Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
File:                     5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa (raw, json)
Hash identifier:          /HSEeTyUXIPLjCX2nawYH/ooOFTEsAFJjarFA15vFUU=
Subject key identifier:   59:4D:2E:8B:DA:04:88:4A:C3:25:9F:87:79:70:EB:E5:D8:85:71:F0
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F4328584D67DFD0EFE9424B7F151E4E80
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2606:7740:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:d0:ef:e9:42:4b:7f:15:1e:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=aa507187-18dd-4728-bed0-e4df60286031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:52:49:e8:c6:09:79:eb:ed:e0:44:3a:46:
                    a3:1e:b5:1c:5b:43:6b:90:a5:77:a4:c3:a5:33:7f:
                    12:02:1c:28:a9:db:b0:57:e0:f5:13:6f:c4:82:f8:
                    e6:c8:c8:2b:5d:c0:e1:f8:5d:8f:e5:87:4a:44:27:
                    bd:fc:91:6c:af:f0:2d:c2:81:71:c5:fd:ca:da:c7:
                    73:f5:a7:02:90:d3:bb:da:e9:c8:17:f7:a3:08:c9:
                    8c:da:28:e9:4a:9e:35:23:a2:6f:cb:56:73:62:bb:
                    b1:d3:33:be:37:28:a9:af:67:c2:17:ae:38:51:54:
                    81:9f:c7:17:1b:eb:d6:62:36:67:4f:72:48:5b:33:
                    c9:c4:d0:2c:db:64:f0:66:15:d4:47:5f:85:77:cb:
                    b9:d6:66:0e:bf:b0:ba:8a:b4:8b:f8:57:68:86:67:
                    19:eb:45:ae:4b:ad:53:d1:f1:4a:9b:ee:99:1e:2c:
                    c3:b9:38:3e:03:07:5f:80:b5:47:67:e6:d1:4c:fa:
                    4e:9f:1d:e6:fb:22:33:69:ea:fc:01:93:9a:81:92:
                    f5:d9:db:6b:71:a2:f8:dd:60:6f:ac:02:3e:09:eb:
                    fc:c6:02:26:dd:b8:86:49:50:6d:93:29:97:bb:31:
                    a7:a5:45:80:25:c1:ba:ca:3f:ba:e9:f4:35:07:71:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:2E:8B:DA:04:88:4A:C3:25:9F:87:79:70:EB:E5:D8:85:71:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:ee:a5:5b:98:7f:2b:94:ec:ca:0e:ab:b1:69:34:91:8f:
         a5:13:33:78:97:ab:3e:3a:88:6e:eb:6a:b6:93:78:d3:c1:39:
         ef:d6:3e:a8:dd:e9:b6:d1:76:cf:c4:dc:42:b2:81:0e:d1:50:
         25:93:55:63:63:1a:de:0e:60:e0:64:e2:7c:0c:c9:20:ff:e4:
         f7:02:98:04:8d:35:f4:85:b8:3b:ff:13:ff:aa:97:d4:6f:54:
         12:e7:79:43:e1:86:17:c0:93:ae:15:51:ee:f0:9a:90:30:c4:
         fe:c8:44:ad:e3:df:b6:68:73:a7:be:87:af:66:0e:a7:a0:86:
         50:3e:f7:a0:f2:82:4a:ed:ea:ed:0b:af:95:04:71:56:91:3c:
         02:e9:39:d6:9b:97:2c:e9:83:a9:de:22:c8:78:86:45:f6:34:
         6a:32:48:63:52:d6:eb:55:2f:e7:c1:55:7e:09:0b:66:05:8a:
         a3:da:6d:14:75:f4:e9:b6:df:97:b0:84:2a:f7:dc:9c:ef:34:
         9a:b5:27:e4:83:07:79:64:92:8f:1d:ab:4a:35:6d:fa:8e:2c:
         44:1f:6b:cc:dd:c3:56:ca:e4:65:f5:ed:29:42:a1:8c:24:0e:
         ac:21:0f:47:12:c7:a6:dc:f3:d6:fe:cb:b1:12:69:e4:5a:47:
         fe:88:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:12 2026 by rpki-client