Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa
File:                     3c57db79-bf18-3a38-b9c2-1995b96a055c.roa (raw, json)
Hash identifier:          JQWr64Kaksc4SIVG/QnDq567sZ4kkZzLv+THUTYZLAI=
Subject key identifier:   AE:30:A1:85:55:1F:21:5C:7D:C3:93:22:8F:B3:E0:2F:80:D7:9B:12
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44630FA1221D39D4085100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:63:0f:a1:22:1d:39:d4:08:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=8d0af374-a1d9-4170-8dd6-af4200bb42cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:14:fd:38:20:31:41:73:6d:b9:ba:50:b9:0e:
                    02:d4:5c:87:f1:63:b6:25:2a:50:2b:a0:47:7d:d9:
                    63:3b:5e:38:c4:d4:0b:02:ab:22:5a:2c:90:4b:ad:
                    f7:db:87:70:7f:f2:51:49:0b:e0:fa:05:34:bf:9f:
                    3c:1d:10:d1:e1:77:f5:41:01:a8:b5:24:11:88:d6:
                    e9:01:15:e5:d3:72:b3:47:12:c9:e3:a8:92:8a:ae:
                    a4:bf:2b:00:56:29:6c:8e:d9:52:34:a3:e4:3a:f4:
                    76:b3:88:68:35:3f:bf:fc:66:1f:97:b2:5a:66:d8:
                    13:6f:37:ca:71:42:e4:17:10:4c:16:59:ac:21:11:
                    f1:35:a3:b7:e7:bf:33:73:70:2b:b0:7f:75:1d:6e:
                    c6:75:2b:2e:d6:f3:54:5f:fe:82:9b:37:fe:7c:13:
                    10:a9:42:e6:9e:7a:2a:28:17:dc:63:6a:c1:5f:5c:
                    3f:17:7e:08:7a:57:19:d5:3e:93:0a:c9:e5:86:e4:
                    e2:9e:3d:80:5d:e9:66:3c:ae:5f:64:6e:ba:27:e4:
                    d9:4a:77:53:11:c0:5a:0c:d4:ea:25:f0:b0:2d:7b:
                    f4:ed:40:4c:81:08:a5:ad:b8:ca:ac:67:df:10:ef:
                    1e:0d:9d:a7:c9:12:f2:f6:8c:96:64:fc:2a:a8:69:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:30:A1:85:55:1F:21:5C:7D:C3:93:22:8F:B3:E0:2F:80:D7:9B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:d7:11:d3:59:3c:c2:b2:d1:1c:98:87:a4:c5:e7:ab:32:
         08:22:ba:64:3d:c9:bb:06:03:ea:33:63:58:5b:5c:85:85:a4:
         62:f8:e8:9c:ee:72:1a:c4:6e:fe:76:09:b9:1b:24:c6:45:32:
         73:a7:0b:4b:9b:1a:71:97:4e:60:0e:30:39:36:f7:e2:47:f7:
         bf:a9:b5:af:f8:5e:84:12:50:53:ae:b3:23:e1:95:13:ef:33:
         3d:00:ed:1b:dd:3e:90:a8:47:4e:28:a3:df:5f:b8:44:a2:1e:
         68:02:2f:d1:fc:ad:ee:46:b6:35:7e:b7:4a:f9:56:05:fc:c9:
         83:23:a2:b7:86:d6:b9:47:97:f7:b4:96:bf:88:9c:34:5a:93:
         15:7e:1e:33:8d:8b:82:d3:cd:91:c1:21:df:ac:f7:e4:07:ad:
         66:2d:0a:f2:1f:52:5d:2b:4c:76:64:d6:e6:31:f8:1b:95:d8:
         f6:7b:85:19:e4:56:f1:1a:d3:ee:05:90:e2:56:c3:78:4e:a6:
         01:f1:fe:4d:14:bc:f1:e7:cf:3a:61:e1:89:5d:91:b9:2d:66:
         20:f9:cc:58:fa:7a:b1:fe:d6:16:ec:59:c2:a3:2f:d3:73:d0:
         db:34:22:4c:db:b5:65:5c:a3:75:52:58:e5:69:af:d7:9f:6c:
         2f:1f:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:12:55 2026 by rpki-client