Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4393a060-0e2f-3249-9574-2ed7f187f0eb.roa
File:                     4393a060-0e2f-3249-9574-2ed7f187f0eb.roa (raw, json)
Hash identifier:          iZSCMX2FJpLycWb08n587rcHCXDvyXt96faSSCRvKxA=
Subject key identifier:   67:09:C6:40:68:11:F8:5A:29:7F:4F:1F:36:0F:A9:42:7C:6B:69:D5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4484AC599D5ABBE4D1FDA8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4393a060-0e2f-3249-9574-2ed7f187f0eb.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8090::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:84:ac:59:9d:5a:bb:e4:d1:fd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=59299b65-2557-4af5-a3f5-8c48205d138c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:6c:56:ba:7b:f6:08:0b:64:1a:cb:67:21:
                    28:ee:ee:e3:34:8e:7b:8a:d5:a8:df:db:b5:37:e3:
                    43:d9:a7:8e:f2:6a:b7:61:47:29:f6:1b:b9:01:ca:
                    0e:76:7c:77:02:4c:65:85:ba:09:dc:45:b0:7a:9e:
                    44:b0:fc:04:b7:7a:3b:99:f4:44:24:1f:0b:9c:46:
                    02:17:f7:c9:7b:ba:3d:95:e5:a4:7b:06:3d:66:d3:
                    f4:ee:ef:9f:c3:57:e9:a5:c4:a1:ae:3e:26:ce:a3:
                    71:a9:ab:57:e4:ec:ec:96:fd:0e:9c:31:5d:04:85:
                    55:35:90:fb:e2:26:6f:9d:bd:d2:89:47:94:4c:1a:
                    8b:cf:2f:d4:0f:1a:e1:7f:f0:31:aa:c8:af:4c:9f:
                    af:1a:1e:9b:69:47:14:6e:2a:d4:b5:be:a9:d7:2d:
                    e4:d7:d3:3a:31:20:fe:cf:04:f0:08:29:fb:31:28:
                    99:37:d9:48:23:57:df:6b:87:96:de:fe:11:14:c7:
                    1f:18:6b:19:51:38:b6:80:e3:56:8b:12:f7:5f:f2:
                    74:72:fc:97:fb:12:d6:57:46:0d:37:b9:7f:fe:1c:
                    52:24:e2:08:61:f5:6b:63:87:cf:d8:dc:75:11:7c:
                    b0:2d:b9:92:84:c9:f4:d6:fc:21:0b:3c:6b:f7:94:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:C6:40:68:11:F8:5A:29:7F:4F:1F:36:0F:A9:42:7C:6B:69:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4393a060-0e2f-3249-9574-2ed7f187f0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8090::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:21:c9:08:34:90:53:f1:21:b1:e9:30:f4:b2:b1:f0:25:0c:
         81:b4:d6:25:a0:1f:a6:49:5d:d7:6a:62:14:69:cf:96:52:ca:
         97:76:65:0b:ff:e0:72:7d:db:38:b1:a1:47:31:03:0d:cd:69:
         7c:11:6d:b2:f2:a7:68:ca:ba:fc:ce:20:01:40:f3:27:62:71:
         1c:42:9b:65:e8:77:3d:85:8f:d2:07:cc:14:35:be:bb:81:fb:
         17:f0:ed:cc:fb:44:d9:69:a4:c5:3c:08:7f:4d:ec:f9:77:a1:
         8b:8e:66:14:18:ef:d2:38:16:7d:2c:f0:07:bb:01:51:b8:68:
         77:f2:f0:f1:5f:25:3f:da:e0:d5:3f:29:58:93:1d:31:47:38:
         48:83:20:4e:2b:4d:87:13:a5:74:08:7b:a4:54:c3:33:63:41:
         0f:8e:08:31:1a:3f:e6:2b:49:8f:cc:95:72:c0:c5:d2:8f:0e:
         aa:c2:5d:65:29:a0:6b:da:4f:f5:08:60:e5:46:88:76:f8:8c:
         52:7f:0c:08:45:d3:ae:8a:9c:6d:a9:aa:92:b3:9f:b9:0b:d2:
         a1:5d:d5:5d:e5:a8:5f:49:67:24:53:cb:fe:ff:71:62:45:97:
         23:20:14:f8:a2:32:b1:5a:a3:e9:7c:3d:b4:e7:82:1a:0c:45:
         7a:2e:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:19 2026 by rpki-client