Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa
File:                     5da813c6-3362-3a15-8c8f-01d933e11263.roa (raw, json)
Hash identifier:          PadhzWOUlb2MosrC8JoGLw4xiDIA248uvusTkGWe95o=
Subject key identifier:   75:FE:1E:A2:F4:F5:02:08:BB:EE:BB:D9:DA:14:EA:EE:2A:9D:8E:28
Certificate issuer:       /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
Certificate serial:       010D0C9F4328584E0C1ECF281D209BF097CA44C0
Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     16509
IP address blocks:        2620:10b:b008::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:cf:28:1d:20:9b:f0:97:ca:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=42ea2c19-5457-4a65-be74-ecbad937e0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:07:5b:93:28:83:d7:00:e0:c9:62:09:a9:
                    de:a6:74:79:ef:09:e0:bd:c6:6b:7c:f7:b5:13:b2:
                    a9:aa:1e:c0:77:ba:71:10:3c:ec:2e:ac:5c:d6:67:
                    64:76:31:22:e0:55:9c:a0:9c:c2:09:8f:46:70:15:
                    53:44:31:4a:ba:ec:16:2f:73:14:74:9f:5a:bc:2d:
                    cd:7d:77:8c:7f:be:72:86:8d:c6:53:60:b1:bd:d4:
                    db:22:d9:0a:91:53:6e:ba:2b:ce:27:3e:12:e6:5b:
                    a0:d6:c7:a9:fb:44:55:26:d9:46:11:ab:b4:45:e0:
                    f4:1c:92:99:2a:8b:b9:cc:c4:3f:81:77:1f:b3:b4:
                    90:ee:4f:c8:58:f7:93:88:a0:89:52:62:16:b4:f5:
                    51:0a:cb:93:5b:c7:8d:c9:42:b6:98:d7:07:9f:05:
                    77:10:3a:60:cf:28:65:a8:a6:aa:5e:f5:22:3b:8a:
                    d0:76:cb:f8:23:6e:97:c9:51:64:83:5b:f0:cb:0e:
                    95:9f:02:cf:ac:00:a4:3d:ff:19:3f:8a:b5:a7:d7:
                    44:f7:27:00:20:18:93:19:c2:55:31:d3:9f:50:b5:
                    a3:6c:09:7c:e5:14:78:04:9f:f1:a8:a9:07:66:05:
                    fe:27:e5:5f:ca:e9:ea:f9:e9:4d:ac:6a:ce:c2:50:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:1E:A2:F4:F5:02:08:BB:EE:BB:D9:DA:14:EA:EE:2A:9D:8E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10b:b008::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1b:f3:ab:c3:11:b6:3d:ba:a9:43:13:66:08:de:c5:a5:67:
         ea:51:70:54:0f:68:15:15:c0:9f:96:28:64:81:da:fc:be:d7:
         8e:d1:ba:28:6f:72:d7:b0:6a:2a:66:c4:d7:c6:d0:ff:2b:4a:
         d3:32:c8:dd:81:ec:88:f0:e6:87:40:92:3f:b1:af:85:54:39:
         a2:79:79:18:ff:9a:47:de:db:43:93:ec:8b:b9:4b:b3:85:61:
         1c:fa:71:95:4d:88:ef:c2:60:5a:6a:cc:55:8f:78:52:b5:8e:
         3d:a3:32:b3:00:a8:e9:71:cd:d4:59:a9:61:27:6c:d9:48:89:
         ff:55:d8:e6:27:59:2d:17:49:e2:65:49:d4:a0:06:d2:be:81:
         84:c5:1b:6a:09:fd:22:ec:3a:27:e4:40:ad:0a:71:85:23:26:
         88:47:03:ce:c3:95:d0:27:2f:bc:f4:03:bb:f3:80:ca:f9:1e:
         1c:0f:06:0a:c6:38:0f:eb:92:9e:87:54:58:15:f2:60:d1:22:
         f7:4e:31:88:53:ad:fb:d0:a6:55:d6:d3:44:1d:0d:c2:f0:ae:
         93:5d:01:50:90:e1:f6:0c:ff:48:90:39:39:e8:1b:db:e7:41:
         bd:94:c1:d9:a6:bc:e2:8d:34:53:eb:e2:93:33:c2:00:f7:66:
         7a:6f:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:04 2026 by rpki-client