Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/356e655c-16a6-3ff7-b9ee-ec7d18d78b9f.roa
File:                     356e655c-16a6-3ff7-b9ee-ec7d18d78b9f.roa (raw, json)
Hash identifier:          hMR/OSDlclc/M1xx8TiCQYrDDW4L5uY9gY2vMdZAT6M=
Subject key identifier:   72:97:A3:2D:1C:0F:6F:26:69:B9:09:77:FC:04:5A:2B:AF:52:0E:A0
Certificate issuer:       /CN=4a55c0a6-eaa8-4039-be15-220f288acd5a
Certificate serial:       010D0C9F4328584E09CB314E7246F501C6D2B280
Authority key identifier: 46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/356e655c-16a6-3ff7-b9ee-ec7d18d78b9f.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     63129
IP address blocks:        2602:f7d5::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:31:4e:72:46:f5:01:c6:d2:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a55c0a6-eaa8-4039-be15-220f288acd5a
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=68603400-6890-4b34-827d-66318205605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:55:07:53:a1:98:7c:17:96:fe:77:98:e3:
                    6d:28:ba:10:26:59:be:3f:be:7c:25:42:32:f0:98:
                    e8:23:7d:33:0b:e1:e4:af:4d:13:a4:46:b2:f0:40:
                    8e:78:e6:9d:a7:52:49:92:40:dd:a4:76:37:e7:f3:
                    08:16:2e:15:9c:06:ee:dc:ae:01:b6:5b:ca:1d:c0:
                    aa:45:81:7d:f7:cc:e1:bd:94:7a:27:47:48:91:27:
                    6b:46:4b:03:d8:d3:66:9f:ec:e8:07:c1:c4:9c:3d:
                    8f:5f:91:8f:61:13:3e:80:08:fb:96:6e:19:16:16:
                    51:0d:5e:c7:a0:9f:6b:09:8e:31:3a:79:35:93:f6:
                    b2:f3:fa:d7:38:f3:18:81:b4:20:6a:7b:b3:f3:f4:
                    81:67:4d:f0:f0:16:54:1f:19:d5:5a:d0:26:7c:7c:
                    0b:3c:6d:d5:12:45:21:23:0d:5e:56:ac:33:94:5c:
                    bc:da:91:28:6d:9c:3f:8f:4a:b9:d7:70:e9:ad:08:
                    28:68:c5:9b:a8:46:61:a8:dc:18:e5:e2:1d:2e:e2:
                    6b:84:63:58:22:9a:2c:0d:5d:4a:d2:f0:3a:63:68:
                    ed:53:dd:8b:1e:87:4b:f4:2e:dc:8e:a1:a4:97:33:
                    57:6d:41:05:32:6a:cc:57:ae:e8:88:20:82:3f:59:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:97:A3:2D:1C:0F:6F:26:69:B9:09:77:FC:04:5A:2B:AF:52:0E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/356e655c-16a6-3ff7-b9ee-ec7d18d78b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl

            X509v3 Authority Key Identifier:
                keyid:46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d5::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:7a:15:52:98:42:3c:92:4d:ba:96:57:84:f9:64:21:56:
         68:86:7b:b5:12:2d:98:f5:28:17:7a:5d:44:5f:37:78:6c:31:
         2d:ca:bc:93:5e:5a:08:96:30:e3:5f:79:26:54:b2:08:f0:5b:
         e1:36:29:5d:cc:3a:3a:a4:cb:05:e7:0d:83:f1:21:83:8d:f9:
         23:b1:bf:01:97:5e:35:d3:ae:64:cd:38:8c:a9:44:81:d2:ae:
         ec:46:5f:d6:a4:25:f9:43:ed:61:e6:ff:74:86:e9:2a:ca:9d:
         5c:86:ae:8f:c9:0f:0d:cb:5a:07:16:b1:cb:01:76:ea:ee:ac:
         b7:a4:65:9b:1b:5d:13:7e:cf:39:bb:c7:c3:e5:13:19:84:f5:
         3c:ae:8e:f3:61:cd:36:6a:cb:56:93:b1:1a:bb:9a:65:cf:53:
         d9:80:d5:92:21:05:a6:a8:41:b7:2c:4a:7d:3f:67:ea:0b:1e:
         cd:8f:85:59:d1:10:c1:9a:b5:4e:1d:92:53:51:f7:49:3f:17:
         97:53:f4:8e:ad:ec:1e:05:fb:71:aa:09:61:11:1f:6b:be:33:
         23:ee:37:08:3e:1a:6e:3a:8b:2c:23:fc:d9:78:6a:85:4b:7c:
         b8:c7:bf:f1:94:e1:06:47:03:3e:24:ae:65:2a:71:95:c9:75:
         36:f0:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:50 2026 by rpki-client