Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa
File:                     3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa (raw, json)
Hash identifier:          XxIHy5Fvf4a6asRyqE5sUvMp3q5bTLVThnvX78dOeP4=
Subject key identifier:   C3:C5:13:84:3F:16:01:5D:C7:C9:7D:65:70:CD:0B:5D:9A:48:12:CE
Certificate issuer:       /CN=c04d5752-0429-45a3-a347-607b7dc70707
Certificate serial:       010D0C9F4328584E147EDD2676FE4DDFD589F540
Authority key identifier: 9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     32668
IP address blocks:        2602:f86a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:dd:26:76:fe:4d:df:d5:89:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04d5752-0429-45a3-a347-607b7dc70707
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=65471dda-4270-4f02-807f-c04c5c7c69c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:bb:5b:11:50:fb:1f:1c:a3:77:5e:1f:65:
                    ed:d4:de:54:fa:ed:a9:73:d6:f9:4f:b9:9b:12:fc:
                    5d:bd:be:35:5a:44:e6:e6:11:ea:58:1f:ba:09:d9:
                    2e:d6:5b:d2:4e:f6:8b:3a:1f:ec:fb:ba:c1:77:a3:
                    32:1d:bf:6b:5d:2c:cc:47:ab:62:b1:86:e8:95:30:
                    96:ef:ee:91:c9:90:c5:49:48:0a:a8:02:9f:93:50:
                    46:60:dd:a7:64:ce:6c:45:08:f8:1f:81:b0:91:8c:
                    14:77:a9:6e:9c:6f:bd:c5:9b:9c:8e:16:b5:12:c8:
                    f3:48:55:25:80:53:1f:9f:b2:85:b8:c4:9f:75:c2:
                    93:5f:f1:99:3d:ab:ad:0b:d1:1f:29:42:0b:37:c3:
                    57:ce:d9:24:6d:f4:b2:4d:f7:df:f9:98:89:64:09:
                    a1:03:65:a1:ed:b9:da:12:56:f6:7b:c9:9e:02:cc:
                    0e:07:be:0e:d4:78:6b:78:28:90:ff:7b:62:cb:15:
                    15:8f:04:1b:04:4f:27:4a:f9:7d:b6:e8:ac:a0:37:
                    db:d0:80:90:37:21:7b:63:f7:ca:dd:9a:3e:f6:6e:
                    0e:b5:e4:08:28:55:bf:f2:ec:ce:1d:9f:06:12:2a:
                    5c:3b:1e:1f:0d:2b:00:01:ce:d5:e9:5c:b9:d2:ca:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C5:13:84:3F:16:01:5D:C7:C9:7D:65:70:CD:0B:5D:9A:48:12:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl

            X509v3 Authority Key Identifier:
                keyid:9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:40:04:5f:94:bb:e1:5d:8f:a0:9c:83:f9:a1:a4:83:30:b0:
         28:2e:0f:aa:86:14:76:20:91:a0:01:2f:36:30:87:2a:77:f8:
         ca:57:3e:0f:89:56:48:6d:3b:4c:3e:48:63:bc:04:2a:8c:94:
         80:2a:a6:83:a8:58:ce:44:f2:24:a3:5b:ea:2f:75:d3:de:86:
         a1:7f:82:ac:76:3f:b5:3c:93:21:12:e1:b7:5b:11:84:9c:20:
         fb:83:66:c5:98:3c:95:55:01:ed:f7:ea:4f:29:88:df:b2:2f:
         3c:21:71:f6:f1:de:74:f2:99:9e:b1:36:f4:13:ad:a9:a2:f3:
         69:9b:6c:f9:6f:81:5b:7a:7c:bb:96:59:1a:4f:f4:c3:cb:29:
         bf:8b:fc:69:4a:46:80:57:49:13:6b:9d:ec:08:50:d4:12:7f:
         0a:96:39:fa:c2:b8:c1:55:99:8b:11:73:f7:8d:db:6a:d1:38:
         50:1a:23:96:07:20:41:e0:2c:66:9f:fc:0f:b6:54:e7:2f:96:
         c4:f4:95:0e:93:c1:56:53:87:9c:1e:05:72:c8:9a:b2:a8:45:
         3b:79:49:7a:a4:13:0f:46:fa:ec:a9:33:34:19:20:e3:6b:c4:
         92:6b:c6:32:4f:6e:76:8d:5e:41:be:85:a0:d8:2a:73:92:01:
         fa:ed:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:10 2026 by rpki-client