Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
File:                     2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa (raw, json)
Hash identifier:          PazEn13eAjrx0cN0WEOPzSslrzzlfRYC5KpU07zSAGQ=
Subject key identifier:   9C:F9:41:65:A2:01:EE:0D:08:68:35:55:4B:90:97:D2:1C:22:9C:05
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584E0A6FF92B4BC70FCF79F97410
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     61112
IP address blocks:        2602:fa4f:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f9:2b:4b:c7:0f:cf:79:f9:74:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=4fb0e1d8-deb9-4d98-bf66-0b886716f634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:60:7b:a8:ff:6d:1e:e7:5d:9c:41:65:b2:
                    05:10:15:d8:e9:76:e8:c3:e8:29:63:77:e1:af:b0:
                    62:8f:8a:92:49:89:3e:4a:76:9c:8c:f2:10:6d:df:
                    5b:64:15:98:85:50:5b:7d:87:7e:f2:8d:b6:98:34:
                    d1:19:9d:c4:67:bd:c9:c3:04:fc:d8:47:49:fa:65:
                    e4:84:a5:a3:54:44:51:a4:6a:17:d3:58:ce:a7:42:
                    a4:85:92:f0:0b:fc:23:69:7a:b7:6b:de:24:ae:67:
                    21:6e:57:7c:4b:d3:54:d6:77:c4:59:72:ab:84:eb:
                    a5:41:92:73:6f:1b:b4:85:f2:f6:e2:a0:06:26:2e:
                    49:b7:92:87:0b:49:78:68:d3:ec:9a:8b:dd:f0:90:
                    5d:bc:c7:b2:bc:e3:17:de:6f:5a:88:de:ba:51:ff:
                    7b:91:d6:a9:83:00:02:43:6b:d5:5f:ab:9b:8d:59:
                    b6:19:22:44:68:63:82:d8:46:b1:16:ff:dd:d6:da:
                    53:13:15:07:2f:65:98:ba:52:01:b4:5c:bf:e2:aa:
                    79:54:0f:93:12:69:37:c3:d7:a5:fc:66:81:c0:34:
                    92:d3:2f:86:b7:8b:36:ca:2b:c5:12:23:20:ca:ff:
                    4d:5b:53:2e:a8:2a:9d:57:5d:35:1c:61:85:af:61:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F9:41:65:A2:01:EE:0D:08:68:35:55:4B:90:97:D2:1C:22:9C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:91:44:fe:3c:0a:f7:df:e0:93:0b:cc:89:fb:c9:d4:1d:0e:
         19:62:fc:13:57:dd:81:7b:6d:79:a6:b8:66:bd:5e:ec:a6:ee:
         25:8b:0a:88:22:2c:89:5f:45:86:d2:dc:98:de:13:94:d9:1c:
         2e:19:5f:49:97:0f:c7:5b:9a:6c:00:86:5b:d3:2e:9f:39:01:
         92:9b:10:f4:24:f8:f3:f7:3d:d9:f3:54:93:5d:d0:d6:38:f9:
         9d:f0:f0:cf:09:fb:12:3b:9d:31:8c:ee:c1:5f:75:49:43:70:
         c8:5f:6e:b2:77:2b:f0:13:17:f3:3c:d1:b3:ff:49:31:91:e6:
         4e:3e:e7:4b:7e:24:3b:9c:2d:97:c4:3b:9b:49:3f:40:af:56:
         b4:7d:eb:a1:bf:4c:8f:10:3a:14:ad:99:95:53:d3:73:40:00:
         e8:db:31:a3:2e:a2:eb:78:89:c0:1c:95:25:34:ef:54:c2:2a:
         be:fb:68:6d:45:36:29:5b:2b:f2:8b:6a:fb:15:a0:d1:a1:8c:
         80:0c:b3:4b:80:52:8f:c1:79:1a:07:c1:ad:70:df:a2:b7:68:
         26:e2:95:b9:75:a1:15:02:82:fb:8e:f1:73:8e:b8:13:e6:3a:
         0e:1a:95:4e:57:22:01:aa:8f:ac:de:37:ce:c3:f6:8e:e6:da:
         40:2c:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:44 2026 by rpki-client