Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
File:                     b908c36a-0e1e-3898-b007-634966e865f9.roa (raw, json)
Hash identifier:          ppNI+HyD2X+sJvVYjRx1NXjPwzOPZlU6H1+10h+4Sgw=
Subject key identifier:   F9:2C:63:EC:D8:9E:3B:E0:93:61:91:0B:64:55:5F:C2:36:F4:D8:34
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584DD625B75351DDECA545104C00
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     61112
IP address blocks:        2602:fa4f:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b7:53:51:dd:ec:a5:45:10:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=1ac67c52-8756-4450-a904-c6bfcc3bfbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:1f:a0:7f:74:a1:67:d9:43:37:10:7d:57:
                    5b:87:7e:67:b5:55:99:fb:da:89:8c:5a:fa:0a:44:
                    ad:5f:a3:6e:b5:81:c7:6f:b4:10:23:6e:c9:fe:4f:
                    9d:b1:df:dc:ff:11:81:d2:aa:59:ee:35:59:a2:f1:
                    03:97:dd:41:33:9d:63:a2:60:79:da:25:b8:4b:51:
                    87:0b:57:f0:42:f7:79:76:e5:2a:29:63:aa:21:b1:
                    9c:39:5c:be:20:f4:5c:a2:6f:c3:ad:2e:7f:21:e9:
                    94:78:ff:cf:93:9a:ba:10:48:00:28:69:dd:ec:5a:
                    83:54:41:9c:d6:71:cc:4f:2a:98:f6:6c:54:6e:db:
                    a0:04:d6:e6:41:67:30:8b:2d:e1:51:6a:24:eb:25:
                    df:b0:c5:46:ae:8d:88:5f:ae:3a:0d:a2:a4:c0:a5:
                    bb:80:9b:4a:2c:6f:4c:70:00:d5:3d:45:2f:0f:14:
                    ff:74:6f:37:69:4a:d7:2f:ef:a6:a5:70:4b:49:21:
                    fb:86:cc:e0:10:4b:a6:4e:56:13:7e:e4:98:4c:83:
                    59:25:5a:22:3b:0c:d3:79:89:66:a0:c9:4e:54:89:
                    43:a7:54:34:31:1b:82:b0:83:c1:cf:14:ee:da:10:
                    20:24:ec:f7:d3:47:af:05:10:14:5b:27:f4:20:3a:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2C:63:EC:D8:9E:3B:E0:93:61:91:0B:64:55:5F:C2:36:F4:D8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:05:c9:d3:ea:2b:09:f8:9a:4a:79:b0:e1:e0:9d:6b:c4:
         99:a2:70:e3:09:8d:b0:a8:b0:62:c5:2f:fa:79:b8:d1:26:a5:
         09:0d:b6:75:8f:aa:ce:6d:2e:2d:c0:5f:59:ac:a7:f1:15:fc:
         88:b0:82:f8:73:44:4f:26:fd:1a:ac:a5:4e:8a:37:65:7e:d6:
         53:db:22:53:c8:51:5b:30:80:e3:c0:69:11:9b:0e:00:29:66:
         1a:9e:f7:85:56:bd:88:10:94:d7:31:77:ef:15:58:96:c7:90:
         20:ed:5c:29:a7:c9:a4:26:c4:54:85:d3:ea:92:c8:e2:3f:f8:
         43:2c:fc:40:61:27:7f:61:92:b6:38:c2:f2:55:bd:7b:a3:e0:
         f6:ba:e9:05:18:e0:f1:92:95:e5:1e:5e:51:5b:21:9c:5e:d6:
         e3:68:0b:3c:14:8c:1c:cd:3e:f7:7f:ff:f2:7e:3a:29:fd:1b:
         9a:27:80:b9:e0:37:dc:bf:72:dc:5f:94:1b:a0:6b:16:ad:d4:
         ea:45:e9:9a:e4:53:e5:b2:6d:1c:d7:de:64:75:1f:8c:da:40:
         31:fd:bd:e6:3c:25:7f:d7:07:a7:6f:04:74:2f:33:14:04:69:
         d4:15:ae:57:21:94:6e:6c:70:ff:e1:81:1f:7c:d4:29:89:d0:
         52:bb:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:58:50 2026 by rpki-client