Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b656372-1438-358d-9585-7ec710b94aed.roa
File:                     3b656372-1438-358d-9585-7ec710b94aed.roa (raw, json)
Hash identifier:          BA87dHNZFiH5ZLSlQmC8gpRI94E3Gs1x+pskhGfcTMA=
Subject key identifier:   C8:01:AE:64:BA:E4:47:60:4E:71:DA:12:C8:F1:02:62:1C:C3:0A:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44791090579407084127E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b656372-1438-358d-9585-7ec710b94aed.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     12271
IP address blocks:        2603:90be::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:79:10:90:57:94:07:08:41:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=99133ca6-1758-44da-947e-98e23515619c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:8a:4f:78:87:71:3d:78:9d:60:50:d9:16:
                    23:24:65:f4:4f:0b:4c:b4:ce:a3:7f:28:07:45:d1:
                    bc:49:c4:a8:16:dc:f1:68:77:1a:90:4b:82:24:01:
                    68:33:ce:34:1e:eb:12:91:b9:01:4b:a3:a7:46:60:
                    4e:9b:a6:20:fc:d4:29:c9:bd:54:21:9e:5a:08:2f:
                    a3:51:b7:3d:7f:6f:9d:fe:b0:f2:86:9d:1d:77:fc:
                    99:08:30:e6:3b:2c:a0:06:dc:ae:a7:47:22:cd:24:
                    6b:9b:2a:a4:f3:47:df:57:4f:80:97:00:e3:bc:40:
                    e8:05:ed:6d:e8:11:ef:0e:93:5f:99:2b:f7:4a:77:
                    32:9e:f4:25:c7:70:de:f7:57:ac:ef:ac:47:35:a2:
                    ac:6f:30:3d:f1:73:fa:40:c0:ec:cd:1a:ec:d0:d7:
                    50:ba:33:98:23:34:dd:46:73:fa:16:ba:42:08:de:
                    ef:c2:97:3d:d4:75:b2:f3:45:67:3c:b0:93:35:4e:
                    fa:d8:47:6d:7d:16:df:82:ef:02:17:34:6c:26:7c:
                    88:5a:75:70:ee:20:90:d0:e9:9f:10:3a:57:db:d5:
                    41:ea:b8:19:90:1e:fc:b6:e2:55:78:96:91:7a:81:
                    30:fe:1c:83:1f:92:f0:4d:f2:88:20:09:66:44:38:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:01:AE:64:BA:E4:47:60:4E:71:DA:12:C8:F1:02:62:1C:C3:0A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b656372-1438-358d-9585-7ec710b94aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90be::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:48:e6:49:55:47:a8:82:6e:38:d8:78:94:db:cd:65:96:a5:
         63:b1:0d:f1:f0:a3:be:90:8e:da:01:72:2e:39:bf:f6:c0:e3:
         03:37:ad:a3:7c:58:71:19:a0:ee:91:10:71:6c:f2:3d:3e:e8:
         03:b0:7e:41:60:72:1c:2c:2b:e2:29:e5:e0:c3:b6:d6:42:05:
         08:67:7f:6e:7e:9d:36:71:84:a2:20:8c:74:1b:f8:92:24:1d:
         ed:d0:e7:7c:67:78:27:59:59:ed:00:27:da:28:ab:cd:4e:ce:
         70:6d:e0:1b:ea:21:bd:2d:be:18:d0:54:af:10:35:ca:7e:63:
         31:ea:07:7e:28:45:f8:a9:a7:e8:89:75:c3:c9:05:0e:72:39:
         ba:be:4a:29:b5:45:df:47:95:4b:2a:22:fe:a9:36:32:45:95:
         17:a5:c0:83:75:fc:f6:c6:f5:2a:f9:f2:b6:0e:4b:aa:57:c1:
         c4:f9:59:80:2e:fe:7d:28:a7:c6:3f:3d:fb:da:de:9b:3c:ce:
         a9:fc:dd:53:83:4a:17:96:f7:5a:ce:d6:8e:ef:c6:1b:74:01:
         51:58:f0:e8:fc:68:f1:f1:c3:dd:d2:96:d0:39:e4:0d:f0:dc:
         46:b9:31:80:34:ae:96:ef:c3:c5:c5:24:16:d1:d4:4d:28:02:
         8e:34:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:32:27 2026 by rpki-client