Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
File:                     4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa (raw, json)
Hash identifier:          D9JAuTSTFaSWAtqMrvvz0hYTAC6I9QSqYSGtWnL8/Pg=
Subject key identifier:   02:6D:E4:08:63:CD:AB:05:72:CC:69:4F:81:F9:67:C8:D5:CF:D6:69
Certificate issuer:       /CN=565e1435-ee87-4f33-bcd9-612cce56acf5
Certificate serial:       010D0C9F4328584DF640A99EC3880CA08E4A7880
Authority key identifier: 62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     398846
IP address blocks:        2605:ae40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a9:9e:c3:88:0c:a0:8e:4a:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=565e1435-ee87-4f33-bcd9-612cce56acf5
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=cc8c2005-fb6a-4b8c-8321-d652c32f3090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:d9:5d:b6:0b:8d:54:d2:87:63:85:39:4e:
                    10:eb:44:70:74:6d:89:bf:51:75:56:7f:bd:5a:33:
                    29:14:8d:f6:9a:5d:c8:e8:2e:a0:72:b5:71:e0:0b:
                    44:07:75:08:4d:53:8b:c4:2e:30:60:f9:39:38:3c:
                    e6:b4:53:24:a4:c2:dc:f7:e1:54:bf:3d:94:45:80:
                    68:0c:41:cc:ce:44:98:b0:6f:fe:9c:cc:fb:ff:21:
                    78:f0:f7:94:fd:fc:3e:83:80:46:73:1e:88:96:50:
                    c1:e1:0b:f9:77:42:d5:31:8a:32:4f:55:1e:0c:41:
                    f0:e7:2f:dc:cd:95:90:9a:e5:be:6a:09:27:73:ae:
                    a4:c6:52:d7:45:33:f5:8c:83:d9:82:85:ae:f9:b8:
                    81:12:99:77:c4:4e:81:7d:38:33:58:0f:2c:00:50:
                    86:e9:32:ba:23:f2:6d:d3:e4:52:0f:2a:d2:5c:21:
                    d2:86:c1:e1:e5:95:7c:05:2d:85:c9:e5:fe:b0:b4:
                    b2:c6:35:d1:21:6b:d9:2e:53:1c:e3:ab:d2:c5:14:
                    27:c6:60:7f:46:c5:49:64:17:ec:ba:0b:a3:2b:9a:
                    6d:39:03:a5:bd:e9:80:ba:cc:bb:16:53:4f:28:44:
                    f0:8d:c3:40:af:7e:79:bc:b4:63:0c:21:e1:3a:88:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:E4:08:63:CD:AB:05:72:CC:69:4F:81:F9:67:C8:D5:CF:D6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl

            X509v3 Authority Key Identifier:
                keyid:62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:93:b7:57:15:a7:fa:dd:a7:42:1e:66:2f:17:af:f6:22:03:
         1d:4d:3d:bc:dc:38:df:1f:86:7f:74:5a:62:bd:b3:36:85:d6:
         e4:8e:aa:aa:ae:f6:7a:c9:55:a7:ae:f8:b7:44:90:60:4a:18:
         6a:68:86:ad:79:b9:f3:f3:1d:26:bf:5c:51:c4:d5:9a:da:31:
         e9:d0:54:db:21:91:b0:39:ec:ef:f9:32:54:6c:ac:53:12:32:
         66:99:c3:c1:d7:9b:52:ec:56:39:ac:f4:42:83:6f:59:a0:eb:
         82:28:1a:fc:98:a4:bd:ce:64:21:02:84:c0:3a:1b:b7:cb:ff:
         24:18:50:76:2a:cf:d8:42:0b:53:eb:8d:37:51:79:5c:30:16:
         3a:68:96:75:ef:75:d9:9f:81:ad:0a:8b:9a:db:48:83:c8:d5:
         eb:1f:28:3a:79:81:14:5f:f0:8d:b1:c9:27:ad:64:d0:4c:21:
         e5:f2:05:31:67:9a:e1:e1:16:86:a6:0c:36:e6:f0:d7:d3:a6:
         ab:f7:84:55:ea:57:40:b8:68:f9:0f:61:b3:8f:7b:19:ab:28:
         45:90:29:0c:6f:22:98:1d:7a:40:a4:e1:85:e3:bc:3e:cf:4e:
         8d:d5:1b:0c:e8:d5:b5:ac:ee:71:7b:3a:1b:ba:ba:8a:89:b4:
         fd:61:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:10 2026 by rpki-client