Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa
File:                     017f82d2-8fcc-3ffe-917e-340f3336d850.roa (raw, json)
Hash identifier:          fM+1KvSg48O52EhW0dmXMPipu8IjL0h75a24FfSdk5g=
Subject key identifier:   C3:D8:97:B8:19:70:A3:7C:E6:8E:37:A0:E0:3F:77:7A:E5:AE:FC:7B
Certificate issuer:       /CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
Certificate serial:       010D0C9F4328584E2274416FA93B098EAE4F4500
Authority key identifier: A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2604:1fe0:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:41:6f:a9:3b:09:8e:ae:4f:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=669789c4-b9cf-4c85-b115-085160c0c5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:b8:27:bb:18:ad:ad:f0:1f:1d:bd:2c:0d:
                    01:d5:d1:7d:48:c5:0d:33:51:c9:8c:85:52:2b:80:
                    96:33:4f:17:9c:ed:2a:c3:83:fb:cf:28:3b:a4:d7:
                    62:d3:d1:db:e3:7f:59:3d:2e:06:24:81:5d:80:b4:
                    59:80:dc:54:e9:ce:fa:d9:0c:0f:67:21:f1:f8:33:
                    83:60:a5:10:56:f6:29:f5:10:fa:9b:bf:4f:0a:83:
                    19:a0:6e:be:63:d5:5a:cd:fc:f6:ad:44:d2:0a:03:
                    d3:b8:84:c0:2e:6d:b7:95:b4:1e:c0:c1:56:b7:ef:
                    01:b4:6e:ed:4d:79:76:d2:27:e5:2f:03:05:88:9c:
                    5d:b2:c4:70:d1:27:27:f0:3d:6d:34:86:e9:82:2d:
                    a5:48:93:e8:1f:bb:f4:81:74:27:4f:34:87:60:89:
                    3c:32:a2:65:a8:28:d0:c0:c0:5b:ec:f5:7b:8d:02:
                    a8:a5:58:4f:74:ae:3d:1a:8e:24:7f:76:84:ba:bc:
                    8c:b2:1b:dc:e8:02:01:c5:39:f7:36:0c:38:0d:5b:
                    6e:ab:c1:09:6a:69:34:57:83:89:fb:31:a4:b5:c1:
                    a2:3e:77:ec:f7:7c:82:1e:27:ec:0e:93:7a:07:f6:
                    09:62:f4:82:f2:7c:f9:9e:5d:e1:90:14:b8:5e:7b:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D8:97:B8:19:70:A3:7C:E6:8E:37:A0:E0:3F:77:7A:E5:AE:FC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl

            X509v3 Authority Key Identifier:
                keyid:A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1fe0:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:48:c5:49:22:d1:b6:fa:94:43:9e:c5:45:66:86:e5:69:db:
         69:80:c3:73:70:82:c3:a7:bc:09:2e:14:3a:6a:36:fa:d3:cd:
         8f:cd:09:2c:3e:86:a1:e3:3f:cc:80:ff:98:bf:ce:64:59:77:
         3e:28:98:f5:3e:13:26:d3:6f:71:72:5c:d0:a8:40:b8:c7:44:
         c1:32:3b:ed:3f:a6:c5:37:3e:48:10:69:82:98:8f:27:95:2f:
         32:2b:12:45:20:b8:df:c1:f8:33:3f:29:3c:da:70:7e:7a:b6:
         ca:86:0c:dc:f9:f8:fe:7e:48:47:56:26:a4:f4:91:1b:ad:4e:
         b6:42:37:e8:ca:b1:db:a6:fa:53:87:a5:27:24:6a:bd:61:7e:
         61:fb:ca:bf:5e:8b:3f:ea:a3:f4:da:e3:82:a6:b0:d3:51:8f:
         58:b2:09:4f:f5:3a:69:8d:c7:2d:c0:1c:f4:91:91:38:6f:a0:
         85:6e:15:be:9d:11:3d:60:2a:fa:87:31:e4:90:4a:a0:ba:c3:
         17:16:4a:c3:a2:83:f3:36:b5:c7:83:5d:62:a8:d3:be:cb:23:
         39:00:58:1e:c3:5a:50:bb:60:b6:35:42:72:8f:92:a4:63:5c:
         3a:6a:7f:a1:87:5d:00:95:e3:ef:74:3c:fa:4a:a8:a8:72:0a:
         c4:6d:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:32 2026 by rpki-client