Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
File:                     4a42fb5f-b644-37be-b039-55b5dbcabadb.roa (raw, json)
Hash identifier:          AjgqJeS4TrJk83gM+4mE0WhzFqKciMbBjowD5S+bsbE=
Subject key identifier:   57:02:BF:EE:05:1E:15:32:59:D1:9F:29:BF:FA:E3:6B:A3:41:65:1D
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584DF0AB41EBD981CCE39C7F2180
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     2648
IP address blocks:        2610:20:6b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:41:eb:d9:81:cc:e3:9c:7f:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=deb73062-b571-44f2-806c-73e5136dcb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:9d:6c:2a:2e:2e:26:ef:6f:8f:ec:af:4f:
                    90:a9:2a:b2:0f:a8:5d:df:9f:22:05:48:5d:a6:f5:
                    a0:68:33:38:19:ff:97:c6:11:13:6f:1c:dc:96:40:
                    48:29:48:fd:8d:35:bf:86:0a:d0:28:77:22:16:df:
                    c1:ab:cd:06:13:a9:29:36:a5:ad:21:00:0f:a4:05:
                    24:23:11:80:b1:67:28:4d:93:e8:37:68:0d:83:c6:
                    57:a3:c5:96:ca:bf:ed:90:53:50:2e:83:6b:d8:3f:
                    db:20:21:b1:1a:04:a0:b0:90:b5:92:9e:38:70:55:
                    3b:11:68:e3:fb:2a:15:9f:cc:0a:56:d5:40:78:44:
                    be:e2:60:43:f5:43:b1:c6:16:88:79:6a:94:b9:7c:
                    47:6d:6c:af:48:7b:fa:bf:e5:0b:70:6d:26:00:f9:
                    0e:63:c3:90:8d:66:1c:41:77:c7:40:7e:f8:84:d0:
                    3d:5c:e1:48:7d:86:86:31:ee:b5:ac:fe:c5:f1:95:
                    f2:33:ec:f1:69:58:5d:d5:20:76:ad:32:c9:14:73:
                    90:2c:8a:71:0b:52:1c:45:0e:4e:3a:af:8e:0b:dc:
                    3a:8c:35:c9:0a:80:cf:62:9a:d9:79:a6:63:9f:ea:
                    18:dd:08:22:eb:62:db:ee:d3:0f:43:91:3d:7f:3b:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:02:BF:EE:05:1E:15:32:59:D1:9F:29:BF:FA:E3:6B:A3:41:65:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c8:92:0a:be:3f:66:48:1c:23:a6:ad:ea:65:f2:ff:0d:a0:
         29:40:87:f4:f7:5d:1e:b3:1d:ce:13:06:5c:bb:1f:f9:5c:1f:
         21:a4:09:81:46:68:27:27:d2:a0:ce:fe:b5:b7:ee:cd:d5:28:
         44:e2:90:43:fc:8d:47:40:93:9f:55:69:59:e6:fa:2a:87:02:
         2f:b7:0d:be:f4:06:8d:d0:6a:17:bf:12:6b:06:7b:8a:8d:ec:
         6d:fb:2a:0b:3c:c7:c3:c3:a3:c6:5f:dc:47:7a:15:43:df:4b:
         eb:3a:aa:fb:ca:b0:63:d9:94:94:27:b7:08:65:63:e7:19:d8:
         a8:7e:37:b0:02:c2:88:8a:3e:72:ef:4e:70:55:91:d7:47:e2:
         75:c7:11:9b:26:41:44:60:7b:0d:4e:38:76:52:9e:6d:ec:bb:
         0e:98:82:9c:1e:54:7b:3c:f6:89:51:1a:bb:7a:9f:8b:77:bc:
         20:e9:d5:c9:0b:53:19:99:da:f6:cc:e6:90:4d:09:db:d4:28:
         df:be:c7:b4:ef:e9:53:92:e1:5c:da:7e:64:f4:6c:92:ea:75:
         b6:8d:ff:37:ba:fb:26:1e:d8:37:33:53:cf:93:e3:b2:1b:76:
         e7:18:3d:2b:d7:a5:db:4f:e4:44:d0:5a:19:a1:a4:f2:ea:dc:
         6b:8e:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:41 2026 by rpki-client