Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa
File:                     790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa (raw, json)
Hash identifier:          ch2xTYa91YSdFOHFMjUWwWRTjvns33sEgvWnAfPvH2I=
Subject key identifier:   C3:F1:33:6D:E2:88:2E:28:D5:C0:2B:65:8D:D5:08:DE:1C:BE:75:22
Certificate issuer:       /CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b
Certificate serial:       010D0C9F4328584DFBD6294807D3F0E466E88B98
Authority key identifier: D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     63089
IP address blocks:        2604:2de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:29:48:07:d3:f0:e4:66:e8:8b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=10e8ac83-03d9-40f5-92e7-d0b1ce2cf8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:00:b1:91:8b:e7:15:dc:1c:72:40:01:d1:
                    26:d6:84:6f:05:9f:8c:1d:11:f6:bf:14:85:55:2c:
                    92:1d:3c:b0:87:4e:c9:ad:0b:7f:9f:35:b8:8f:17:
                    5a:8a:ab:7a:92:57:ce:cf:f5:a8:30:19:fa:06:88:
                    4b:aa:bf:7d:6e:76:9a:d9:7f:25:54:c8:3b:ea:29:
                    60:26:8c:1f:69:66:51:28:79:54:19:a9:a2:a4:8b:
                    5d:d3:db:46:e8:5f:b0:4e:15:39:50:9b:04:54:a1:
                    d9:32:2b:59:3f:c1:a5:a7:f7:b6:ef:da:2f:43:4d:
                    62:19:93:0c:71:9c:23:72:ea:8c:30:d4:de:da:0c:
                    20:dc:1f:84:25:6b:54:25:1f:ea:d1:a0:b3:91:04:
                    a3:f6:f8:6f:8d:90:85:f8:d9:45:40:2f:68:b0:d8:
                    4c:70:f1:da:0f:2d:99:81:5b:96:7e:f9:96:7f:51:
                    f8:d7:2a:fd:16:74:cf:06:d2:fa:8a:29:45:da:87:
                    d1:a1:a2:a6:44:a9:cf:0a:34:06:3e:90:49:0f:4d:
                    9e:9b:8c:1e:6e:ae:70:b0:b3:70:6c:1a:38:ec:2c:
                    4f:1d:d2:c3:8b:e8:b0:37:22:e6:59:7b:e0:ac:25:
                    38:7a:d3:3f:2b:da:3a:43:3a:d5:0e:ff:63:df:55:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:33:6D:E2:88:2E:28:D5:C0:2B:65:8D:D5:08:DE:1C:BE:75:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl

            X509v3 Authority Key Identifier:
                keyid:D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2de0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:69:81:71:63:3a:99:72:31:95:50:0c:b1:1f:33:16:8e:b0:
         bf:0c:03:69:23:8d:e6:fb:ad:ab:42:0b:a4:10:da:44:9a:e8:
         8b:0f:2c:17:91:e1:5e:7b:18:8e:ba:aa:20:10:ab:60:da:70:
         19:76:69:23:cb:b0:67:27:31:a6:46:fc:7d:27:8d:51:56:10:
         3c:93:bf:5c:1f:03:97:cd:d7:42:b7:4a:50:b4:f2:79:92:9e:
         17:6d:cd:33:ee:16:72:d5:4e:54:3a:dc:de:76:cb:6d:bb:f9:
         7b:bb:1a:d1:d0:1d:db:41:db:79:47:48:a5:f1:b0:b2:5d:c2:
         17:e5:55:dd:46:a0:b1:0f:c0:c8:80:6a:66:77:8d:3f:1a:d5:
         dc:7d:60:b6:1e:6f:45:18:ba:48:28:88:e5:2c:9c:61:b7:e8:
         ca:35:02:e7:11:d1:52:38:9f:dc:f3:0a:e1:b7:de:5c:c4:1a:
         15:9a:4a:cc:2a:b1:96:a2:82:a3:79:e4:60:67:b2:d0:0d:8e:
         e7:20:2d:47:6b:89:51:bf:7d:48:68:58:43:69:09:ed:87:bc:
         a5:fb:4f:cc:13:ed:86:b4:12:09:a2:07:99:12:45:d6:8f:bf:
         47:79:03:ed:0e:c5:04:7d:d7:0c:fc:8b:5e:04:29:c0:ba:77:
         d4:1f:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:08 2026 by rpki-client