Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
File:                     58ea7f89-b5b6-3671-a6c0-811e6620195c.roa (raw, json)
Hash identifier:          uAhq/+LFqAEXTcOdX+CdBVIMufIb1t8xTf1BikMIGqs=
Subject key identifier:   7A:B0:3A:B4:5A:2F:6D:97:63:D9:92:DD:8B:B8:7B:5F:40:89:5C:74
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584E0A6FF754C3F9C360CCDE1E00
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     54885
IP address blocks:        2601:3000::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f7:54:c3:f9:c3:60:cc:de:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=2c564f7d-b9ee-4177-9939-847b99e799f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:0c:e8:ce:64:b9:6c:d9:e4:39:d2:de:3c:
                    c5:07:c7:76:74:84:fe:25:f1:26:ca:c1:82:5b:6f:
                    82:0f:ff:5e:3a:a1:73:0c:c7:66:50:56:90:46:ca:
                    9d:02:19:78:e0:ab:0f:ba:59:57:8f:f2:59:ed:7f:
                    c8:8d:e6:c0:a3:d9:b6:0c:ed:a1:b6:c3:e0:ee:d9:
                    17:37:13:3d:a7:e6:71:4b:61:f8:d8:a0:64:f6:0f:
                    47:06:13:f9:ba:a9:91:ba:75:7b:93:e8:3a:e4:f1:
                    76:09:e2:ee:1d:65:ee:6c:7f:52:4d:58:aa:ee:04:
                    82:79:55:54:a5:22:cb:89:e2:d8:e0:cf:f0:3c:c6:
                    05:3c:d3:7c:32:76:02:20:dd:ab:d1:05:7f:4d:e2:
                    f4:4c:49:90:2a:6a:08:7b:1e:6a:fe:f7:61:61:59:
                    19:3f:60:41:72:af:3d:4e:3a:4f:41:cc:3e:06:39:
                    ce:2c:68:29:14:11:18:d2:1e:de:08:f9:5e:f6:4f:
                    a1:d8:5f:e7:88:91:3a:0a:f6:83:31:82:10:23:c8:
                    cc:b8:af:c5:25:c9:70:ec:65:c9:c8:35:fa:9a:50:
                    5b:f0:8a:a0:75:19:38:d4:1f:ad:ac:bd:ab:13:a3:
                    23:73:cb:01:dc:21:27:3b:ab:8b:a5:3e:5e:13:2d:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B0:3A:B4:5A:2F:6D:97:63:D9:92:DD:8B:B8:7B:5F:40:89:5C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:14:04:13:fb:00:0a:62:95:54:78:45:ec:70:28:8e:26:5f:
         cf:69:a8:af:3d:db:41:f5:1c:cd:57:b8:3f:3b:35:e9:d8:8c:
         35:49:13:3a:f6:8a:7e:ce:09:09:2f:e5:7c:f3:af:b1:da:06:
         f2:d3:51:71:19:fd:f2:a1:0e:02:27:90:59:9c:7c:71:80:41:
         68:bc:36:c0:72:8f:e9:8d:7c:f7:6a:f6:de:a1:20:52:7a:ef:
         f6:dc:24:fb:1e:e0:d8:dd:51:7c:a3:7d:fa:17:0c:98:8c:ae:
         18:54:7c:a0:8d:c5:5e:0c:fd:64:aa:10:3b:f6:bc:de:98:c2:
         07:0d:bd:86:ee:43:74:b7:1a:d5:6f:ad:d0:44:40:46:95:66:
         89:33:d5:32:d4:26:97:e1:a4:9b:16:11:fa:55:44:25:a7:ae:
         94:13:85:77:33:6f:8e:42:14:e0:81:da:44:53:ce:a0:b7:8c:
         5b:b9:73:28:5a:4d:69:05:95:2b:88:45:5d:b4:fd:63:9d:16:
         8b:f8:4a:51:63:7f:91:d9:1a:53:73:a1:af:a0:3d:d4:fb:65:
         a6:fa:68:e3:d3:00:d3:aa:46:8c:f9:25:ed:a7:99:36:ad:de:
         a9:5a:20:76:ab:9e:6b:9a:56:5c:8b:34:3f:90:7c:55:c0:c3:
         e2:9a:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:58:49 2026 by rpki-client