Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4dace974-687b-3c1e-9efd-a835078c8ed5.roa
File:                     4dace974-687b-3c1e-9efd-a835078c8ed5.roa (raw, json)
Hash identifier:          97oH6+vtiE7ip15o2i05s6BzO9OgwAhGz0/KMnrtZek=
Subject key identifier:   D6:67:98:13:24:47:0B:C2:36:7A:B7:A0:FE:84:48:9C:CC:B3:FE:62
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E446453427020B7A218EF00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4dace974-687b-3c1e-9efd-a835078c8ed5.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:808e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:64:53:42:70:20:b7:a2:18:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=5565d703-4642-430c-af47-0713e8e15112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:78:6a:84:4f:57:d9:0a:ae:4a:ae:c9:98:
                    6a:75:c9:b7:c7:2f:1d:ef:43:1e:4a:37:54:a5:f0:
                    25:03:2a:27:d1:72:9e:e9:3e:9e:9f:f9:7c:2f:b0:
                    49:2f:cd:f2:53:f0:71:75:84:00:57:c7:47:27:d1:
                    2f:c2:20:bc:95:ac:d2:be:02:c0:68:31:16:20:6d:
                    cf:54:82:07:c4:47:71:7c:42:99:83:b3:be:41:4f:
                    13:da:ad:b0:ca:76:3e:9a:21:82:ea:bc:98:0c:c8:
                    eb:a5:a7:ed:cc:c1:fc:f9:d0:3e:6b:bd:47:a9:5a:
                    44:42:d4:f4:4d:a1:e0:27:72:63:53:a6:25:f7:2e:
                    64:6a:cf:04:a6:82:30:32:ca:17:60:97:d5:c8:c6:
                    65:ff:c3:aa:4a:48:b1:bd:61:89:62:cf:94:ea:3c:
                    95:5f:65:da:c4:ac:6c:82:23:18:2e:09:a4:8f:9c:
                    b4:d1:42:c2:ed:97:dc:2f:c7:cd:18:23:27:c9:b2:
                    b6:6f:79:83:c5:85:16:0f:05:9d:07:f6:f9:a8:05:
                    fe:0d:79:ca:10:65:57:f1:31:56:96:61:82:cf:50:
                    25:6e:d9:02:d7:14:6b:b5:21:a0:c7:71:45:c9:eb:
                    8e:88:a8:0e:76:5e:c2:68:88:9e:e5:35:c3:52:4d:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:67:98:13:24:47:0B:C2:36:7A:B7:A0:FE:84:48:9C:CC:B3:FE:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4dace974-687b-3c1e-9efd-a835078c8ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:808e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:bc:c2:0e:83:36:83:30:c0:1d:71:54:af:3d:0d:fa:5a:
         1a:67:52:56:1f:d5:da:8d:ea:38:9c:0f:b0:59:b1:b6:93:41:
         ba:13:93:15:7d:2d:56:3e:16:1f:cb:b4:dd:c2:a9:e3:1f:37:
         59:47:2d:bd:2a:64:70:9b:a9:62:9b:3a:27:39:80:15:2c:4b:
         64:6e:37:62:45:79:37:ef:03:76:ce:40:79:7d:bb:fe:98:7a:
         6d:73:3c:bf:0e:12:3c:ac:9b:84:90:51:fa:18:db:07:98:e5:
         6c:9d:ef:ed:8d:44:9a:14:25:6a:fc:0b:91:ff:eb:3a:e8:53:
         54:27:59:b6:36:ae:4a:37:d2:10:ff:cc:7b:df:31:6e:df:84:
         87:7b:fa:b1:6a:c3:22:40:18:69:cf:d7:65:48:b6:30:ab:43:
         31:e7:a0:7d:b4:1a:81:95:53:7c:ab:ca:11:b0:76:a1:32:49:
         db:d5:3e:a2:6b:c2:ce:14:1d:5e:8f:e9:7b:37:fb:9b:e5:73:
         74:a1:aa:7b:44:37:86:2e:53:82:3b:e1:71:4e:75:de:e8:12:
         b2:6f:08:fb:9b:fa:a0:6d:ab:64:b1:3b:e7:07:e7:1e:1d:4c:
         c5:74:83:49:46:dc:83:d8:af:dd:2d:fd:30:66:da:e0:dd:5c:
         85:27:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:39 2026 by rpki-client