Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa72704b-e43b-3933-9935-66eeaf1342da.roa
File:                     fa72704b-e43b-3933-9935-66eeaf1342da.roa (raw, json)
Hash identifier:          /46DNmMioPR2QCz5jFBqbhy0GreOeDndw0sjhg8FdSE=
Subject key identifier:   52:48:72:50:2D:E8:CA:8A:1C:07:AA:28:69:44:77:98:ED:83:0D:7F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4465F7624C30454AAD3300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa72704b-e43b-3933-9935-66eeaf1342da.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8181::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:65:f7:62:4c:30:45:4a:ad:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=d891eba8-8550-4a5a-9d56-f9bacdc0c558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:23:e6:ed:b7:87:63:e2:55:93:ff:e5:94:
                    e0:d9:be:f6:88:e5:66:d4:1b:c2:36:a4:47:a0:04:
                    24:bf:12:3a:0d:8d:9e:7e:93:a8:7d:72:bc:ff:3d:
                    73:d8:cb:ff:e4:7b:b2:95:44:4a:d1:78:f7:5c:38:
                    c9:99:e8:ee:c0:52:8c:c1:ab:24:44:0a:66:bd:98:
                    00:90:ad:21:fe:e0:09:26:25:77:eb:31:b0:1d:54:
                    56:60:2e:4b:4b:7b:46:33:74:b1:ad:f6:ba:c8:f4:
                    29:d3:e8:68:d0:7c:72:98:10:d0:dc:0b:ee:a1:2c:
                    a8:dc:8d:06:3f:8e:06:6c:ce:18:91:4f:f2:19:2a:
                    e7:f3:a7:21:21:d9:ad:dc:2c:01:a0:23:04:ff:65:
                    48:74:1c:0e:a8:47:c1:11:ae:1c:e6:1c:b2:20:59:
                    0d:00:3d:40:49:30:3e:af:a2:73:2d:23:b2:d5:a0:
                    11:9d:ba:03:a7:92:ea:48:7e:87:72:35:7b:a4:06:
                    b9:cc:89:0e:28:a6:4a:0b:2c:fd:86:f6:05:59:97:
                    e9:50:9f:05:95:10:f4:94:de:3b:5e:ad:e7:5e:3e:
                    26:a2:08:16:8e:99:8f:e4:6a:04:27:70:77:40:d7:
                    5e:e3:f9:7e:87:23:a0:91:1b:be:4b:a9:41:58:c2:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:72:50:2D:E8:CA:8A:1C:07:AA:28:69:44:77:98:ED:83:0D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa72704b-e43b-3933-9935-66eeaf1342da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8181::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ad:f9:bf:46:ea:0d:df:89:be:a5:88:b1:d2:f9:7e:19:93:
         d2:76:6a:1b:16:19:e4:b2:7d:b0:31:84:12:5a:0b:18:c4:81:
         cf:16:0e:35:d5:25:b4:cf:6a:b0:18:43:93:56:75:1d:65:15:
         aa:ea:21:d4:c1:e2:da:dc:d0:af:6b:3a:ca:40:89:b4:aa:9e:
         9d:25:d7:74:24:8a:87:d5:0c:71:1e:ff:52:58:1b:60:98:0b:
         fa:5b:8b:80:ab:9b:8b:75:44:25:4f:ab:bc:70:cb:3d:c2:fe:
         dd:c1:58:8a:af:f2:38:52:11:ac:ee:fb:43:b0:28:ff:52:8d:
         a0:ef:7f:d6:37:a4:99:d2:b9:f7:58:6d:f9:0b:b2:c4:a8:7e:
         2a:4c:ff:77:a9:a5:5e:03:84:f3:fc:2e:e1:1c:1f:e1:04:35:
         ec:e7:01:ad:74:13:dd:5b:31:62:3c:c7:4b:d4:ef:df:62:2e:
         4d:04:91:53:61:69:56:41:2a:6a:8e:00:5e:2c:47:af:df:f8:
         62:a3:c0:f5:8f:83:c2:d7:9a:03:bb:a5:50:f4:61:a6:b0:df:
         1c:2c:02:97:af:a5:7b:58:83:94:03:bf:69:d7:88:41:94:ec:
         ba:9d:67:80:2d:9e:a5:3d:53:ed:7a:8f:92:30:8c:ae:5e:d5:
         95:bd:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:19 2026 by rpki-client