Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa
File:                     16e040f3-42b1-387b-aca6-5b8efee58de6.roa (raw, json)
Hash identifier:          Z3lHDH7jJEo86khzAH/ZIzYNsDo8kWduclELdM6HS5o=
Subject key identifier:   25:C8:10:73:2B:E9:B6:20:F8:51:6C:D1:ED:B3:4F:9D:41:A5:E9:37
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584DEC7B2BEA4963847C0BF0A200
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     394593
IP address blocks:        2602:f99c:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2b:ea:49:63:84:7c:0b:f0:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=d1077745-a21b-4bf5-ab9a-0da41cd93285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:ff:6d:b6:31:b8:48:52:e1:b3:74:6a:11:
                    9f:b4:94:75:cf:77:f8:cd:8f:2d:26:59:63:c8:f4:
                    74:c9:4a:68:25:e1:03:00:e4:a0:93:d0:dd:1b:5f:
                    ba:35:ec:3e:ea:ba:2b:e3:5e:40:0f:38:d6:ec:c1:
                    37:62:c4:9b:01:6f:dd:66:e8:db:15:e1:8f:1e:d2:
                    e8:9c:ab:47:67:df:b3:58:0e:32:93:5e:3c:cf:d2:
                    f1:0f:53:67:06:10:26:bb:69:e2:b2:1e:ef:f5:aa:
                    30:79:cb:50:86:a6:c6:2e:a5:8b:f7:80:61:35:64:
                    40:d8:53:42:8c:27:2e:aa:72:ef:3d:68:f2:d6:86:
                    91:d9:66:de:80:ab:5b:cd:02:c1:bc:e4:fd:ea:7b:
                    1e:35:37:c5:81:c0:02:5a:a1:d4:d9:6e:24:8e:83:
                    1f:fc:ec:c4:23:91:d3:da:16:e4:15:b3:02:36:4c:
                    f0:57:94:01:00:d6:c0:80:74:e4:c5:b6:e5:f4:38:
                    88:ae:7c:97:49:b8:59:5b:c2:b3:2f:a2:eb:d6:8d:
                    52:be:4f:af:bf:bc:46:11:2d:16:44:0b:e6:a0:66:
                    9c:f3:3a:51:f0:7a:b8:9f:49:63:6b:cf:aa:fe:70:
                    5b:ae:58:a1:cf:8e:c7:0b:3c:ac:7e:80:61:d6:f0:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:10:73:2B:E9:B6:20:F8:51:6C:D1:ED:B3:4F:9D:41:A5:E9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:58:f0:e7:67:29:9d:77:1b:f1:d8:cd:06:dc:4d:62:0e:57:
         e5:8b:46:05:66:59:54:91:54:f3:f4:c8:45:cf:62:92:8b:5c:
         5e:5b:27:6d:86:1b:8e:0e:bc:50:7d:19:ad:1a:9a:6b:da:30:
         6d:c8:8b:9e:63:5d:20:94:3d:36:71:c2:33:33:b0:cc:d0:4e:
         ed:fb:17:92:57:6e:7d:fc:3f:a9:f7:94:bc:31:ec:ed:49:4b:
         65:1d:9b:70:fd:79:11:f5:c4:96:00:ef:04:34:3e:9b:ed:b4:
         3d:97:25:03:07:18:2d:f9:55:e5:62:ef:2b:01:9b:6f:31:a5:
         a4:38:d8:34:c8:b7:bd:b2:58:98:04:1e:97:ca:c6:dd:4f:9a:
         9a:c9:9d:49:82:7e:0f:a9:67:66:da:cf:48:ce:d3:1a:f5:1e:
         91:de:62:40:8d:66:76:06:e9:fc:33:51:39:a0:57:2f:9a:63:
         7b:5f:d5:00:7f:ed:ee:70:de:3d:20:03:e8:8f:90:cd:09:6f:
         d8:ba:d3:85:07:b8:7e:19:11:b3:09:4d:81:8e:ec:26:ff:d5:
         5f:c9:41:36:2e:e1:4e:7f:dc:fd:ed:38:a0:e8:a2:e2:84:15:
         31:46:95:23:36:bc:da:a4:b8:1d:3b:b3:f0:56:9f:7a:c1:23:
         08:a9:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:28 2026 by rpki-client