Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
File:                     d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa (raw, json)
Hash identifier:          cLsHX9t5k4iDW35DQVz0oyYcoxRWCmZTFZynUCWdXns=
Subject key identifier:   85:28:C4:19:60:82:0C:F2:FF:04:5D:70:1F:4B:BC:81:77:6C:C4:C0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447905363458F2DEFAC700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     11955
IP address blocks:        2603:90bd::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:79:05:36:34:58:f2:de:fa:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=51322ec3-4b54-4e64-b9e6-7fec953327ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:3a:f7:f4:24:a5:b6:30:58:6e:44:ce:64:
                    89:04:8f:a4:5d:9d:82:54:86:a4:82:f0:7d:cf:e5:
                    b0:b7:f0:02:57:88:bc:8e:c3:86:3b:64:a8:7a:f7:
                    ec:74:a8:17:75:71:a8:35:26:2d:52:39:b6:0b:24:
                    47:67:d4:6f:e4:71:e6:0a:21:03:c6:e3:d7:5f:fb:
                    6e:25:bd:a6:25:0d:1c:3a:9a:60:0c:80:72:a0:9f:
                    6c:8f:22:17:39:e1:3a:01:c0:8f:ed:83:ea:5b:16:
                    da:cf:85:b5:97:69:e1:ca:ed:2a:10:97:73:56:09:
                    49:d1:34:bf:00:f9:b8:e7:77:da:fc:22:08:11:02:
                    52:55:53:b2:04:8e:27:d2:5e:4b:85:96:ea:09:d1:
                    9c:32:c3:3f:3f:1e:91:bb:2f:03:f3:49:3a:a3:6b:
                    b9:d0:bd:ac:e2:97:47:32:8a:a2:67:76:6d:56:79:
                    e6:b5:ac:bb:23:78:cb:2b:c7:6b:a2:ef:33:20:31:
                    fd:38:28:10:a5:44:24:23:e7:4a:64:30:59:8f:53:
                    3c:93:11:b6:33:a7:df:0c:26:df:ef:57:45:3b:ec:
                    21:e7:0a:01:4c:47:8a:ca:d7:00:02:ce:c5:5f:06:
                    32:2c:06:1d:97:b8:32:9f:48:1c:b7:4a:d8:b2:da:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:C4:19:60:82:0C:F2:FF:04:5D:70:1F:4B:BC:81:77:6C:C4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90bd::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:3a:cc:48:08:4f:27:0b:5a:f6:c1:2c:e6:4b:1d:59:5d:
         12:03:79:0f:58:43:d6:5e:e8:9e:54:41:67:21:46:bc:40:ca:
         b5:56:f2:7b:54:22:44:8a:f5:54:e3:0e:c9:8d:b3:96:cb:10:
         44:e6:76:4e:94:e9:73:07:72:bf:d2:bd:52:73:5a:5b:18:fd:
         57:bc:27:51:66:8d:76:83:51:4d:1c:30:bf:c2:d6:bc:27:dc:
         da:87:6c:4b:c6:83:40:5a:12:79:48:a4:4f:35:74:b7:99:f0:
         68:fb:45:5d:a5:96:ff:78:39:d1:d4:e2:06:04:1b:64:f2:3e:
         6c:89:89:c3:b6:1e:86:0f:39:22:e9:66:36:c4:f9:9e:53:89:
         15:8e:56:0f:42:2d:11:76:e8:1f:91:9b:ce:17:09:16:1f:ff:
         d7:63:88:f3:b0:82:96:86:7c:9c:dc:35:8f:da:88:63:e4:33:
         ce:d8:f1:f6:ec:fa:c2:ee:20:8d:b3:19:85:2a:06:dd:94:bd:
         c4:7f:65:5e:da:96:51:01:1f:00:6c:6f:bc:c6:70:ba:65:20:
         20:ea:f7:f5:8f:af:8d:ef:d9:bc:a6:7d:a4:45:78:6c:5f:ae:
         71:0c:ba:c4:88:15:ba:9f:79:58:d7:8b:75:14:24:4b:f6:f9:
         d3:2f:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:19:19 2026 by rpki-client