Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/474f54ea-9498-3afd-b8bf-d9c6efe5d433.roa
File:                     474f54ea-9498-3afd-b8bf-d9c6efe5d433.roa (raw, json)
Hash identifier:          PazdaG6j+3dGwjWI5wxj8c0jWHkqWjTTpk5/o3V7I04=
Subject key identifier:   0B:BA:F9:69:72:B4:93:1D:77:DB:B9:AA:29:7C:47:17:16:8C:1B:76
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E445D6F3F2433DCEB055C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/474f54ea-9498-3afd-b8bf-d9c6efe5d433.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2603:9007::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:5d:6f:3f:24:33:dc:eb:05:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b41a2feb-4c2e-4ce4-b751-5cfbfc8a473d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:cf:4f:ff:3d:43:6b:4c:68:f0:08:91:7f:
                    74:a4:65:32:c6:25:8d:eb:a0:15:92:99:fb:18:5c:
                    06:04:a7:36:03:25:b2:4e:65:16:bc:67:ff:9b:e5:
                    73:b1:77:9e:38:47:cc:9f:a3:74:9f:aa:16:e0:dd:
                    5c:7b:c7:eb:6f:4f:ce:dd:b6:de:61:7b:88:04:c4:
                    49:d3:cf:51:83:24:db:49:24:81:b1:95:6b:40:93:
                    5c:96:be:a5:b5:c9:5d:b2:ce:f8:9f:3b:38:d5:35:
                    68:d7:ab:56:9c:80:d1:16:55:76:7f:73:14:44:10:
                    42:0d:27:1a:c2:0d:b6:37:30:f5:e5:07:5e:0b:a5:
                    a8:70:c7:9e:76:0b:5f:51:db:da:86:28:b0:00:8d:
                    eb:4e:cc:26:e2:b3:1c:b9:d9:b3:c7:ac:ed:bb:58:
                    35:b6:14:75:9b:62:75:c0:f7:c5:85:5f:6c:d1:e3:
                    cb:5c:d7:0d:31:39:25:c8:e9:6c:b5:51:4e:a8:54:
                    ec:ad:c3:84:96:89:4f:45:c9:6c:c9:d6:2f:64:3f:
                    2f:35:0e:f7:cf:79:2c:dc:e4:d3:a8:85:77:81:4c:
                    b5:db:b8:d1:c8:78:c1:e2:8a:00:d3:5d:7a:53:b0:
                    66:32:6d:0d:39:88:87:72:ee:dc:59:77:c7:93:ad:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BA:F9:69:72:B4:93:1D:77:DB:B9:AA:29:7C:47:17:16:8C:1B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/474f54ea-9498-3afd-b8bf-d9c6efe5d433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9007::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:fb:bc:08:31:db:df:92:79:ae:4e:dd:5f:f5:32:6f:b3:
         c4:66:63:73:03:54:14:1e:26:a0:47:05:fc:92:78:4a:e7:8e:
         8d:46:2d:ce:0a:f7:ce:77:0f:37:14:53:33:69:3c:b3:9b:0a:
         cb:92:bc:46:38:03:25:2b:aa:d1:47:ca:49:a4:77:5f:8f:6c:
         4d:40:56:27:da:38:d4:3d:00:9b:0b:39:14:df:7c:f2:ed:a2:
         21:d7:e2:32:a7:40:03:51:60:75:b8:ea:90:d0:be:fe:8d:da:
         05:70:07:2d:c4:4e:19:8c:69:da:98:ed:b7:c7:87:85:05:31:
         da:47:a8:6a:8d:ab:06:86:e2:1a:aa:6e:c0:c5:ea:88:6d:a2:
         f6:fa:be:f6:85:f9:38:aa:b9:79:7d:95:21:9c:7d:da:11:1a:
         1d:b6:07:21:f5:ff:08:21:6c:15:35:a3:6a:3e:06:98:db:e1:
         ba:58:ec:0e:19:e7:b9:f8:a3:60:03:45:83:79:e0:94:e0:12:
         56:e5:5b:9b:73:b4:10:d7:00:63:6b:5b:ee:6d:1d:dc:8c:0f:
         7e:2a:80:ed:8e:f6:88:1f:5d:d7:3a:17:66:f6:ba:85:d9:e7:
         5c:ca:96:78:7b:4f:ef:ec:ec:a7:f5:9c:8a:0e:03:1d:3c:a0:
         42:fa:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:12 2026 by rpki-client