Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa
File:                     229f4872-a0da-399b-9864-155c7c46ff10.roa (raw, json)
Hash identifier:          YT7/9BdjoB1HHYVHOq45sQtjGJOHe0cVFBZ6kVneInk=
Subject key identifier:   6E:79:EF:C8:E2:D1:9C:13:EC:70:38:A1:92:51:87:AE:6E:B6:8F:73
Certificate issuer:       /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial:       010D0C9F4328584E104EECFCCA4E1740CC554B80
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     11426
IP address blocks:        2620:7:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:ec:fc:ca:4e:17:40:cc:55:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=1c207581-0f35-40bb-a36c-31ae7ad0d3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c4:10:3c:4c:04:08:c6:21:26:2d:b8:af:c0:
                    ef:57:8e:3a:08:62:c9:6b:c0:7d:97:12:73:7e:24:
                    2f:62:a6:15:db:7f:e4:6a:2c:ea:81:2c:4a:af:94:
                    f8:bc:bd:e0:fc:23:f8:b9:c6:94:07:9c:d9:86:d8:
                    86:28:5e:48:9e:8a:4a:1c:83:61:d0:e8:18:85:76:
                    c6:25:4d:4e:ef:a4:f7:9b:d1:4c:b2:60:67:f2:db:
                    66:a5:09:2b:f0:93:40:49:46:ed:81:1c:a7:7d:9e:
                    50:7c:ac:7e:f3:92:20:53:3b:bc:9e:ac:21:52:01:
                    9f:56:72:6b:32:ec:18:d0:0b:9e:de:a3:59:5d:52:
                    ae:c5:d1:bf:af:63:bb:d2:c6:3c:21:93:1b:41:04:
                    99:7e:a2:74:30:e3:71:92:14:0c:9c:ed:b8:2f:52:
                    42:a4:7e:40:10:e3:8d:c2:08:d7:2f:75:9e:cd:cd:
                    13:b9:8d:a3:6a:60:57:7d:4f:3e:8b:b0:b3:6a:32:
                    84:ba:af:88:90:26:b2:b7:3f:71:02:10:63:42:c3:
                    99:cb:67:48:96:08:a5:90:22:a0:9f:e8:8f:ba:f4:
                    49:4d:a5:87:63:e5:60:ca:04:61:41:5c:a9:d0:ca:
                    9a:76:e0:30:a9:c4:bb:81:8d:15:cf:b9:0b:59:a9:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:EF:C8:E2:D1:9C:13:EC:70:38:A1:92:51:87:AE:6E:B6:8F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:58:a1:47:9d:ed:6a:6c:bc:55:b1:21:cf:40:ad:b8:f2:d9:
         9a:d3:7e:66:6b:5b:07:66:fc:dc:b7:f6:8f:c1:7b:1c:e3:43:
         90:c5:27:b2:4d:1c:a0:8e:16:fe:59:af:7b:25:6e:1e:a8:f8:
         4e:e0:5e:74:a1:a4:2e:d0:6f:f4:17:cf:f2:e3:09:fe:f4:90:
         c8:f6:d4:6c:de:e0:91:d8:06:35:1a:19:82:34:2a:2f:ff:50:
         dd:0d:e6:b1:ad:db:03:c1:1b:b2:18:57:7c:ef:02:b5:c0:99:
         e1:c6:67:f6:97:a9:80:d9:5e:a8:cd:e8:3e:82:ef:e7:7a:22:
         bc:a7:de:fe:de:b8:b9:19:77:94:06:a1:fb:8c:33:42:1a:36:
         38:84:e4:0c:78:14:57:5c:2a:64:0f:6b:1b:9f:59:82:3a:3c:
         fe:41:f7:96:2d:8c:35:63:15:4c:29:5c:10:0e:e5:34:0c:fe:
         c8:1c:d5:3f:e0:22:90:ae:57:8c:d0:4f:17:ec:ec:28:22:02:
         47:7e:a1:f2:ab:ec:51:ba:8b:c7:b0:db:2e:92:1b:dd:cb:0d:
         96:e9:f2:6e:cb:3f:a1:11:9f:88:35:f6:c9:50:b7:25:5e:ba:
         ea:63:c1:ac:c7:73:ed:be:59:0a:e7:4b:ed:e7:ef:a5:37:c8:
         1a:86:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:49 2026 by rpki-client