Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa
File:                     a3c68675-a98f-39ec-a89f-2b77a3df4901.roa (raw, json)
Hash identifier:          Mqe9+gATdXf7/e+RXlCr/JSuBU3Z+d+mTT1mRoIgrHI=
Subject key identifier:   31:88:5C:D6:10:87:AC:17:EE:BB:14:A2:73:35:CF:82:DA:56:F2:29
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584E1E4494F1E3DFBEED50A0E080
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     36549
IP address blocks:        2604:1780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:94:f1:e3:df:be:ed:50:a0:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=59351e9b-823f-429b-82cc-9275e49de853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:43:eb:f9:20:5b:fb:c4:3f:b2:6d:e7:d1:
                    d0:38:ee:b3:ea:ff:b1:58:97:f0:1d:3f:39:47:52:
                    8f:49:ea:c2:8d:c8:73:c8:f8:4e:ad:fb:a6:6f:b8:
                    f1:d6:ca:60:91:42:06:2a:c2:79:f7:76:f1:9b:b2:
                    01:52:a3:4f:14:8c:42:f6:df:9c:4d:4e:48:2b:69:
                    a5:d5:6e:78:96:95:80:9e:08:aa:a4:4e:cc:1c:75:
                    ea:90:78:21:1d:4a:5e:f5:52:3a:e9:64:9d:3f:b0:
                    f0:23:1a:57:2b:3c:1c:cc:9d:77:22:4e:0e:c5:90:
                    4a:8b:6b:84:59:ea:94:cb:a5:ad:10:82:64:7a:b2:
                    60:72:c6:96:cf:30:df:af:5d:13:41:c1:c2:b1:1e:
                    ff:e6:ba:a1:9e:c0:c4:17:d8:3d:a9:08:c8:26:a9:
                    c5:e2:84:4d:6f:82:57:7f:37:d3:23:63:85:fb:49:
                    97:ca:d5:de:d3:eb:81:b6:fd:fd:f2:40:35:77:57:
                    a7:8e:43:47:41:23:fb:0c:cb:f1:ea:15:a7:a9:89:
                    91:26:08:df:5b:79:f4:8c:53:9e:78:2e:17:53:26:
                    0d:1b:be:2c:df:b9:e8:87:c6:a1:b9:b5:79:e7:05:
                    a9:e7:d2:ba:35:75:77:e6:d4:e2:7a:27:f9:f5:eb:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:5C:D6:10:87:AC:17:EE:BB:14:A2:73:35:CF:82:DA:56:F2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:56:ae:4b:5d:91:99:7a:ac:0f:80:d1:6a:79:23:5b:f5:83:
         d1:22:e1:82:1a:03:93:d0:ba:a0:d7:20:bb:23:a9:5d:89:97:
         48:bd:fb:b0:c1:7e:eb:e5:9b:8a:79:d8:54:9d:92:78:28:e2:
         cd:82:5b:f0:ff:9c:83:fe:08:3f:67:28:28:69:21:56:e0:7c:
         d6:0e:3a:e5:93:1e:53:79:7b:8e:f4:3c:a1:f7:68:2c:14:e2:
         c0:a6:f2:7e:e7:9d:3d:1d:a4:94:c1:37:df:9b:12:6d:5e:b4:
         3b:b7:64:23:00:a9:43:5e:22:66:b2:8e:bf:70:4f:c0:1a:6e:
         17:cc:45:7a:12:3a:8a:21:e6:6f:12:e1:8f:ab:d1:3e:72:4b:
         6a:ee:43:9c:ef:ac:92:3d:48:b0:a3:c1:81:9a:2f:84:60:1c:
         b8:b9:cc:3d:82:20:a0:3a:10:b4:93:3c:42:8d:29:a7:dd:32:
         83:ca:be:95:d8:97:98:81:ac:ec:b9:d5:1d:ad:21:13:5b:5d:
         ef:80:e7:b3:64:24:fb:37:84:4d:ea:70:05:3d:e0:09:02:7d:
         20:89:28:86:d1:b2:8a:7c:d3:cd:87:2e:66:75:5c:2b:fd:dc:
         8f:f1:0b:ac:17:4d:20:aa:f0:69:65:da:51:ee:9e:ac:f8:20:
         35:da:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:16 2026 by rpki-client