Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa
File:                     4c9b872a-c498-3caf-a727-0a8324532537.roa (raw, json)
Hash identifier:          1+xLal/ZSutUbAkuFuScVbCe4LOeMVHwKPZdvCD29b8=
Subject key identifier:   CD:F3:11:C6:51:1C:3D:FB:D1:F5:D0:0E:AE:0E:AF:B8:64:B9:91:2E
Certificate issuer:       /CN=13d1e2d5-5089-4514-80fb-652631b3cfab
Certificate serial:       010D0C9F4328584E1A143304DCBB1E3956832DF0
Authority key identifier: 03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     62917
IP address blocks:        2604:82c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:33:04:dc:bb:1e:39:56:83:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d1e2d5-5089-4514-80fb-652631b3cfab
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=6826682c-b230-4295-b47f-caf11d0ad69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:f5:e8:75:01:2c:08:ed:dc:43:6a:fd:94:
                    09:fe:d5:f8:9c:76:40:22:ba:d3:74:d9:93:61:fe:
                    6f:2e:c4:43:6f:70:95:6b:0e:bb:a3:b4:d2:3b:d9:
                    12:83:d8:37:8c:31:e9:c8:43:80:2c:9b:69:56:50:
                    ca:d4:c7:5a:1b:ea:36:5d:c8:30:7d:82:ea:e8:10:
                    31:f0:05:96:6b:0b:e3:7b:34:a6:05:9e:01:dc:b7:
                    99:5b:35:0a:49:91:3d:f1:6c:6b:cc:f2:41:b4:0c:
                    d3:a9:75:34:f0:ab:50:61:02:bf:e1:e3:b3:7b:d3:
                    a5:ab:b9:71:51:54:dd:b6:71:4e:6e:bd:e8:57:1d:
                    b8:66:d2:37:3f:e6:9f:89:6e:89:f5:f3:a1:46:77:
                    71:1e:cd:09:50:20:ce:ed:b8:1a:70:c3:bf:58:e0:
                    3e:98:16:3e:6d:22:9f:39:74:30:a3:43:dc:4b:97:
                    cc:c9:1e:f3:3b:3f:c0:61:80:4b:31:03:c6:5f:ce:
                    fa:cf:2b:5c:0c:48:d9:1a:ef:64:a4:81:5f:cb:70:
                    89:43:33:ff:21:e1:35:0d:ed:c6:fd:fd:39:0a:11:
                    22:b1:62:b4:1b:71:20:81:94:91:04:85:c1:90:fc:
                    bf:1a:96:e6:ee:9f:ab:5f:12:69:88:70:55:dd:a1:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F3:11:C6:51:1C:3D:FB:D1:F5:D0:0E:AE:0E:AF:B8:64:B9:91:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl

            X509v3 Authority Key Identifier:
                keyid:03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:82c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:6b:c2:a7:76:91:fe:bb:5f:a9:c6:35:fc:69:e8:ca:7f:
         3a:c2:d0:b2:9b:e2:75:25:45:3e:52:0c:be:1c:d5:7b:1c:aa:
         2d:b0:47:fe:d5:3a:03:56:0d:9c:66:01:e8:f8:74:0e:ca:42:
         d7:97:d2:57:c9:73:0c:46:c8:d6:47:96:cf:ab:9a:8a:e9:ce:
         b9:dd:f7:ef:23:51:a0:ad:b1:68:a5:48:d4:21:cb:bc:8c:8d:
         4a:a7:6d:45:f4:62:4d:a1:a0:e6:12:dc:7a:1b:8a:0f:76:a4:
         4b:28:c0:f1:b1:31:0f:3d:4e:2b:33:c7:60:dd:a4:54:63:2e:
         26:f7:a7:30:df:1e:e7:4e:db:ff:19:df:b4:85:7b:59:11:65:
         49:61:26:4e:16:9a:8e:ce:96:5e:43:bf:bf:05:16:25:b8:b2:
         9f:dc:b0:f4:b3:87:90:87:63:8d:a4:ab:99:60:75:ea:8b:e4:
         35:3b:63:2d:3d:29:c4:0c:1d:85:cd:d8:6b:5d:89:85:12:d7:
         3a:01:af:24:84:96:42:d2:ca:3e:89:40:58:89:52:64:b0:29:
         d8:10:c9:ca:f6:f3:1b:ac:de:96:ce:e4:19:e7:9e:2a:7a:25:
         4b:db:e7:47:1a:ae:a5:c2:47:93:5c:1f:58:81:b4:89:47:a0:
         5c:c1:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:45 2026 by rpki-client