Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/ac84482c-6e9e-34fd-b9b2-bc78e6f8e04c.roa
File:                     ac84482c-6e9e-34fd-b9b2-bc78e6f8e04c.roa (raw, json)
Hash identifier:          CTiH+7mDDi5dZZFFSIUEUOfFPCzk3beoUt/P01EljxE=
Subject key identifier:   25:5D:0A:95:5C:B8:8C:B5:89:27:73:B3:D8:39:D3:8C:0E:06:84:2B
Certificate issuer:       /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial:       010D0C9F4328584DF4DB9D73AD9EEC633762B160
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/ac84482c-6e9e-34fd-b9b2-bc78e6f8e04c.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     36850
IP address blocks:        2600:2701:4000::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9d:73:ad:9e:ec:63:37:62:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=5c2589e2-81cd-4d67-805c-bbfbfe7adf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:aa:36:c8:a2:55:8f:80:65:cc:3c:b8:3e:
                    78:50:07:3a:b3:b9:05:b1:2f:84:96:36:0a:a2:02:
                    19:06:b9:23:99:88:c3:a1:38:df:39:31:a0:56:5a:
                    62:40:44:cc:a4:5a:8a:34:e4:4c:32:83:ef:55:0d:
                    e4:3f:ab:68:44:ed:1b:30:d5:86:b7:4b:9e:06:20:
                    57:5c:8b:49:c1:db:6a:99:6e:19:9d:7d:ae:d7:a4:
                    86:16:c8:b5:f6:5d:85:5d:99:32:3b:9d:68:28:d2:
                    92:5f:91:95:f2:4e:40:fa:74:62:34:d1:30:6d:c8:
                    5b:09:93:5f:87:26:0b:1a:a2:92:87:96:53:bc:2d:
                    4b:24:0b:4d:c7:3b:ee:aa:20:37:ae:04:98:15:ba:
                    66:6c:89:c0:5c:61:3b:a4:26:26:5c:81:dc:41:c5:
                    74:04:6b:f1:39:ed:df:1c:de:0c:e9:f3:89:ee:e9:
                    cf:74:8b:37:be:a7:9b:d3:b3:36:c4:7d:ec:9c:20:
                    4d:e0:1d:f5:77:f4:17:83:ff:c8:44:76:72:1e:53:
                    ae:c1:f1:96:d5:c7:ba:3b:19:40:07:24:43:7f:e8:
                    11:8c:40:22:4d:25:58:0d:b5:d6:7d:4c:7a:a5:e7:
                    a4:e4:f8:4f:75:f7:91:2a:48:46:33:1e:69:14:06:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5D:0A:95:5C:B8:8C:B5:89:27:73:B3:D8:39:D3:8C:0E:06:84:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/ac84482c-6e9e-34fd-b9b2-bc78e6f8e04c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2701:4000::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:de:a9:d2:17:bb:27:8c:b2:d2:40:ad:2e:01:f9:9a:c7:
         bd:d2:31:d0:f3:52:84:cd:a4:95:36:94:ff:fb:d1:cf:b3:08:
         28:29:14:da:c3:de:4f:92:d9:25:b9:76:96:cf:bd:24:f4:f9:
         e5:be:50:d9:a8:69:dc:3f:82:7e:f2:f5:42:9e:82:1e:23:71:
         37:4f:01:1c:2c:e6:da:0b:71:3d:b6:4f:93:21:df:0d:cd:18:
         b9:b6:f6:93:0d:11:22:6e:18:c9:58:af:7c:53:c8:b4:21:6a:
         c5:c7:2b:96:a9:b5:9e:b2:2e:aa:11:4b:9a:59:39:db:35:b4:
         e6:65:41:2b:73:62:38:9c:96:74:05:69:61:63:09:22:52:b1:
         18:1d:3a:b0:2c:c8:49:2f:51:75:77:b8:3b:ff:15:0a:60:4d:
         66:e6:8f:a1:c1:3e:ce:ef:90:dd:e2:50:b7:d3:2b:5a:c1:97:
         61:a0:bc:6e:cf:33:9b:78:55:ac:7e:38:64:15:1f:45:82:56:
         bf:46:69:7c:59:ae:7c:07:aa:dc:08:46:04:89:36:c5:cd:1c:
         ec:64:69:d7:b1:f5:71:b2:57:1b:9e:7c:c5:e9:8d:ed:97:d1:
         4c:dd:72:80:ec:ff:06:69:5b:55:1d:a0:2c:44:89:6a:a4:bb:
         3c:32:da:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:30 2026 by rpki-client