Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa
File:                     28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa (raw, json)
Hash identifier:          xA0hsaKmtgWDfNqw1Lwe1qZHVAM+UCOIxJPXsU66MzY=
Subject key identifier:   AE:1F:34:25:8F:30:2F:97:4D:6A:FF:2F:2B:E5:33:43:CA:88:1A:95
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4461A4EADEB2D32B9F5380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8209::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:61:a4:ea:de:b2:d3:2b:9f:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=ea3f1fcc-3fe1-4988-b6c9-9e3db1e4d969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:36:b9:af:37:28:95:ab:83:64:4e:7d:fb:
                    11:16:58:c9:be:27:22:22:7d:27:00:a4:df:be:ec:
                    eb:87:77:30:38:c5:e9:a5:f1:f3:c7:dd:18:b6:ee:
                    e8:5c:16:36:d7:52:77:62:1c:fd:2b:3c:f5:22:6d:
                    2d:a2:66:38:0b:5e:18:62:89:bf:f5:26:49:24:e2:
                    7a:f8:67:42:1c:46:07:0f:c0:87:df:cb:a6:5c:d5:
                    ec:4e:8a:4b:bf:a0:29:d6:4b:bb:cb:fd:22:05:0d:
                    72:bc:f3:48:eb:74:26:63:d6:cc:07:5d:19:dc:19:
                    d0:18:71:54:27:ba:1a:48:5c:6c:16:33:13:9b:c1:
                    dd:06:8c:0c:c3:98:1d:4c:82:b8:f5:a6:7f:bc:6d:
                    3c:87:5e:67:12:80:53:ce:b7:2d:a8:f4:55:ab:6d:
                    1e:8c:39:70:93:25:16:41:0c:aa:bc:be:e0:5f:a2:
                    55:37:e9:f0:a0:c5:9c:2d:5f:c8:22:26:1d:c2:9e:
                    c6:f0:64:b6:9e:74:10:df:c4:8e:ef:7a:96:cc:dd:
                    02:6f:8a:ee:92:ed:0d:59:19:28:28:c5:55:d7:62:
                    0f:d6:3b:94:89:21:b0:0f:0e:ba:a1:e2:24:55:19:
                    eb:b0:75:9e:0c:3d:2a:90:7b:6b:03:cc:7e:f4:e2:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1F:34:25:8F:30:2F:97:4D:6A:FF:2F:2B:E5:33:43:CA:88:1A:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8209::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:96:4e:97:06:b0:3d:63:62:17:5e:6c:0d:a8:cf:7b:15:2a:
         d9:a7:b1:16:7a:85:c8:7c:f5:23:2c:bb:94:dd:c7:61:69:41:
         0c:49:0c:41:11:be:71:5f:06:9e:c0:03:dd:8a:1d:26:2e:20:
         51:98:57:d8:95:96:54:df:02:50:9a:46:84:d3:ce:99:b4:20:
         3c:6d:cb:0e:9c:c5:ff:b5:f5:0a:8b:e5:f9:c1:14:02:45:2a:
         76:ac:a0:dc:ba:c2:55:9d:08:10:31:79:1a:27:59:48:ef:99:
         ed:47:92:d0:55:49:09:cd:ed:bb:42:c5:2b:29:90:af:4c:37:
         fc:d6:ee:0a:f0:27:d4:a7:b5:71:2c:f6:df:9a:53:14:7d:44:
         27:19:81:f5:1e:f7:83:f7:00:2d:36:f5:63:d2:35:0c:5f:e2:
         8f:3a:ea:b7:55:a4:f1:7b:af:ad:41:e0:ad:79:74:2f:4d:09:
         e5:0c:3f:c3:07:99:3e:3e:51:28:b7:7d:48:f3:8e:68:45:25:
         5c:ce:6d:a5:6a:25:10:0d:99:8a:eb:9e:4d:cd:29:fc:01:f6:
         cf:41:83:48:59:18:51:3a:61:51:6f:8f:f1:c4:c2:bf:00:d0:
         9a:59:9e:06:63:9e:a9:7a:1c:52:7f:b9:9e:a3:e5:a6:a7:ed:
         0c:45:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:46 2026 by rpki-client