Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
File:                     56ef51ad-5c96-3514-901e-7d87c5eec06b.roa (raw, json)
Hash identifier:          3oL6g8eWA2CN/VA3zbvw9lyGJLaaAi7oSa0OODHfrVQ=
Subject key identifier:   5D:4F:F3:6D:FE:23:3A:31:2E:10:7D:61:8C:B1:5E:9B:5C:6F:56:11
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584E1E445083E37C43BB0A6AC580
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     62517
IP address blocks:        2602:f83b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:50:83:e3:7c:43:bb:0a:6a:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=2ea39d50-49dd-4cc1-8fee-bf20d34f0ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:50:c0:06:83:48:b6:43:17:ce:99:40:03:
                    97:e0:8c:6d:f2:9c:53:a4:bd:57:9c:ed:35:0a:6c:
                    f9:8d:13:b1:8c:fb:3e:74:4c:03:5f:0e:89:2e:d2:
                    1e:9d:87:14:6b:d5:cd:b0:b1:da:c2:3b:9f:45:e7:
                    7c:c3:e6:98:35:e0:08:00:25:f0:d0:4f:93:4e:8e:
                    29:fe:5a:81:b9:19:c5:2d:74:6e:36:5b:a6:32:a6:
                    1c:fb:6f:bd:29:67:73:ff:b5:7c:c8:7b:a3:17:72:
                    d4:40:c6:66:20:d6:53:48:7f:c0:89:67:bc:2d:5c:
                    aa:22:60:89:38:fe:32:60:d8:cb:2f:99:f3:2d:09:
                    b9:ff:e0:38:36:9c:98:df:18:a5:9e:e6:60:f1:2b:
                    aa:00:5b:81:d2:58:99:9e:a9:ac:2c:fc:8e:1e:1c:
                    ac:6a:5d:e9:1a:69:f5:3e:c2:87:c4:c2:55:46:f2:
                    51:fe:c3:34:cd:ec:3a:25:a2:cf:71:e6:6e:11:0a:
                    ee:be:e3:37:cd:cb:9c:5f:68:6e:cc:b8:86:b7:36:
                    71:54:45:7b:c1:00:19:9d:37:c0:72:07:90:f9:aa:
                    0a:a8:bd:ac:a3:f3:1e:13:62:03:ae:c3:0f:a8:68:
                    a4:8e:c4:9c:ca:63:04:fe:02:f2:51:57:06:1d:4e:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:F3:6D:FE:23:3A:31:2E:10:7D:61:8C:B1:5E:9B:5C:6F:56:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:85:9d:22:df:cc:c4:7e:39:14:dd:8b:ff:c5:3d:cd:16:ce:
         2f:b2:ee:1a:f6:d2:f3:a9:1c:2b:18:52:20:96:0b:97:a3:16:
         2e:66:26:d5:0e:10:5d:0a:86:83:36:f9:fd:97:09:73:38:3f:
         6f:f5:61:0c:cd:44:5a:95:a5:9e:b4:c5:65:88:5c:b9:39:c6:
         66:f7:14:8f:c1:77:f8:f3:b4:47:6a:69:6b:db:8c:68:54:1e:
         5d:78:fd:9d:3f:09:be:f3:7b:9b:75:cf:f7:c4:2f:6c:bd:e5:
         ad:cb:41:e9:ee:8f:39:1d:56:20:cd:63:90:74:5a:5a:66:a7:
         db:c2:25:55:f7:ad:47:6e:7a:3a:39:07:1a:03:67:92:7c:e8:
         ec:0d:89:e6:f1:bd:dd:b1:3c:6b:bd:f5:a8:09:df:64:45:67:
         84:4b:64:57:28:ba:02:28:2c:c2:2f:50:2e:d5:d7:02:c4:87:
         56:58:b4:e3:6a:c1:00:01:c9:b7:d1:74:dc:a0:94:ca:35:19:
         77:4e:de:b6:62:24:09:58:85:05:13:6a:99:9e:5a:ce:eb:ed:
         91:b5:32:bd:8f:82:89:2b:fd:6b:cf:5c:16:d8:a2:9e:35:7d:
         4d:ad:df:88:b6:30:13:3d:1b:06:be:61:e0:3a:ec:b2:f4:c5:
         c7:ba:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:45 2026 by rpki-client