Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa
File:                     c299288c-7614-30cd-a6e7-c56fc746d67e.roa (raw, json)
Hash identifier:          BGfyTCQMET/ZOG/FDkcQgcOXwIkUPxskY/vXSa7rDzk=
Subject key identifier:   64:9C:AE:67:45:F5:CA:9F:D9:35:11:D8:B8:1A:D5:55:E6:06:CA:30
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F4328584E0A6FFAA7DB1A52AB52882980
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     33322
IP address blocks:        2607:fbb0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:fa:a7:db:1a:52:ab:52:88:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=90e32b42-158c-46a0-b1e4-2bae809b6cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:3c:99:95:ad:27:48:14:4b:20:c1:a9:7b:
                    db:e0:7f:1f:91:d4:10:b1:9b:7b:ef:7f:f4:dd:e0:
                    a9:25:4e:93:6e:71:43:4a:e2:e4:02:31:66:46:54:
                    1e:a7:cd:91:e8:52:3d:0f:f2:bb:ce:83:c5:2e:b5:
                    c8:18:b0:fd:5a:25:a1:cc:ee:e2:d0:56:22:43:1e:
                    6b:52:f8:13:84:c2:7c:bc:3a:7d:62:1e:3e:24:c7:
                    03:11:37:81:cb:01:b1:c1:e3:f9:d3:93:fb:26:bc:
                    a1:c0:4c:b1:0b:5a:ab:38:2b:1d:37:30:ca:77:4e:
                    f1:e9:4d:7d:26:ca:61:1d:de:a2:ae:d4:27:19:ca:
                    59:1d:d0:21:71:7a:89:e1:1e:ef:dc:9b:6d:c6:2c:
                    f7:5f:aa:a1:39:38:fd:9c:ad:0f:f3:90:79:84:ef:
                    1d:26:82:7d:8e:82:f1:1a:5b:ed:a0:3b:f6:52:c8:
                    c7:70:1e:f0:98:d8:a3:c0:2e:5e:2d:26:ed:6f:ee:
                    b8:c8:06:a8:a4:d8:e0:85:a9:08:10:1d:0e:68:c8:
                    3e:2c:d5:38:ab:fb:3c:0b:7c:67:41:41:dc:83:c7:
                    f2:31:ee:71:67:36:b0:8e:3a:79:9f:51:0c:99:27:
                    74:41:26:d5:2e:0c:e6:36:2c:4a:7d:a8:d5:bf:66:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:AE:67:45:F5:CA:9F:D9:35:11:D8:B8:1A:D5:55:E6:06:CA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fbb0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:8e:cb:79:90:48:91:bf:3f:cf:6b:64:f1:2f:50:ef:ee:97:
         69:5d:4c:b3:22:f6:9d:e4:d1:7f:44:48:ad:5f:7e:c3:c7:d2:
         9f:24:0f:6a:80:02:17:9c:ed:f5:a2:af:87:f2:a2:3c:34:b7:
         26:53:09:8b:85:b3:21:84:22:22:89:ae:b2:b5:58:94:7c:6f:
         43:89:37:38:01:be:ef:60:96:23:27:70:44:87:86:cf:d3:1a:
         0f:ef:17:6a:41:de:d9:79:99:58:14:52:f7:78:4c:47:d4:82:
         89:ad:b8:7d:4d:2d:49:7e:9d:14:ec:8c:db:46:a0:b4:1d:db:
         1f:6f:97:4c:17:a9:e7:09:3a:5b:e5:6c:61:57:02:d3:ca:aa:
         97:51:c2:4f:37:ba:11:26:4b:a8:ac:dd:f5:ce:b3:0b:3e:15:
         79:20:fe:fe:8d:1e:58:f0:08:7c:16:b1:56:f7:bc:06:84:23:
         d4:73:52:ba:63:92:3a:d2:b3:0a:00:18:bd:0a:9a:f4:90:26:
         ef:f3:81:62:fb:34:91:9f:9b:05:98:bf:88:cf:4d:82:ff:9d:
         bb:54:a0:e6:cf:34:99:43:ae:63:72:e9:e9:b0:e5:d2:1b:70:
         06:fb:49:ab:37:3f:7e:1a:25:50:da:ec:e4:57:74:4a:83:f8:
         b7:b7:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:03 2026 by rpki-client