Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa
File:                     634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa (raw, json)
Hash identifier:          VPzWrn0Hba284tvreYko1ic0y24sCQVLJ6lF5AsZyaY=
Subject key identifier:   71:89:3E:AF:8A:B6:5E:ED:0F:40:05:F2:05:59:E3:A2:2D:4C:1B:C4
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584DE6E5CE1A6CA13E9889FA0EA0
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        2620:ab:a002::/48 maxlen: 48
                          2620:ab:a003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:ce:1a:6c:a1:3e:98:89:fa:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=f019aaea-88a9-4575-8690-1fcdd3eaca8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:34:b1:e8:57:ae:c8:cd:10:36:65:48:5b:
                    04:6e:ae:5f:c0:a6:36:87:fc:01:0e:51:34:3e:78:
                    e0:4b:88:92:10:c9:96:83:15:fb:3c:5e:46:8e:1f:
                    44:a3:1a:ce:40:73:45:4d:53:fa:06:d8:d5:e3:d0:
                    5d:cb:c8:cd:f8:55:f3:d5:52:5d:63:ef:be:44:5f:
                    5f:81:6d:f0:2c:2f:77:a8:22:74:42:29:aa:ac:00:
                    36:c3:b3:4e:61:55:3f:8e:7a:e2:4e:1b:c0:e9:e0:
                    b4:93:e8:f9:34:6e:6c:f6:af:23:ba:73:ce:d9:0c:
                    73:3e:53:0f:54:28:a8:4b:a4:a0:6d:d6:57:f1:1b:
                    43:a5:d9:6c:6a:7a:b6:aa:03:21:0f:90:d1:ba:41:
                    e8:c9:54:57:2c:b0:e9:69:d8:e1:78:6e:ba:d2:a4:
                    65:4d:04:9c:28:f2:ec:fa:c6:90:0e:49:24:b4:10:
                    f0:a3:ca:cd:01:64:6c:74:e4:89:9f:09:48:ee:4d:
                    ef:62:91:a6:82:5b:ee:8f:f0:10:4a:25:4f:52:75:
                    7b:a9:59:31:91:4d:e2:26:f9:d7:90:9a:5d:25:82:
                    19:93:b7:76:99:53:72:92:62:f8:38:49:d7:a1:d1:
                    da:93:8d:37:35:6b:46:a7:fc:90:64:a2:30:f4:f5:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:89:3E:AF:8A:B6:5E:ED:0F:40:05:F2:05:59:E3:A2:2D:4C:1B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:56:10:fb:9c:f7:32:6f:f5:5b:2a:2c:90:25:f1:3e:81:
         8e:63:2e:6e:14:1e:63:c6:56:35:a3:65:ad:09:12:a9:55:6b:
         19:bd:cb:4a:1c:9c:cc:9b:85:19:e7:3d:91:cd:35:04:18:fc:
         3c:b8:84:46:4b:2e:2b:ca:c9:fc:6f:82:44:48:ee:29:c4:12:
         34:31:d2:28:20:3b:b3:b4:03:02:52:c8:b5:ee:75:28:4f:8f:
         11:cf:5b:62:0a:d4:91:98:66:47:a6:2b:df:6e:73:64:dc:e8:
         89:42:cc:d1:c0:83:fc:f4:80:c7:79:81:b3:52:46:56:0b:29:
         96:54:04:c6:aa:5f:a0:a1:38:71:26:21:82:8b:1e:1e:67:df:
         50:ba:38:64:32:b2:9f:a6:1a:32:e3:dd:84:62:4e:fb:9b:26:
         83:07:1a:b7:fa:d6:4b:21:43:bd:16:e2:88:62:ed:e8:4a:ab:
         5f:d9:bd:01:cd:34:43:8e:fa:65:29:b7:9b:5f:10:bc:00:f6:
         52:a0:eb:18:3d:16:86:db:79:cf:32:36:c9:8e:1e:c9:69:76:
         c1:03:04:e3:32:bc:77:9c:ed:31:56:38:cd:bf:c4:c7:19:ac:
         a1:52:53:2c:7e:cc:3b:d4:cc:12:cf:33:c9:fc:ae:a3:08:2b:
         71:51:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:20 2026 by rpki-client