Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
File:                     caaf40e4-468e-3ac7-9c5c-80d776e26587.roa (raw, json)
Hash identifier:          kxXJReTcXu6/B+DIMoQQgeT9hw/bfGWC3cw3YGhEdEY=
Subject key identifier:   1C:A3:6F:5E:2A:A7:91:BD:2B:55:6C:F9:C8:37:96:82:8C:DB:74:B4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E445EACE4885A7B70E7FFE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2607:f098:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:5e:ac:e4:88:5a:7b:70:e7:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b8f602b7-a01e-43f4-9c7a-40e48532f373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:61:8a:2a:ad:ee:f7:dc:7a:a6:e5:14:5c:
                    51:46:96:bc:0c:ab:d6:17:9d:02:75:25:b5:02:7d:
                    ea:ea:75:f2:41:72:0e:f9:7e:cb:07:c3:f3:cc:57:
                    13:bd:55:c9:f4:0c:a8:32:ba:72:35:ec:b9:0f:1a:
                    9e:81:55:df:24:df:02:1c:35:ed:7f:d5:c1:5d:87:
                    3f:a2:c4:87:44:b8:10:4c:90:df:85:8e:e7:0c:ac:
                    65:81:0b:81:ef:cb:45:41:75:c8:47:d4:43:0f:ee:
                    7a:51:3a:0e:1b:0c:96:f8:59:5d:e4:97:6f:a1:53:
                    dd:5d:ae:13:79:0d:64:ce:78:2d:5f:6e:d7:71:3f:
                    28:15:f2:6f:da:54:bb:b0:37:68:db:80:ec:2a:01:
                    65:d2:ed:ce:0d:a5:10:57:e7:e8:63:41:fb:a7:1a:
                    dc:92:a5:a1:1c:1b:db:ac:1e:5e:4c:d3:89:9a:b0:
                    d9:31:16:f6:bc:75:ac:2b:7a:8c:b8:e9:ca:24:c0:
                    30:08:90:0f:a2:6d:b2:d7:72:60:b6:43:87:f4:f7:
                    0e:ef:84:1b:13:26:87:5a:73:8d:45:68:53:61:ce:
                    d3:d3:5d:8b:a2:f4:98:98:b0:bd:08:be:14:46:8f:
                    40:21:ab:65:d4:78:ae:4c:33:72:d4:91:2e:88:b7:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A3:6F:5E:2A:A7:91:BD:2B:55:6C:F9:C8:37:96:82:8C:DB:74:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:48:38:60:0f:32:7b:bc:e2:31:c1:3d:3b:07:c3:9a:8c:a1:
         b5:0e:f4:18:38:b3:09:e4:93:b2:39:a7:b6:3f:44:5a:00:b5:
         e0:d8:d8:1f:9d:9a:54:92:e4:45:ba:d5:7a:7f:2e:44:70:aa:
         ee:41:d2:dc:56:53:43:12:b9:af:91:88:31:85:5a:53:09:51:
         5f:df:bf:de:27:2a:cb:90:4e:9b:64:2a:4b:05:86:7b:17:3d:
         83:bc:1e:59:93:fa:ee:04:aa:08:0c:0f:92:05:48:b2:d5:eb:
         ef:55:2e:18:24:1a:7a:6c:08:de:99:b9:31:d5:2c:e7:02:e0:
         2f:3a:c9:4a:ba:c6:2b:66:37:f6:ae:65:c3:99:4c:11:f8:91:
         ab:16:e2:b8:cc:b1:3e:b5:f6:3a:be:fe:21:be:bf:1c:ec:ae:
         ba:28:cf:7f:31:a3:82:32:75:51:82:7f:95:e5:11:a7:25:10:
         a8:4e:7d:1f:34:ca:14:a5:1b:ca:3d:b1:f3:0a:72:a1:41:ff:
         cb:17:58:fd:01:e3:2c:cb:a5:7d:40:8c:ce:f4:45:31:26:39:
         9a:b2:db:10:8c:e4:8f:22:2e:14:41:98:f4:f4:b9:99:11:a2:
         db:80:7f:bf:d7:da:b9:ff:dd:85:62:4b:f1:e7:15:1a:ec:6e:
         6a:82:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:01 2026 by rpki-client