Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0fe8a78d-e185-3c46-9366-03b1e71abb30.roa
File:                     0fe8a78d-e185-3c46-9366-03b1e71abb30.roa (raw, json)
Hash identifier:          b6euHuRYTf5QC3gtQO5C6JeSSrPcXPP+c0KVv/p513k=
Subject key identifier:   73:C5:AD:94:D5:3E:CF:EF:95:E9:31:C1:76:7E:CE:38:39:EB:AE:05
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44880BF4A76945908D0080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0fe8a78d-e185-3c46-9366-03b1e71abb30.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:84fa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:88:0b:f4:a7:69:45:90:8d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=3be8d69c-85c6-42e9-a1d3-7e67c314de9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:c8:20:a5:3d:ed:91:e3:ee:46:e8:ae:54:
                    aa:76:17:83:b5:3d:e0:85:b1:aa:8a:d5:cf:bb:eb:
                    0f:d6:f7:f6:41:50:3f:12:26:70:44:c8:39:43:2b:
                    24:c9:d6:0e:64:da:96:a6:23:ad:c5:1b:27:90:4d:
                    fc:8d:d7:06:fc:a7:bf:fc:40:47:92:7e:65:17:fe:
                    b8:91:45:4f:b7:2b:01:a9:1d:fd:d9:c1:79:10:6e:
                    8d:ef:b6:23:45:aa:e6:87:ed:fc:dd:44:76:85:d3:
                    f8:03:c4:67:e0:ac:73:70:09:b4:4f:15:30:84:a4:
                    fa:53:93:c5:eb:13:e0:11:94:c8:91:8e:ac:f2:ab:
                    d1:06:31:1c:1c:fe:52:dc:39:76:17:95:19:01:e5:
                    b7:cc:19:75:79:be:23:c8:5b:58:fe:88:59:79:4e:
                    c2:04:2a:47:fc:60:2a:12:1f:34:75:93:bd:b2:1b:
                    9f:17:e9:a8:d9:0c:88:e3:bd:4f:7d:0f:57:5b:2a:
                    04:e7:c4:2b:5b:bf:15:ee:2a:fc:5f:38:29:80:68:
                    73:35:83:a9:6b:7f:83:aa:2e:4f:b1:7a:99:28:49:
                    77:68:a3:cf:8e:52:36:58:1d:f1:6d:d0:4e:61:ab:
                    14:29:ee:57:70:52:a2:0b:c0:2b:18:e1:55:8b:29:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:AD:94:D5:3E:CF:EF:95:E9:31:C1:76:7E:CE:38:39:EB:AE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0fe8a78d-e185-3c46-9366-03b1e71abb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84fa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:e7:06:dc:39:5c:0e:ab:70:d4:f0:01:ed:01:e1:05:ae:
         bc:ea:42:71:cc:5d:a1:12:af:31:20:50:11:13:24:77:09:43:
         80:77:1d:7d:fc:9e:46:74:57:ee:82:a3:26:0b:eb:3a:88:b6:
         02:e4:fb:33:ac:fb:31:b8:9c:02:20:11:42:43:b1:39:fd:65:
         5f:12:9d:3a:ea:ed:8b:31:03:12:ea:84:79:5f:40:69:bf:d7:
         9a:98:36:46:91:53:57:d1:98:2a:99:6b:78:b1:0d:32:b2:4a:
         fc:61:26:f5:32:4c:fd:7d:70:e2:13:11:d4:ee:f6:b7:17:c8:
         64:01:e6:fb:ed:a3:20:9f:a2:7c:75:f3:d5:52:17:94:7f:0a:
         53:7d:7c:96:72:40:19:c4:f3:30:5a:07:0c:3d:fd:06:dd:d9:
         b4:41:21:39:aa:af:62:fd:4d:49:dd:25:0d:42:6c:40:2e:39:
         1b:05:ef:3b:b2:a3:fd:0c:a3:3a:02:d0:ef:5e:a8:da:e9:dc:
         8d:4e:59:4f:74:3f:16:55:a3:37:90:72:af:99:8b:ed:d5:63:
         81:11:23:5b:c0:a1:dd:ab:81:20:3f:ae:59:d8:38:b1:05:d1:
         45:62:49:3c:3f:06:7e:db:98:8e:6e:9e:34:fe:da:a9:25:ef:
         fb:e6:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:28:02 2026 by rpki-client