Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2ab3d2a-3068-3352-b612-b602920c48ac.roa
File:                     a2ab3d2a-3068-3352-b612-b602920c48ac.roa (raw, json)
Hash identifier:          YeWQ/hdHUmeDi56GLPvzmBpOChfmOxBExppIElZvsp8=
Subject key identifier:   36:D0:DC:DD:9B:14:AF:36:FB:C0:EB:9F:A9:23:FE:13:C1:52:E8:31
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44660350871CDB2178CF80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2ab3d2a-3068-3352-b612-b602920c48ac.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:81a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:66:03:50:87:1c:db:21:78:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=c5f38e2c-7a0c-40d6-afea-8efa14f3ead2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:d9:73:33:3e:42:e6:59:7e:e9:70:7e:b1:
                    57:e6:ac:e0:5c:e7:3d:c1:0b:50:80:c6:34:ec:9a:
                    4d:94:b6:6b:9b:69:f9:30:f8:de:c0:4c:a3:f9:ac:
                    30:f9:31:93:b5:0a:b0:7c:37:e9:79:7e:08:d6:7e:
                    74:5b:47:32:17:82:b8:5c:c2:f5:7b:8c:42:53:c1:
                    75:c2:ea:2c:2f:a1:6c:c2:cb:75:f6:ea:f2:d8:99:
                    25:80:88:05:b9:31:3b:a7:2b:2f:41:6f:7b:e2:24:
                    22:fd:fe:48:c5:c3:66:0d:80:50:f4:c0:be:97:7f:
                    ef:c5:62:79:f5:a8:38:ca:2b:fc:bb:5e:54:55:69:
                    2f:e2:a4:7d:2c:e6:d9:04:32:90:c0:e8:e2:83:d5:
                    c5:7f:5d:b3:e4:d3:99:a0:0c:29:e0:9c:9f:e3:ed:
                    31:50:e4:0d:84:51:8a:0e:21:c7:dc:b2:82:f3:8a:
                    21:ff:39:4d:2f:a8:3b:50:d1:f2:d1:c9:52:9f:30:
                    6e:35:43:aa:e2:24:a0:9a:8a:2f:ef:d7:11:a7:3c:
                    4b:5b:25:d5:5f:d0:e5:92:27:7e:fe:1a:0a:f7:65:
                    f6:9e:3e:95:d9:77:94:79:f8:62:30:8f:bb:c9:58:
                    4f:7c:3b:a3:41:e8:0a:94:6b:11:2c:bd:de:5c:ba:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:DC:DD:9B:14:AF:36:FB:C0:EB:9F:A9:23:FE:13:C1:52:E8:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2ab3d2a-3068-3352-b612-b602920c48ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:31:63:44:72:e4:0e:28:2e:f4:4d:c0:e1:5b:8f:86:20:fd:
         5a:13:a8:6c:dc:c3:6b:65:7b:6e:96:88:87:29:fb:a8:8f:cc:
         a0:14:5b:96:79:ee:d2:90:52:37:fe:6d:02:80:9f:64:31:69:
         f3:09:51:4b:56:1e:6c:2a:c8:ce:f3:28:1d:b8:94:db:d4:b7:
         7f:33:8a:3c:9c:1c:ae:35:4a:3d:17:a1:b2:3a:64:9c:fe:6c:
         61:9a:e9:52:d0:bc:1f:8e:5b:81:cc:79:0b:84:90:f4:71:02:
         42:1e:7d:31:96:49:51:d6:b9:c5:06:ea:56:63:88:c3:b2:13:
         9a:e5:48:04:58:d8:3a:97:77:6b:18:d8:8d:38:d7:6a:92:af:
         24:1e:16:ad:91:18:78:95:c6:1b:a5:7c:1b:8f:bf:6d:44:8e:
         ea:55:e7:36:d8:02:57:07:f2:6c:15:f8:6d:9b:df:6a:03:65:
         f8:ac:fe:17:4d:d2:cc:e8:d7:f3:b9:ce:f9:a0:ae:03:b7:e4:
         aa:45:87:fd:f4:46:2f:ab:48:10:f0:ab:76:a6:c6:52:db:ff:
         96:50:16:ff:9e:09:b3:ec:a7:8d:fa:39:62:d3:cb:c7:e8:60:
         57:4e:e1:3e:e2:e9:e2:63:23:7e:da:b9:d3:d0:a8:75:f8:4b:
         28:42:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:05 2026 by rpki-client