Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa
File:                     b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa (raw, json)
Hash identifier:          DxQYKxjfMk4UTpzRktBR5ZPmOW7u2CowT3zQ+bXBxZw=
Subject key identifier:   ED:5F:AA:4B:71:60:7D:81:AC:E1:5E:4C:4A:AD:89:7C:65:1D:5E:CB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4489EF7EC827F2845C26C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8151::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:89:ef:7e:c8:27:f2:84:5c:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a973103d-0278-4482-a372-a3349e109966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:78:b4:00:43:dd:64:5b:e8:86:b7:b4:0a:
                    d0:24:9d:dc:ba:c1:11:a7:29:87:52:7a:66:9a:a4:
                    e8:5e:e9:7c:fb:fc:b8:32:1f:06:3d:d9:6a:89:95:
                    95:35:a8:fc:01:15:80:ae:0f:5a:c4:8d:24:d2:f1:
                    e6:0f:8a:50:45:4c:f6:2d:91:3d:85:d9:78:5a:e3:
                    9c:e0:8f:e9:53:a9:87:da:45:64:99:e4:39:69:f5:
                    30:3b:72:e2:f0:54:ec:6c:3a:41:7b:2f:45:f5:bd:
                    1c:47:99:15:71:fd:3f:a3:ce:c2:18:85:cf:7a:33:
                    01:3d:7c:96:d1:e2:35:89:af:0a:a9:c5:e1:3a:4e:
                    34:f8:14:cd:fd:4e:1d:7c:89:ae:03:fe:47:38:e3:
                    3f:86:7e:4f:ad:a3:2d:3e:00:62:67:bc:f3:b4:ad:
                    33:f4:90:7b:f0:9d:b1:d8:6d:c0:fe:ab:a8:76:8d:
                    60:f5:8e:ce:34:02:38:79:97:f6:12:78:c1:0a:19:
                    26:19:c1:b4:8e:59:3d:67:61:d0:51:74:7d:6c:3d:
                    b5:39:ab:9a:4c:48:0a:47:18:a9:cd:d5:d2:22:eb:
                    d7:fc:52:5e:ba:32:2d:43:22:37:0e:df:6b:24:ae:
                    97:73:91:42:bd:86:dd:3a:65:ee:4d:11:92:22:8a:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:AA:4B:71:60:7D:81:AC:E1:5E:4C:4A:AD:89:7C:65:1D:5E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8151::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:97:a0:23:64:59:13:9d:4d:f2:96:84:2c:da:60:2b:d0:
         fa:6c:23:fa:60:2d:c4:59:c4:fb:9f:d1:dd:b8:ff:43:f2:dd:
         42:25:a4:dd:69:07:76:5a:c6:58:1a:99:5e:cd:d4:d6:f9:b7:
         ee:3b:1f:18:cd:e9:88:8c:e6:68:ae:dc:a7:af:82:f6:30:70:
         47:2a:65:83:18:41:6f:08:9e:8d:71:6d:1c:92:b9:51:f4:15:
         56:7d:d6:21:ce:ee:7e:e3:cf:3f:bb:ff:3d:60:f1:85:a0:74:
         18:a5:36:90:75:c4:39:7a:60:26:eb:f9:fb:34:5b:fe:bc:a0:
         6f:29:02:8b:f3:53:5f:4d:52:e3:7f:10:8e:a3:4a:42:64:5a:
         7b:81:00:ce:44:ef:e7:82:d8:61:46:d3:44:95:8e:b4:13:89:
         8c:c4:d7:84:0d:70:7a:e3:3b:03:9d:09:a2:29:d0:89:f2:e4:
         7e:7a:eb:de:24:4d:b8:a1:78:fc:0c:19:81:a1:6f:90:c0:de:
         5e:7e:73:d7:59:7a:51:bc:29:02:87:8c:11:57:6d:1f:e3:bb:
         e9:67:e0:d3:3c:d8:90:80:3a:71:db:1a:6f:14:0e:dc:12:d6:
         ee:31:55:06:44:e8:db:6d:46:cf:94:2b:a2:5f:84:6a:14:d5:
         f4:ca:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:45:07 2026 by rpki-client