Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/29a23859-7064-3010-841f-0ebae110d41f.roa
File:                     29a23859-7064-3010-841f-0ebae110d41f.roa (raw, json)
Hash identifier:          QkeJ+cygyK1HVaov5GKMgq3cB/7eYzUHtdzVAHKsp5I=
Subject key identifier:   60:FE:41:CC:B3:59:C2:5B:19:B4:23:9A:0C:91:8C:DE:60:FB:C5:05
Certificate issuer:       /CN=da75b606-ecb7-46cc-97b0-43d83e37f979
Certificate serial:       010D0C9F4328584E104F335331D0E53F0D260480
Authority key identifier: 93:BB:9B:A8:EB:6D:9F:EA:0C:F9:7B:19:09:0A:7A:3F:6A:C6:90:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/29a23859-7064-3010-841f-0ebae110d41f.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     14099
IP address blocks:        2602:f8b7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/da75b606-ecb7-46cc-97b0-43d83e37f979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/da75b606-ecb7-46cc-97b0-43d83e37f979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:33:53:31:d0:e5:3f:0d:26:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da75b606-ecb7-46cc-97b0-43d83e37f979
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=4736835d-e4b4-492e-9a54-8b7447ca1555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:84:f3:1f:49:e3:25:d3:ca:6a:52:ff:81:
                    13:d7:df:b2:0f:fb:fb:72:9c:92:5d:36:96:41:50:
                    28:65:88:ca:d3:36:27:8c:41:72:13:34:83:c5:6d:
                    74:03:7f:a5:8b:87:47:46:05:ac:25:d5:5b:83:40:
                    6c:84:02:21:0e:e1:9e:a8:3d:c5:22:45:96:9e:80:
                    87:c3:2b:a5:3e:1c:76:09:9b:2e:36:58:80:5a:97:
                    67:3b:17:40:1f:a4:da:8e:85:e5:c7:92:0d:71:d4:
                    d2:3f:75:87:97:63:af:65:54:de:2a:6a:89:fd:62:
                    06:e9:99:72:e6:6d:5f:8b:90:95:e2:04:6a:3e:99:
                    4a:0e:9b:7a:bb:67:46:62:01:49:03:05:34:55:af:
                    1b:60:c0:7b:7b:93:4d:b5:b7:44:d6:7c:4b:89:58:
                    2c:8a:1c:a8:f3:b5:c4:6e:85:78:71:ac:e9:71:63:
                    25:46:a6:52:be:d8:48:ac:47:a1:df:a1:ef:2e:c9:
                    16:f3:6d:39:5b:48:dd:4d:23:63:7c:3b:74:c2:02:
                    38:1b:47:77:dc:ec:b9:e3:62:53:c7:37:af:ea:b4:
                    db:05:8e:eb:fc:bf:aa:90:37:e1:39:d6:fd:a5:90:
                    20:d0:64:fc:fd:88:1b:5b:3d:88:fe:87:e6:fc:a1:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:41:CC:B3:59:C2:5B:19:B4:23:9A:0C:91:8C:DE:60:FB:C5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/29a23859-7064-3010-841f-0ebae110d41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/da75b606-ecb7-46cc-97b0-43d83e37f979.crl

            X509v3 Authority Key Identifier:
                keyid:93:BB:9B:A8:EB:6D:9F:EA:0C:F9:7B:19:09:0A:7A:3F:6A:C6:90:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:c4:1f:d8:66:ca:2e:f3:73:0d:3c:b2:61:8c:db:5e:e8:
         1a:b7:8d:b6:9a:53:33:d2:b5:4f:91:04:89:7f:69:84:24:a3:
         22:bb:e1:b3:43:dc:e9:a1:cd:c4:09:ea:c3:54:28:0c:c9:e3:
         99:1a:bf:4d:3d:ab:1a:41:ca:38:4c:8a:cc:90:d1:22:9d:9c:
         77:0c:6e:2e:24:16:d5:ea:02:28:bc:2b:6d:98:6c:25:f5:53:
         3e:a2:f5:95:c8:d4:10:48:b3:ab:c4:22:48:03:7a:8a:b8:a2:
         9f:71:af:7f:e9:56:52:52:93:83:b9:55:be:fb:fc:b7:12:5d:
         fe:0e:be:36:f3:33:44:12:75:55:6f:a0:28:3a:11:b7:9a:40:
         c4:9f:05:86:5f:4a:cf:0a:af:37:4f:27:59:5f:db:7f:cd:29:
         0e:5f:5e:09:3a:66:18:4b:42:50:26:83:df:c3:87:c3:4f:b1:
         3b:32:56:85:59:06:e5:5f:52:de:74:bb:72:d7:3b:d2:f6:c3:
         13:78:83:d9:79:c2:68:3e:c2:ed:aa:3e:e5:fe:a9:15:3c:96:
         0a:f6:56:b0:a9:c0:12:4c:e4:ce:db:1f:64:ca:ea:49:1b:4e:
         c2:c3:1e:ed:48:1a:74:ba:74:b9:5a:00:49:99:b4:81:72:09:
         6f:bc:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:00:23 2026 by rpki-client