Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/11dfc0f0-70da-3ed9-b124-0660ad3120fa.roa
File:                     11dfc0f0-70da-3ed9-b124-0660ad3120fa.roa (raw, json)
Hash identifier:          Rgfd9ZWmf2oGHP0hdZDPrffEQAf+rm9G7fgY4uQyapU=
Subject key identifier:   52:53:77:7A:71:B4:5A:2B:09:F6:1C:92:90:2B:8A:80:F9:6B:A5:36
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E448B1A2DAE9BCE176F2880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/11dfc0f0-70da-3ed9-b124-0660ad3120fa.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8bc6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:8b:1a:2d:ae:9b:ce:17:6f:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=d21c098b-8159-4cd3-a01e-ae2f30d35c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:3e:03:5a:34:47:36:27:2d:ec:73:a4:5b:
                    e8:69:18:f8:34:d7:c7:59:52:de:55:4c:9a:d6:01:
                    93:a3:9f:7f:ed:5f:1e:1b:b7:06:b1:fb:46:6d:3d:
                    a5:db:52:d9:be:6b:02:ab:34:a9:de:a5:4e:ad:75:
                    3e:45:c8:e8:04:0f:a1:7a:f8:b0:90:c4:e1:37:49:
                    b9:1c:aa:40:91:66:5a:ef:8b:76:9e:85:cb:25:23:
                    52:d4:9d:2f:66:21:67:b3:e6:4c:96:4f:d4:a8:33:
                    71:3e:62:6f:67:91:3a:94:25:a3:cd:7b:ee:3e:76:
                    e6:9c:22:17:91:f6:e0:c8:b2:56:80:de:2b:9a:22:
                    38:f6:c8:71:1f:33:d2:dc:73:ee:a7:61:46:8f:84:
                    85:8c:8d:7c:d2:63:cb:5e:e8:e7:66:d1:6d:ea:54:
                    ed:2f:d7:62:21:88:ff:74:f3:9a:1f:fc:c0:e4:d1:
                    26:4c:31:8e:4c:0d:13:a3:c2:50:ca:59:40:ba:bc:
                    0f:41:d9:f8:71:a6:33:cc:e3:dc:c6:bd:d6:27:a1:
                    bf:ae:03:86:ab:b1:13:2b:fa:31:d2:8d:db:c8:16:
                    3f:49:2c:c4:bd:f3:d9:f3:1f:19:0d:17:e8:aa:7b:
                    d5:63:b1:72:3a:9b:42:24:29:bb:5a:56:b7:02:9b:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:77:7A:71:B4:5A:2B:09:F6:1C:92:90:2B:8A:80:F9:6B:A5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/11dfc0f0-70da-3ed9-b124-0660ad3120fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8bc6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:63:e3:f3:89:4a:d3:ab:5c:41:85:f1:6d:d8:f7:88:50:c1:
         91:a7:1f:3a:5a:f7:d9:62:a4:7b:09:79:fd:fc:9d:4c:2d:7e:
         cb:98:c3:e4:d9:ac:ce:67:2a:e2:d0:55:f7:03:b1:ab:17:29:
         e3:06:fa:5e:a5:2f:02:cb:67:63:b0:2e:04:47:9c:2c:27:73:
         71:0e:07:07:a2:69:95:92:ac:b5:de:df:17:31:ba:93:e7:76:
         e7:e5:7d:8b:21:13:98:be:62:1e:43:a0:f0:69:89:59:9d:76:
         c7:27:c2:d3:88:54:05:5c:dc:48:d9:96:38:b6:10:2d:5f:91:
         5e:87:cc:26:6a:90:71:c3:8c:d5:1e:e0:63:eb:31:eb:9a:45:
         66:49:1c:29:52:45:28:9d:2e:a6:f0:05:e1:59:e6:72:42:ff:
         87:fa:cf:19:70:ea:e1:f3:29:24:ee:62:0b:1b:56:f0:98:fa:
         78:88:e4:b1:83:33:fe:ee:c2:27:12:dc:d5:cf:fe:3f:7f:c1:
         34:b8:d6:b3:b6:0f:8d:18:4d:f9:6d:e6:b2:18:70:43:86:28:
         d4:71:bd:70:2c:4a:3f:b9:75:23:d9:05:f0:8a:79:a9:88:1e:
         01:7e:51:1a:45:db:51:be:45:da:3b:62:c6:a9:fe:87:73:98:
         84:96:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:39 2026 by rpki-client