Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1940a56-0333-33e8-a7f0-812a202e46eb.roa
File:                     c1940a56-0333-33e8-a7f0-812a202e46eb.roa (raw, json)
Hash identifier:          8PM7/GPA7pQC8HnVoS/VrDJAO7F0GYjs2HYbGY/ixGk=
Subject key identifier:   79:A9:93:EB:2B:1F:0D:DD:A7:B9:85:79:C7:09:7A:64:52:96:DC:42
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4467595684BC268872A160
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1940a56-0333-33e8-a7f0-812a202e46eb.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:878b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:67:59:56:84:bc:26:88:72:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a586c3dc-c990-4b51-a235-b376513b68ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:cc:0f:d8:eb:30:39:93:36:a3:91:ea:d8:
                    30:a6:e3:e5:40:0d:24:21:9b:ba:a5:75:71:6d:e6:
                    bf:90:88:c9:64:a5:ea:4c:ec:da:15:d6:8d:c0:11:
                    4d:f4:2c:87:0d:fc:df:68:0f:98:f4:87:63:9b:92:
                    56:85:15:ae:9a:b2:b6:65:b5:67:d3:9f:65:de:11:
                    b1:f1:fd:63:b4:e9:65:7e:cb:41:81:4c:d0:54:cc:
                    43:2b:b7:2f:40:03:19:2d:b8:a7:98:1f:84:0d:59:
                    94:1c:e3:94:92:f8:2c:e4:8d:32:8e:26:9a:48:e2:
                    33:48:d8:0c:a0:78:5d:70:61:05:b9:9a:36:60:f2:
                    6d:4e:25:e3:ae:58:6a:2c:f1:bc:48:4d:ae:c7:bd:
                    37:bf:f2:74:e3:b4:01:88:a4:61:6c:25:15:36:68:
                    ca:75:73:41:7a:52:60:9a:25:b8:84:97:e2:0d:c4:
                    20:0d:f2:30:a7:69:90:cb:12:7f:d0:13:31:8b:60:
                    89:50:aa:05:ea:a5:a6:cf:fb:4e:a3:19:54:6b:ad:
                    1c:e2:cf:ac:e0:9f:ba:c4:ea:bc:27:30:72:a6:82:
                    4c:6f:aa:74:57:15:31:09:bf:f9:f5:1f:d7:f0:05:
                    52:ec:38:c4:4d:2b:93:b6:c7:be:f9:2d:ba:91:1f:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A9:93:EB:2B:1F:0D:DD:A7:B9:85:79:C7:09:7A:64:52:96:DC:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1940a56-0333-33e8-a7f0-812a202e46eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:878b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:c0:c4:77:af:46:5f:91:3b:bd:5b:54:1a:96:d4:13:0c:
         aa:d3:c3:20:78:10:07:87:46:ed:4a:36:4b:c9:7b:b2:70:84:
         d0:a3:5f:cc:39:8f:9e:e1:6c:31:47:06:83:a2:b6:c3:cd:a9:
         fb:69:34:9e:11:06:95:8b:3f:0b:33:69:73:94:b1:30:f8:62:
         f7:70:60:cf:f7:e8:bd:cd:71:21:7d:d0:ab:be:73:04:af:29:
         b3:2e:2b:46:7d:f9:2e:87:0c:3b:a5:cb:32:75:01:46:7f:22:
         3f:63:6e:59:27:64:7f:66:9a:00:28:b8:ff:0e:5c:f6:48:0b:
         28:11:3b:79:56:e2:72:0b:5b:5c:cd:86:bf:5a:9f:9a:8c:0d:
         0c:6e:ca:07:87:2d:e2:f6:d6:99:43:ac:ce:71:f9:f8:50:06:
         5b:2a:87:50:f7:7a:c3:2e:04:35:e1:0f:1c:6b:00:b1:38:fc:
         6c:f7:4f:fb:51:9f:5c:cc:cd:3a:be:02:39:b6:9f:b4:e7:6b:
         41:f3:de:5c:41:49:af:84:d0:e2:ad:e7:e8:68:11:e0:88:42:
         16:c4:f9:b7:7b:22:30:3f:d2:0c:ab:49:27:7a:d5:60:00:4c:
         27:32:3a:c2:35:3d:08:b2:fd:34:a8:5a:7e:de:bd:5d:1c:14:
         a5:e4:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:11 2026 by rpki-client