Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
File:                     1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa (raw, json)
Hash identifier:          ARKhGicV6oNrYabMB/XoSWOjOWhl2aw1TXPca2i86yY=
Subject key identifier:   9A:F3:8D:3B:83:EB:7F:10:99:51:2B:09:62:46:E7:1B:AA:13:1C:0D
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584E1E44432A7422E5FC9F9669E8
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     20055
IP address blocks:        2600:a800::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:43:2a:74:22:e5:fc:9f:96:69:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=80d147c9-87c7-4d90-bd41-978efef4de55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:3c:29:7f:39:9b:db:02:43:d6:d4:f8:4f:
                    fb:a4:a8:81:ea:49:a4:b5:a3:ce:73:9c:89:4b:1a:
                    9d:cc:c7:da:d1:db:8f:9d:cc:37:4f:1f:b1:1b:71:
                    1f:36:63:0c:bf:d5:e0:7f:5f:df:6f:4b:1a:70:3f:
                    f3:bf:49:6d:ee:c2:86:7d:10:20:a5:c6:a7:92:ad:
                    40:dd:67:da:69:51:31:56:41:1e:60:b0:61:e0:dd:
                    08:2e:ea:69:69:3b:df:55:f6:8b:cd:d1:2e:b2:02:
                    50:c5:7d:84:16:6d:a9:cd:f0:b5:50:f2:5b:d8:a9:
                    22:ff:ba:c8:15:28:c1:c9:26:34:74:fe:90:ee:77:
                    30:52:d0:92:a9:07:22:35:e8:49:44:ad:60:73:84:
                    cc:d0:c3:35:01:7a:9c:d2:4a:1c:87:d6:c5:0a:26:
                    a8:29:36:bf:c6:7a:85:ef:0e:42:ef:2a:e0:41:32:
                    3c:28:d3:d4:32:c5:93:2b:33:eb:38:f7:7f:dc:17:
                    d8:f3:15:10:4c:6c:08:74:87:7e:a2:cf:49:ba:cd:
                    db:d6:7a:6f:99:69:6f:4e:73:f6:48:c4:98:cb:a7:
                    0f:a0:42:f6:f5:6f:ef:13:4e:47:1c:dc:4d:78:fb:
                    f2:50:eb:49:51:8f:d7:fc:2c:ed:d8:68:89:1e:7a:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:8D:3B:83:EB:7F:10:99:51:2B:09:62:46:E7:1B:AA:13:1C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:86:66:83:8f:e1:2d:5c:05:c3:f3:e9:c7:8a:4c:9f:19:c4:
         6b:0c:0d:03:cf:64:e1:f8:9a:e9:f9:34:91:0a:98:cb:6a:d3:
         44:57:eb:47:01:0b:65:44:ed:27:a5:44:81:d8:b5:22:5f:91:
         19:cf:81:f5:e5:86:1e:51:f9:9a:4f:c6:f4:49:9b:8f:eb:03:
         b6:87:5d:9d:22:15:dc:c4:ac:8c:09:6d:36:ff:6e:a9:47:44:
         66:1d:e1:c9:43:f3:08:ce:b4:f4:1c:44:d4:9b:cc:a8:72:15:
         0e:87:bd:f8:6d:aa:d8:a2:66:41:46:b9:0b:c5:6f:15:2b:32:
         94:9a:3f:a2:4c:af:f1:d9:13:93:ea:9d:c0:05:45:05:72:72:
         7b:1a:94:75:ca:45:fb:4e:4d:3d:25:67:b2:fa:1c:78:b3:af:
         5c:ed:28:12:a7:42:29:13:c3:2d:7b:55:76:d2:c4:0b:1c:dc:
         8f:f4:28:53:d6:4e:db:62:56:6a:a9:d2:14:a8:0d:6f:be:7b:
         9f:e5:78:38:0a:8f:26:b9:85:09:17:a7:3d:eb:02:84:32:94:
         0f:9a:08:76:b4:45:85:5c:10:a3:fe:ca:96:25:99:30:64:79:
         c0:c8:76:aa:02:86:b0:d6:5a:44:59:32:99:b0:58:6b:d2:63:
         dc:4f:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:27 2026 by rpki-client