Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
File:                     c794535d-4f66-3ef7-abd2-35d8f1551d49.roa (raw, json)
Hash identifier:          jXSpRt4fNOt3RGDpPktYwxQduPHGKr9g3EjBST3MFPw=
Subject key identifier:   76:39:C7:2F:8D:0F:08:1A:8A:D8:9A:FA:D8:8B:09:36:9F:39:DE:27
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584E31CF1230FBE673222DE8A0E0
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     11650
IP address blocks:        2604:2e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:12:30:fb:e6:73:22:2d:e8:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=001fe3d1-0316-4f59-8639-c0b9be830ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:09:a5:1e:9e:25:4c:13:bc:39:a0:f4:6a:
                    04:9c:23:74:7d:71:96:f6:1f:d0:82:87:c2:ca:60:
                    75:45:11:4d:20:c4:f0:1b:1a:d3:f7:a4:7d:68:ab:
                    98:a3:54:42:d9:cc:65:5c:ce:99:37:d2:2e:ab:0b:
                    b1:9a:5d:97:bc:27:3a:ab:7c:dc:0b:2a:ae:83:c1:
                    42:3c:d3:47:5c:9e:80:e2:ee:d4:93:98:b5:17:a8:
                    6b:58:83:ae:7e:9e:58:a4:d1:3f:df:3c:ac:1b:ad:
                    bd:15:a8:15:a3:68:f8:15:54:be:ba:54:58:7f:5e:
                    39:74:c5:e2:0e:9d:08:33:32:cc:8f:8e:fe:d0:da:
                    49:08:c9:1f:b4:0f:6c:68:b3:70:fb:d5:68:f6:97:
                    1e:5c:6d:90:ad:f5:47:0e:ed:a6:93:19:71:f2:27:
                    2a:ef:c2:0a:30:98:fe:fa:36:2d:c4:dd:15:e1:ea:
                    01:b6:5e:d3:0e:2a:55:45:e5:1e:ce:a7:31:67:70:
                    63:8c:42:15:10:65:1e:f3:b8:24:1d:31:5e:02:fa:
                    b4:33:26:00:fd:89:ad:cb:ed:5e:91:03:b2:29:ef:
                    32:4c:1d:4b:df:67:55:88:b4:d3:db:b7:53:a8:35:
                    2b:51:46:81:7b:58:98:58:a0:5c:32:5d:2a:65:87:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:39:C7:2F:8D:0F:08:1A:8A:D8:9A:FA:D8:8B:09:36:9F:39:DE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:32:08:7e:9c:59:dc:d2:80:8b:77:cf:91:46:fa:37:ed:
         de:e7:68:2d:2b:89:6a:7c:15:a5:f8:17:d6:13:b4:13:7e:52:
         c9:96:cb:a3:6c:a5:68:8d:69:a7:8d:68:08:16:9b:74:46:e2:
         3d:38:99:f3:4f:e4:68:9e:37:a2:22:8e:c5:e5:de:21:0e:f5:
         78:54:4c:cc:bb:5d:93:f6:f8:9c:ea:6c:2d:61:cd:4d:1b:49:
         11:48:a2:60:e7:9e:f2:ab:c1:f1:de:39:2f:fb:86:de:fb:6d:
         79:9e:38:83:88:5c:ab:c9:af:05:24:5f:d1:3e:7a:59:dc:a7:
         c0:29:4d:67:09:97:de:84:3a:55:48:de:74:06:ae:04:39:65:
         2f:3d:f2:5e:63:1d:c5:5a:7b:4d:47:64:4f:0d:ae:e4:58:87:
         c2:15:1d:5d:14:bc:2f:64:6f:eb:7c:28:78:59:c8:6b:ef:06:
         b1:d3:e3:e7:c0:ba:51:bd:d5:bc:17:96:c8:fe:d9:28:77:21:
         7c:b9:6e:4e:e6:fb:1b:02:48:e7:4b:69:85:6e:f6:45:16:7c:
         77:26:8b:d4:9f:7c:28:cb:7d:38:6f:9d:d5:c3:18:8c:cc:7d:
         88:2e:e8:e6:76:cb:94:9a:a2:b0:d6:c1:ef:0b:40:08:d0:36:
         5a:5a:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:04:54 2026 by rpki-client