Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/91602793-39d2-331e-9880-52568d0808f3.roa
File:                     91602793-39d2-331e-9880-52568d0808f3.roa (raw, json)
Hash identifier:          IjveQ2ZC2uueAmCZTAGnWGgMEvcdO2Jmbh0cYCJnxPA=
Subject key identifier:   79:1F:DC:92:FA:68:1C:E7:6D:24:C8:CC:3B:E1:96:A4:DE:AD:CB:AD
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F4328584E17498A848CB4E6FADB64D140
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/91602793-39d2-331e-9880-52568d0808f3.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     400956
IP address blocks:        2607:f298:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:8a:84:8c:b4:e6:fa:db:64:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=23eaeeef-13e2-455e-b60d-5fed141236dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:d2:be:43:ef:58:7f:a0:28:0f:d0:74:a2:
                    76:2d:90:18:4c:36:39:c2:63:fb:44:df:28:6b:eb:
                    3e:9c:df:84:37:29:62:cf:4c:d9:56:80:d8:09:ed:
                    3f:97:bd:00:37:b1:85:ea:31:b4:b4:c3:e9:bb:c1:
                    0c:ba:99:14:1e:65:6e:27:9c:7c:99:d0:0f:47:54:
                    73:49:b5:68:61:b6:6d:31:27:e1:52:18:2d:ba:7f:
                    00:2c:07:92:9f:87:04:64:8c:fd:4a:4f:e4:c9:ac:
                    a3:16:2a:c4:0e:26:8c:63:85:2b:7f:cf:39:65:5d:
                    1d:41:1b:47:da:1e:fe:20:e1:53:16:67:95:45:9e:
                    46:ae:71:2a:0c:17:15:ec:31:fe:88:21:18:65:46:
                    b8:61:1f:0f:b6:36:a3:a3:ae:98:4a:b4:48:e8:86:
                    c4:47:27:95:98:23:3e:ad:ee:9a:39:85:af:f2:85:
                    f5:96:5e:ae:04:d1:b9:9c:1e:27:4d:bd:e7:f2:09:
                    69:e8:cd:63:49:71:0e:29:38:27:97:c2:5b:6d:b4:
                    fd:e7:b6:5e:c0:5c:dd:9b:87:57:ad:cf:3b:f4:9b:
                    ee:a1:46:ad:d1:32:28:15:de:e4:d2:fe:ee:4f:45:
                    e7:dc:ae:6f:e2:27:e0:78:7d:ab:bb:b0:a8:9a:86:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1F:DC:92:FA:68:1C:E7:6D:24:C8:CC:3B:E1:96:A4:DE:AD:CB:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/91602793-39d2-331e-9880-52568d0808f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f298:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:72:a8:13:80:8f:1d:9b:82:36:39:9a:57:6f:73:fd:7c:e7:
         c4:23:cd:1d:60:1a:c5:1b:eb:b8:1e:a9:4c:23:3b:9d:b4:1e:
         f2:ad:11:03:15:de:4a:0d:f7:6e:b1:cd:9d:bf:a9:d3:41:5b:
         e6:35:75:04:cf:e5:ae:fa:bd:4a:9c:18:bd:c1:0f:1c:ee:73:
         19:50:2f:5b:7d:f2:ac:94:f6:20:05:1f:cf:bd:97:04:b7:23:
         4d:ab:d6:bb:57:d6:51:13:14:be:9c:42:48:5c:1d:47:2a:41:
         37:6a:01:1f:dd:83:7b:e0:b3:97:95:24:24:1c:a9:fc:ee:e2:
         ce:21:cc:c7:45:c5:19:e6:3c:e2:de:5a:19:6f:29:f9:dc:a1:
         48:26:a4:f0:4b:5c:1c:74:31:c4:9c:74:99:d9:65:77:01:39:
         c6:58:cb:67:eb:2f:d3:de:62:34:70:1a:98:68:ca:55:2c:5c:
         2e:41:4c:4b:43:b1:9e:04:57:b9:89:89:c9:01:5b:91:ae:28:
         a5:f2:b6:b0:4d:52:82:0c:82:d3:bd:98:47:3a:54:38:c0:e9:
         0b:ae:59:5f:f3:18:ac:f4:92:af:01:66:e3:b4:ab:9d:37:20:
         36:c4:be:bc:fc:31:28:37:fe:48:73:b0:33:d1:ab:4b:55:e0:
         54:37:6f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:11 2026 by rpki-client