Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa
File:                     5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa (raw, json)
Hash identifier:          TiF03XLokVdDBv0b5shh4AU8UE11lrZtHxxniVW6c68=
Subject key identifier:   7F:DA:FD:69:DA:61:9F:93:9F:EE:93:58:57:92:67:80:BD:1F:5C:0A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E448622728E49172EBAB880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:86:22:72:8e:49:17:2e:ba:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=0bc8375d-bd1f-4a78-953b-1774a01d9262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:7e:e6:6a:34:95:1d:8f:ef:32:2d:0c:a2:
                    b6:bb:82:87:80:74:25:d8:06:49:ae:a7:20:ec:e1:
                    98:e8:f2:94:dc:f2:19:35:c1:36:d4:1e:1e:e6:75:
                    aa:76:cf:66:02:2d:aa:e8:ae:6e:ff:f1:ea:89:f8:
                    94:03:54:3b:3e:cb:8f:de:88:af:00:83:f0:fd:bc:
                    9a:2d:2b:66:92:67:ba:2c:7a:5b:a0:e4:2f:f0:a6:
                    53:7e:6c:ab:a8:7f:c5:c6:7d:20:3e:85:b8:3a:79:
                    d0:d7:7d:1b:a2:40:19:ea:76:05:a9:ba:0a:d9:cc:
                    21:d7:9e:99:0b:0f:3e:c4:d9:d1:3c:92:af:24:9d:
                    52:29:26:30:eb:df:e3:7a:ee:9b:72:f2:17:13:cf:
                    37:b2:48:d0:97:3d:2b:05:22:d4:ab:70:83:85:6c:
                    8d:ea:1d:ba:93:3e:af:b8:1e:68:ed:d5:97:67:2a:
                    c9:ef:7a:83:58:7d:e4:2d:0d:1e:35:9e:2a:6a:05:
                    dc:d8:0a:3e:d5:50:01:84:08:1f:23:9e:9d:54:34:
                    b7:9f:c8:1f:68:80:b1:41:8e:c4:26:24:0c:a9:a1:
                    8c:92:0a:37:c0:1b:00:b0:3e:7c:f2:99:00:41:b0:
                    bc:a1:7f:44:38:55:6d:d5:fb:d6:cb:cd:d7:79:14:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:FD:69:DA:61:9F:93:9F:EE:93:58:57:92:67:80:BD:1F:5C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8130::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:c7:44:a2:e4:94:76:6e:12:06:fc:21:02:f5:83:8a:de:
         e7:46:68:fb:9d:e6:a1:a7:d1:88:a9:49:68:2d:7f:1a:7c:2d:
         81:ae:69:38:dd:46:d1:34:63:5b:68:58:ee:8a:8d:3c:2a:c5:
         49:3e:4a:bb:a0:da:9c:14:3c:dd:48:ee:96:00:70:21:94:12:
         e6:3e:1e:8b:cd:56:63:cf:5b:d8:f8:11:68:3b:30:f6:c9:2d:
         d0:80:69:f5:58:ed:ea:d0:21:18:83:24:08:3b:bf:f6:1d:d7:
         71:bd:9d:68:c3:7a:25:83:68:84:10:b7:9f:e3:09:4f:6a:a7:
         3b:63:71:8f:d9:d0:7d:97:db:43:1a:ad:24:30:78:67:d3:da:
         0c:8d:09:e0:41:8b:78:7a:1e:9f:e2:bb:78:d0:44:48:ef:fe:
         c2:3e:49:ff:f9:b4:fd:c3:e2:44:c6:94:2a:75:68:c5:d4:ef:
         de:b2:11:01:b8:3a:f6:d9:f7:48:6e:c0:0e:42:39:6f:c0:3e:
         7f:35:19:27:57:9f:b2:b6:29:1d:ef:b6:3c:9d:54:f0:c9:71:
         82:c0:ac:ce:e5:d1:4f:98:50:5c:f1:19:b5:a8:a1:7e:ff:27:
         b7:c0:8d:cc:bf:97:3d:07:c6:05:fa:35:6f:59:08:07:03:97:
         8f:c9:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:00:28 2026 by rpki-client