5:b3:86:8a:71:6c:0d:de:c8:
         fb:21:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:50 2026 by rpki-client