Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
File:                     c16ed97c-8646-379e-b507-327349487263.roa (raw, json)
Hash identifier:          JDydTngoI64iUrW5w7uvi2jRZdSDm3eW8mTZ233WPZc=
Subject key identifier:   C8:86:A1:E6:F4:A5:8D:D4:4E:FF:64:59:07:7E:52:B9:69:94:62:C9
Certificate issuer:       /CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
Certificate serial:       010D0C9F4328584DDA55CF9EE891D620FFA51C00
Authority key identifier: 27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     215568
IP address blocks:        2607:cf40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:cf:9e:e8:91:d6:20:ff:a5:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=cd1120ca-2693-4071-943c-9ade1cbfe734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:15:68:6b:03:a7:ae:f2:52:92:e1:0b:0e:
                    a3:5a:b8:90:79:b9:a9:fa:d1:5d:19:5c:4c:63:d4:
                    b9:e6:c1:30:7f:f1:05:7a:ff:54:39:0a:db:f5:c7:
                    e1:3d:8f:9b:80:ae:f8:5f:87:42:b5:d2:ee:b5:aa:
                    1d:e2:d4:ed:5a:0e:b5:d3:7e:e0:db:c1:5a:88:af:
                    24:59:c5:b5:74:b5:fc:69:b6:18:3a:2e:24:20:ae:
                    76:1d:84:af:05:69:2a:5a:75:4b:7d:cb:50:19:a7:
                    46:43:53:25:38:cc:81:b4:bd:bc:94:81:05:9c:77:
                    6b:14:1b:fa:71:b3:e1:7b:25:73:02:d0:ab:fa:94:
                    e2:3d:9e:35:57:27:f2:b6:bb:42:58:82:25:db:b5:
                    06:ac:b4:1e:25:d0:d2:0f:9a:58:65:04:bf:3e:4b:
                    1b:aa:86:e1:03:53:fb:77:30:f2:be:d0:da:fb:3a:
                    a2:cb:4a:5e:2e:73:b7:72:0f:5a:50:3c:b2:73:a8:
                    84:08:22:a0:6a:36:3c:84:8d:29:e4:fc:07:6b:c4:
                    dd:7f:37:0d:41:d4:1e:a1:36:2c:a8:d8:67:cf:4e:
                    91:13:66:36:e9:83:87:4f:40:33:c8:eb:00:d7:c9:
                    10:44:b0:69:93:49:c5:95:02:37:8b:13:93:f1:ab:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:A1:E6:F4:A5:8D:D4:4E:FF:64:59:07:7E:52:B9:69:94:62:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl

            X509v3 Authority Key Identifier:
                keyid:27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cf40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:bf:b3:c9:62:85:a8:5b:9d:eb:be:87:dd:be:bd:ef:bb:
         c3:1c:0b:3b:dd:4f:5a:bc:b3:fa:20:01:c6:17:95:5a:8e:c8:
         b2:80:a0:01:cd:04:27:9b:4d:44:4c:95:d5:cf:85:8c:92:f7:
         a7:d9:f6:ad:42:f4:67:6f:37:7f:df:47:01:9b:93:38:2e:ed:
         a2:46:79:d8:f8:1c:8f:16:e0:34:b0:f4:86:86:76:55:67:6f:
         c7:7c:f9:f1:1d:4d:7e:a9:3b:82:75:79:e4:b9:ec:7e:3f:15:
         2a:64:11:f1:5b:7f:dd:f3:55:dd:63:ab:60:6d:3b:2e:a3:42:
         f1:b2:16:fc:30:30:ff:e5:79:d6:09:99:5f:1c:45:b3:51:4a:
         94:97:af:01:96:13:a9:1f:97:b3:82:5b:d9:cb:07:ee:68:11:
         5c:2b:45:dc:94:b1:11:cf:3a:d5:5f:1f:94:94:2b:79:15:31:
         79:49:ec:1f:de:d0:74:88:ce:e7:e5:11:a9:95:3e:6e:bd:92:
         c2:49:ed:5a:f4:a7:b2:8d:3b:eb:d6:da:47:61:57:53:39:16:
         e1:b1:9f:ad:94:a7:05:e8:26:aa:fd:18:2c:1d:8d:25:64:5a:
         2f:74:fa:c2:30:3c:81:ad:c1:fc:04:e7:2d:f7:26:81:51:76:
         07:bf:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:42 2026 by rpki-client