Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa
File:                     a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa (raw, json)
Hash identifier:          UZnodOCEe0I4Xi0tYzquEvDjaBTTCmxDBxq/PLp7mmc=
Subject key identifier:   65:CB:4D:56:02:E1:4C:E9:44:E1:1E:DD:14:74:73:90:53:B2:E9:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4461C7192E083504E92E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:822e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:61:c7:19:2e:08:35:04:e9:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=2707a1af-5a46-44e3-91c7-dd9ff359ffc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:c7:72:2a:6c:d2:f8:f5:07:c4:b8:c7:f2:
                    06:ec:c0:a3:d4:36:d4:44:d0:69:bd:ab:6a:1f:fc:
                    84:15:8e:e4:f2:c1:51:93:8d:40:81:c4:b3:d8:f5:
                    cf:62:10:38:88:97:3d:a2:65:40:88:2d:85:76:de:
                    ab:31:91:04:ef:d6:5f:cd:57:28:d5:c9:15:78:99:
                    7d:7d:98:c0:6b:55:35:ba:98:63:08:8f:83:64:66:
                    2b:ad:5f:52:b4:f4:bf:66:a4:8a:1f:bb:67:ae:e2:
                    02:eb:af:33:5d:3a:a9:8e:10:fa:a2:aa:9c:ec:96:
                    07:0a:dd:c9:29:94:1f:94:19:03:df:61:e3:a1:c7:
                    e1:a4:09:40:fb:06:b1:67:67:6d:39:9e:ae:89:58:
                    16:8c:ee:00:b7:4f:20:be:1d:58:7a:47:b6:4d:b3:
                    be:90:db:a4:c7:a9:a9:63:61:5e:f2:6f:96:b9:e4:
                    fd:3d:44:a6:93:84:39:fa:d4:f7:b2:0d:8b:bf:33:
                    6e:c8:2a:43:25:29:26:bf:42:fc:90:05:52:c9:9e:
                    73:df:a1:2a:44:a7:1c:eb:8e:88:d6:7e:29:da:14:
                    ae:80:f2:76:59:08:14:97:e1:83:bd:68:75:0e:7c:
                    82:f9:65:54:f7:72:7d:35:b6:12:ad:2d:b5:a0:5a:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:4D:56:02:E1:4C:E9:44:E1:1E:DD:14:74:73:90:53:B2:E9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:822e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:f7:5f:62:98:1e:42:01:fe:3a:8f:13:51:8f:e9:00:ba:
         26:22:97:f1:35:d6:3c:f4:df:d0:09:d9:ef:4f:08:6d:34:46:
         bf:12:fb:37:7f:21:52:ec:6a:49:e0:f0:99:c2:97:e1:84:e3:
         41:af:c3:d4:90:18:3c:f4:9e:4a:80:38:68:06:d1:8c:30:ec:
         9b:65:79:c0:ee:18:35:50:90:03:72:76:00:7b:71:00:51:d4:
         8b:ee:29:f1:79:5c:e9:a4:1c:45:37:7f:9b:52:2d:d7:ce:77:
         6c:86:2b:3c:27:70:dc:88:ab:57:1a:ca:b5:af:45:93:88:45:
         0e:66:28:3b:32:3d:ca:ba:43:db:0a:d2:e5:1b:fe:4e:af:73:
         69:fa:72:06:70:80:e8:60:d2:fe:50:2c:e8:01:46:07:1c:cf:
         34:cb:f9:12:19:6f:fa:3a:e8:3a:5f:0c:98:7e:f1:bd:8c:5d:
         6b:98:ad:40:e7:d8:1a:b7:ef:0b:a6:88:86:39:6f:18:56:37:
         dc:9a:f0:24:3a:00:55:9c:f7:fc:55:24:a1:f3:88:1c:f9:8b:
         88:51:0e:d1:c1:a8:41:29:a1:38:de:0b:1f:ff:71:24:f1:e1:
         02:59:4e:b7:36:c9:53:00:4a:77:2b:e3:40:1b:e9:c3:94:d2:
         09:9d:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:15 2026 by rpki-client