Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa
File:                     aa7f7366-ce96-3420-b01e-2598209b268b.roa (raw, json)
Hash identifier:          U/IwkriUxdPqrIx2tT9QkzyOoB48Bea4TmsXmhRvmJ0=
Subject key identifier:   D8:2B:B2:2A:55:1B:F7:68:64:94:49:AB:90:AB:2E:98:E1:C4:3D:92
Certificate issuer:       /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7
Certificate serial:       010D0C9F4328584E253F1D39203971D8C67E7D00
Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     401449
IP address blocks:        2602:f7c3::/40 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1d:39:20:39:71:d8:c6:7e:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=ce37b0ee-e57c-4f42-b555-cf4d27b862c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:a5:73:ff:cd:bb:0a:6a:b6:9c:01:83:d1:
                    6e:fd:62:f9:b3:22:d2:19:71:90:d7:55:ec:57:03:
                    9d:c1:f0:08:bb:e7:27:fb:52:5a:bb:35:dd:90:01:
                    d5:ac:80:6b:ad:99:6b:76:fe:db:d4:ca:d0:3d:76:
                    0f:c2:9d:71:e0:db:05:e1:ca:61:1a:38:8b:e2:a9:
                    b5:35:c7:5e:db:47:8f:4a:9d:39:fb:12:28:45:83:
                    03:6f:16:06:8b:a8:b7:89:b7:f8:07:5f:fe:00:b1:
                    65:b5:d9:ad:8a:de:fb:83:e9:92:3b:22:f7:81:d9:
                    06:e0:82:0d:45:50:5d:4d:3e:ed:79:18:d3:0a:16:
                    7b:a4:fc:bd:e4:5e:45:f5:dd:c7:1b:62:62:f0:94:
                    54:a5:a4:85:8c:e1:92:ea:b3:67:f4:b3:d5:bc:08:
                    b5:75:3b:15:fb:7a:c5:cd:f0:ad:fc:fb:35:d8:90:
                    b2:72:34:d5:23:a9:fb:57:da:f3:c9:95:5c:a0:0a:
                    74:46:d9:c7:3e:bd:23:8e:53:1d:82:06:7e:c4:da:
                    41:e6:5a:50:30:db:af:5b:95:86:90:bd:d2:7c:d4:
                    cb:65:c3:05:5f:88:ae:77:e4:96:d6:0d:67:9a:a2:
                    8f:09:11:a9:6a:1e:b1:90:56:94:68:9c:ad:80:cb:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2B:B2:2A:55:1B:F7:68:64:94:49:AB:90:AB:2E:98:E1:C4:3D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl

            X509v3 Authority Key Identifier:
                keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4e:18:ee:f9:3e:1f:6f:d1:47:14:28:42:88:f9:21:f0:54:
         5b:3d:d5:b1:a8:b8:0d:03:a0:c0:e0:ed:b5:34:af:5d:38:e5:
         42:6d:cb:0d:32:39:24:89:43:df:42:d5:d0:dc:77:ab:50:34:
         e3:f1:68:0b:23:cb:ec:73:04:16:18:f7:2f:26:a2:3c:0c:d7:
         f7:86:97:29:1f:d9:88:4a:6e:9a:67:a1:c6:d9:64:48:e2:15:
         96:64:58:0a:44:89:32:71:de:89:8a:ee:12:55:4e:3b:6e:d1:
         f2:41:5c:49:50:b6:3f:fb:15:f3:c7:19:82:91:b8:8f:a7:06:
         75:f6:41:1c:e1:fd:9f:f7:85:df:95:fb:7b:87:5c:7e:c2:0d:
         03:f5:e0:c5:cd:82:b7:4c:2f:6d:04:e4:69:21:40:8f:38:2a:
         53:33:04:47:e5:48:78:14:63:35:8d:58:f4:26:d3:b2:da:bb:
         26:ea:29:71:aa:ee:10:ea:be:74:21:b7:f8:29:f2:06:e5:41:
         e3:29:e4:f0:76:a2:56:44:d2:12:fa:a0:1b:91:06:41:0e:8e:
         45:c9:dc:4e:e9:cc:49:82:d6:5f:6b:65:81:7e:fa:2a:59:e7:
         95:40:0b:4d:f9:10:1b:ec:ad:99:86:26:1e:b0:3f:c4:95:60:
         36:df:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:37 2026 by rpki-client