Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/f29a8acc-4e56-31a8-81a3-53720324b2d4.roa
File:                     f29a8acc-4e56-31a8-81a3-53720324b2d4.roa (raw, json)
Hash identifier:          AJL69YYVo4UzlDEljMWbKvL5OKssJGpMx5JvplrqR50=
Subject key identifier:   DD:21:2C:E5:B3:35:44:E4:EF:67:56:E6:AE:0C:81:B1:8E:E5:9A:6D
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584DE84B39ADDBD0769510230180
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/f29a8acc-4e56-31a8-81a3-53720324b2d4.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     21957
IP address blocks:        2605:f440:5601::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:39:ad:db:d0:76:95:10:23:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=755b8ba0-8648-40af-b507-b4d7246522be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:6a:96:9b:30:27:6c:eb:c8:67:33:18:6f:
                    fe:b5:60:d1:e4:02:3c:47:4d:8f:11:21:68:40:52:
                    aa:f0:7a:e6:a4:92:1f:d6:e7:60:58:57:45:a6:7e:
                    d1:c8:cc:2c:f4:6e:31:cb:39:12:28:1a:fd:fb:28:
                    b2:ed:83:af:08:12:9a:25:02:6c:79:fa:c7:9a:19:
                    d4:51:03:10:b6:ce:c2:f1:35:52:1e:a3:31:00:03:
                    75:d7:8c:2e:78:e7:fb:f0:d7:30:3e:3f:db:8e:8d:
                    09:f4:d6:bc:ff:cc:e7:e0:28:b4:73:de:fd:39:11:
                    18:76:b9:64:1e:2f:ba:69:d9:f6:10:f0:dc:72:4d:
                    9d:ac:e9:87:83:50:a1:c9:71:be:82:5b:4d:4c:a8:
                    81:b5:a8:9b:ed:48:fe:c2:bb:3a:f5:c1:4f:ea:48:
                    54:e1:14:c8:72:b7:cb:38:5f:0d:a5:ef:ca:51:95:
                    4e:95:38:c3:3e:c5:57:0a:ea:b9:af:a5:0f:e9:c4:
                    0f:db:8f:4b:01:fc:3b:95:f6:35:0d:13:27:27:81:
                    5a:9e:55:4b:1f:80:2e:8c:85:af:89:ce:b4:37:57:
                    5b:76:5a:ec:32:f8:d7:05:cb:83:e7:d1:03:c8:cc:
                    d0:50:50:47:28:97:c5:4b:c8:da:0b:0c:8a:70:36:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:2C:E5:B3:35:44:E4:EF:67:56:E6:AE:0C:81:B1:8E:E5:9A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/f29a8acc-4e56-31a8-81a3-53720324b2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5601::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e7:64:2f:f6:21:8e:a1:69:1b:19:e2:cb:0a:64:8c:fb:d5:
         5e:ee:3e:13:98:bb:0c:92:a0:eb:9c:6c:17:8c:e9:cc:82:69:
         a9:c8:52:d9:2c:77:da:2c:13:b0:50:de:69:f1:74:2d:2c:ab:
         86:24:02:01:c4:5d:1d:fa:12:16:8a:4a:b7:1d:e1:9f:aa:48:
         97:39:0d:a4:51:ff:0b:2a:bd:ad:85:11:f4:48:86:d3:b2:d4:
         56:e8:da:98:4c:cb:27:f9:8b:1e:fa:84:bc:fb:94:29:b1:ac:
         2c:06:b4:62:30:30:9f:07:b1:8d:0c:df:26:22:6f:4b:05:9c:
         69:14:01:70:b5:1a:1a:de:ff:9f:89:a9:27:d0:02:8d:fa:69:
         1b:81:ce:ff:f3:64:bd:0a:d2:b3:97:52:f2:b7:d5:28:e5:f9:
         d3:cd:49:a4:98:77:75:f0:8c:af:ee:5f:9e:9e:65:7c:f5:fb:
         5d:9a:0a:5e:28:b3:b9:9d:e5:d1:f1:7c:98:ec:2a:c3:bf:d9:
         51:40:38:27:d0:b5:02:c7:f1:8d:36:c0:df:df:b9:02:80:3e:
         b4:f4:d5:ee:e6:fc:f0:69:87:68:be:83:cd:59:96:4c:37:95:
         c1:cf:1b:67:d7:37:3c:27:7c:fb:fa:60:70:59:95:4f:9a:a2:
         7e:3c:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:11 2026 by rpki-client