Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa
File:                     71d70320-47a7-34ad-bc0e-65f795016969.roa (raw, json)
Hash identifier:          HyHzi+0W63gEuBVG55hBkNWrHXXSuI1Za9gUaUUB2ac=
Subject key identifier:   3A:7B:FE:0F:27:11:FF:D0:F5:F6:E8:DA:18:44:1A:8E:57:C0:0E:0B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44888BDA87F7CD2451D220
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:88:8b:da:87:f7:cd:24:51:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=06f72a77-0b38-4bab-9b31-0bf9f29188d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:54:48:b7:1d:bc:80:92:29:ed:4b:6f:7d:
                    38:8a:14:2f:bc:11:8b:ce:39:18:cc:cf:e7:4b:91:
                    8c:7e:4b:4a:22:2f:cf:e3:b3:ff:5e:33:75:0f:5f:
                    7b:6c:fd:db:bc:92:19:99:9f:ae:33:66:e7:7b:ff:
                    dd:d5:b6:41:7e:ca:18:10:67:24:98:7f:0a:1c:da:
                    c8:ce:7b:04:f0:58:69:86:4f:b6:89:20:67:1e:da:
                    e5:2a:d6:3e:a0:26:f4:f5:48:da:75:03:87:c7:fb:
                    04:b2:98:1e:48:d8:f5:cb:07:c6:04:50:23:32:3a:
                    42:62:49:c5:5c:0f:57:93:bf:53:72:af:d3:a8:e9:
                    9a:a4:5d:a8:a6:e0:6d:56:9e:83:2b:a8:d1:85:94:
                    75:b7:3f:04:2e:ec:3c:4a:83:b8:8e:b0:e0:8c:3e:
                    47:d4:90:22:5c:11:97:d1:bb:7a:0b:c8:48:ce:b5:
                    d6:c0:64:0e:c9:95:77:32:14:d8:9e:23:44:35:b6:
                    62:73:47:b4:7c:0a:c6:d6:c9:e0:3c:ae:7b:62:d1:
                    5c:5e:96:f0:72:9d:0b:45:ff:76:24:e3:94:81:f6:
                    7c:01:f2:50:09:a8:53:55:b5:20:56:65:1d:23:80:
                    92:a4:63:28:bb:f3:f2:20:55:d7:5e:37:43:2c:68:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:FE:0F:27:11:FF:D0:F5:F6:E8:DA:18:44:1A:8E:57:C0:0E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:dc:e1:95:dc:d3:d6:92:47:d2:d8:1f:29:6c:7c:b1:9e:8c:
         35:fb:8d:02:8d:38:6a:26:cb:a7:38:04:0a:19:0a:d3:15:90:
         a0:53:a0:be:e3:d6:ad:f4:d1:69:5a:ad:4d:4b:31:36:1d:07:
         05:3d:f3:a5:a8:3a:55:e5:f3:c6:a9:f1:11:25:85:05:b9:bc:
         b0:b4:5c:c2:f8:16:25:2b:93:8c:55:7a:fa:11:af:49:25:29:
         52:7b:cb:22:cb:7d:e8:eb:0b:97:dd:7d:2e:70:9e:80:3e:96:
         8d:65:72:d2:44:e8:d4:4b:e8:b2:56:5d:26:36:74:7e:f1:27:
         2a:ba:01:79:a2:f7:d6:50:54:de:c5:0f:94:0b:47:82:ff:67:
         ce:4f:b7:18:ab:d2:b0:d4:dd:19:d3:cd:3c:92:15:7c:ce:5c:
         03:73:be:a3:76:c7:e4:20:24:4a:e6:d0:4f:66:5e:f7:5e:0d:
         2d:8d:6f:7c:1e:d0:fb:dc:96:4e:a2:df:38:0f:08:83:32:43:
         2f:80:13:30:ee:70:c4:43:e6:78:80:87:ec:19:16:4f:c2:04:
         8e:63:45:bb:1f:e1:3e:2f:c1:9e:b5:10:4d:4e:28:37:f1:c8:
         62:ff:13:8a:af:66:d2:bb:79:61:df:95:ba:f1:00:e1:4a:f7:
         18:ce:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:15 2026 by rpki-client