Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa
File:                     9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa (raw, json)
Hash identifier:          HUro3YKEhKmcEvSY0MXCNimSrhpFuwixUdlUDWjDGh4=
Subject key identifier:   57:74:86:9A:DA:01:CE:B8:12:02:B4:88:B7:8C:FC:23:08:18:27:20
Certificate issuer:       /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec
Certificate serial:       010D0C9F4328584E0005DA453B88218EC8FF0BE0
Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     63072
IP address blocks:        2605:1740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:da:45:3b:88:21:8e:c8:ff:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=45d42e21-0ac5-4678-8722-272784d8182a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:f5:65:c5:f3:3d:7d:b6:6b:e7:e6:df:05:
                    f4:8a:16:4f:e4:cd:ab:f7:5c:4e:a7:04:6d:b3:fb:
                    6c:eb:7a:de:80:83:63:c9:26:43:bc:ac:19:69:52:
                    8b:7f:66:e0:b5:e8:07:23:2d:fe:e2:18:31:ed:ba:
                    38:5c:4a:55:77:ba:61:d1:d4:f0:51:96:18:d4:42:
                    73:5b:9b:1c:4e:b3:4a:02:e4:45:89:ec:77:f0:45:
                    73:7e:f3:6e:d4:15:1a:09:1a:0b:46:c3:5e:1b:a9:
                    80:06:b2:3d:4d:47:eb:ce:c7:7a:20:3b:bc:5e:df:
                    e9:2b:89:a4:04:aa:aa:45:74:b4:53:71:24:d7:53:
                    ea:f0:75:bc:a9:20:c7:48:0b:d0:10:f4:61:f3:33:
                    f9:b2:8e:26:fa:b8:db:83:4d:f0:32:c3:80:a4:f4:
                    e6:fd:51:a2:a9:28:7d:0f:91:fa:11:90:a1:60:ba:
                    bc:f2:1f:af:18:8a:a6:52:36:07:b9:f4:f9:87:c9:
                    9f:0a:71:fe:45:f8:e3:bc:43:55:7c:2d:13:39:60:
                    4c:0d:ac:8a:21:d3:25:f4:b6:ad:4c:21:d3:17:09:
                    70:9b:7e:8d:3e:cf:00:4b:7f:26:bb:47:8d:0f:8c:
                    ca:e3:dc:0b:38:9c:8e:0c:74:cf:28:6f:b8:8d:dc:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:86:9A:DA:01:CE:B8:12:02:B4:88:B7:8C:FC:23:08:18:27:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:63:51:74:f6:ba:84:85:f1:96:7e:e8:85:c9:00:11:7d:
         4b:b4:4d:93:44:d8:99:1f:8d:a0:60:ee:fb:ef:53:c0:ba:2e:
         07:98:8b:21:c8:6f:52:05:24:30:24:f5:15:1b:7c:2b:34:8a:
         2f:3c:05:42:ce:4c:82:06:a4:d8:79:3d:97:01:f7:ee:15:92:
         a5:90:21:f1:d4:40:e3:c7:0c:87:18:13:eb:e7:68:68:b0:0c:
         fd:9d:06:ac:a6:f0:a9:90:3d:ff:ba:06:90:a5:52:0a:2a:53:
         2d:cb:f7:3f:16:9f:0a:a2:0b:60:f9:7b:7f:6c:fd:0e:00:a7:
         19:dc:50:62:dc:16:b6:aa:cb:66:36:24:2c:8d:ee:c3:c5:cf:
         3a:d7:8a:c9:6a:1d:46:fc:54:ba:b3:84:ce:7a:57:92:e7:67:
         2f:cb:02:8c:96:0d:48:f0:e2:e6:75:ec:9a:6f:7c:60:b7:3b:
         67:97:cd:90:3e:5b:69:8e:40:3b:3f:85:89:cb:b8:42:54:35:
         62:f2:38:66:24:3c:20:71:62:a9:6e:e1:a6:be:2a:05:55:e9:
         08:56:a7:fc:6c:b9:07:59:4e:0e:dd:50:75:89:ab:3c:a3:5b:
         49:88:cd:b9:bc:12:8d:5d:db:82:cf:6c:84:ca:fa:5c:66:78:
         57:ef:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:50 2026 by rpki-client