Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0475aac4-0555-33c9-9997-ce19a9253a06.roa
File:                     0475aac4-0555-33c9-9997-ce19a9253a06.roa (raw, json)
Hash identifier:          uNGTNWMHX1ogbTGcLc/OJhY92gH/qWOW1RcXEUJMPMw=
Subject key identifier:   F8:CF:14:7B:F7:C3:42:17:E1:64:95:E9:12:0E:0F:D8:EF:E9:4C:37
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44856426EB5951AE7D3E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0475aac4-0555-33c9-9997-ce19a9253a06.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:80f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:85:64:26:eb:59:51:ae:7d:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=ebefd0f4-c58b-4863-bf99-a6138e64129a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:cd:a6:6e:fd:fe:85:e5:dc:e7:3c:23:4f:
                    2d:a5:f4:13:b6:1a:1a:e7:b7:20:aa:70:ec:8f:18:
                    b2:8d:4d:09:ef:0a:02:a9:4e:d6:a3:6f:c5:94:ee:
                    c6:38:63:aa:54:01:04:21:b0:5f:c3:23:94:c7:60:
                    5d:59:6b:82:24:55:00:72:a5:fd:cd:d2:ac:23:f0:
                    bf:41:4a:f9:f5:af:35:94:b8:71:e6:ff:98:b0:c6:
                    32:38:79:46:d6:dc:b6:52:17:d5:36:4f:bb:41:f0:
                    19:3a:17:5b:71:09:d8:98:73:6e:29:8a:ba:c8:e0:
                    32:a3:b5:72:84:1a:91:59:f4:f7:69:0c:b4:e7:08:
                    5f:93:de:fb:dd:29:80:1c:e6:b9:e0:93:2c:7c:9a:
                    20:be:b4:bd:bd:a4:dc:f7:90:60:57:5f:e2:ae:03:
                    87:0b:14:05:ae:7e:2f:42:3c:b9:57:ed:e7:ec:76:
                    fd:88:d2:8b:41:3c:9c:87:01:48:92:cb:51:ea:ae:
                    98:8f:22:36:97:70:c4:0a:11:30:a4:44:d8:31:35:
                    11:15:b3:e2:f3:49:ae:b2:73:a7:9b:a6:b8:da:a2:
                    90:fb:99:e1:98:48:17:16:fe:18:97:ad:29:9b:38:
                    db:05:10:9b:cb:5e:d9:08:99:5c:4b:59:8b:24:a5:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:14:7B:F7:C3:42:17:E1:64:95:E9:12:0E:0F:D8:EF:E9:4C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0475aac4-0555-33c9-9997-ce19a9253a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:07:07:b8:42:93:0a:9f:b0:f2:77:2b:e5:88:6b:cd:e1:21:
         c4:08:f6:6e:60:2d:a1:b8:32:4d:7a:87:f0:f2:54:ab:05:7c:
         24:0e:e2:5a:52:b4:71:dd:41:0e:b7:e9:4e:29:ef:c1:31:50:
         27:bd:c2:3b:b5:66:84:53:35:03:0b:69:fc:38:b1:61:2c:bf:
         e9:d4:3f:3d:08:4f:45:0c:b0:11:fb:67:f3:dc:e2:b1:7f:8c:
         5d:1d:9a:a3:f0:08:4d:39:77:40:a3:c1:8d:e1:82:ca:09:95:
         2b:c0:fe:f3:07:7a:e4:dd:73:ec:88:3f:1d:13:c8:56:39:47:
         db:e5:33:86:c3:ff:ae:41:1a:e1:3f:b1:e5:8b:00:96:0a:22:
         f6:68:6e:0b:47:52:ab:36:54:f2:d7:c4:64:73:10:ed:fb:83:
         48:90:71:fa:f8:5c:b3:a8:45:fc:b9:89:05:0b:28:e3:55:a4:
         7c:bd:8e:61:e4:5b:1c:0d:4d:51:7f:f3:45:bc:6e:1f:ce:dd:
         c5:ab:73:d8:c2:a8:9e:77:44:95:16:5c:1e:33:9d:af:66:1f:
         f5:5a:a2:79:6d:e0:9f:31:ff:11:ca:79:7b:59:20:5d:0d:c8:
         68:b0:a4:62:56:9b:62:6a:1d:d1:7d:32:f2:e7:47:9f:fc:26:
         f7:13:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:00:36 2026 by rpki-client