Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa
File:                     34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa (raw, json)
Hash identifier:          UckkmrZBqKOu1zcll4GvCIqj6DETJcbA8ePU5D5Kwuk=
Subject key identifier:   B5:F5:07:B3:FC:5D:B3:E6:42:41:79:5F:EE:51:9C:3B:90:13:BE:72
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F4328584E104ED0F8396B09F08CDF7CC0
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     11064
IP address blocks:        2602:f80b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d0:f8:39:6b:09:f0:8c:df:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=2606d40f-516b-4080-9404-053d3fd1650c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:87:ee:72:0a:3d:80:cd:07:b6:c8:3d:27:
                    9e:82:6e:1e:71:2c:e4:fe:e7:e0:dd:32:c3:ce:39:
                    3c:be:82:dc:e2:02:15:45:aa:43:15:09:0f:71:78:
                    40:92:2a:e9:6c:f9:a7:d5:43:3a:5a:e7:82:82:a1:
                    a5:58:67:bc:02:e9:bd:7e:e4:4b:a5:62:5b:8b:26:
                    2c:f7:6a:66:06:74:d2:cc:55:db:fa:7a:14:ef:d5:
                    84:3d:9e:25:2c:34:13:31:e6:69:8d:9d:15:c4:50:
                    d0:93:48:49:0f:30:44:42:5c:53:43:1e:a1:f5:35:
                    8a:eb:e2:ce:86:0e:99:a2:e3:d7:28:a2:0a:2d:b2:
                    d2:0f:dd:f8:10:46:56:a4:00:28:6b:00:4a:31:25:
                    af:e1:67:e1:93:0a:67:1b:bd:c7:67:88:6c:a1:34:
                    b7:33:c7:f9:69:98:8d:3d:7d:bb:64:6a:1f:7e:ca:
                    86:de:ac:bd:30:9c:13:46:9c:2a:c9:0d:9c:91:f1:
                    e9:07:30:a4:36:5d:84:1a:d2:cd:a6:0c:c0:d4:fe:
                    e1:01:2b:5d:48:e1:76:a8:03:eb:ba:99:60:87:f6:
                    73:d4:dc:ce:ec:21:83:bc:5e:f5:88:db:80:85:32:
                    56:9b:0f:ef:f5:93:eb:a8:67:21:a2:7e:b6:f6:b1:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F5:07:B3:FC:5D:B3:E6:42:41:79:5F:EE:51:9C:3B:90:13:BE:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f80b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:52:7a:2c:06:32:1e:6d:b1:31:9a:96:e3:64:9f:7b:f9:7b:
         18:b7:2c:e2:48:87:58:40:eb:52:f1:29:48:4b:9b:28:8f:b1:
         40:d6:48:b8:c2:dd:ce:2d:94:cd:2c:40:59:1d:30:a2:95:23:
         f7:55:8d:bd:06:9f:4c:3d:cc:5d:ab:c6:9f:30:85:17:e5:f4:
         33:33:c9:9b:65:3a:9d:63:93:74:14:b6:42:2a:e4:66:c0:59:
         25:ba:3c:ae:70:c3:a0:6f:71:e4:42:da:86:e5:a5:ab:60:48:
         31:e7:47:e9:34:d9:4d:bc:c0:0e:47:c0:f1:ce:36:b1:5a:0c:
         7f:a3:ca:78:59:ec:8d:05:27:dd:f5:06:b0:bc:2e:b3:9f:5e:
         d5:6d:26:ad:46:82:4e:2c:e3:91:4a:98:8e:a8:a2:38:02:73:
         ae:af:c1:bd:ab:e0:ba:30:56:ae:59:9c:b5:7e:bc:2f:fe:a2:
         48:c4:9b:66:9c:17:ad:a1:dd:c7:7c:de:a1:7b:5e:53:ef:a7:
         50:84:aa:2a:61:bd:a8:a6:84:9c:0d:fe:bb:25:49:c3:3c:0f:
         99:4d:3d:e9:1c:72:88:b7:f5:6b:ce:d2:63:db:f2:d0:82:2f:
         00:a3:05:a4:66:06:81:3e:24:e7:8d:1d:47:73:9f:8c:0d:d5:
         1e:fe:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:11:40 2026 by rpki-client