Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa
File:                     b5060e1b-5649-3da3-90ed-6368bf81760a.roa (raw, json)
Hash identifier:          zdR73dm8a2QmV9tlgu7Uize1QJvvfutcAFvBoEqBV2w=
Subject key identifier:   0E:D3:20:65:DD:1D:8A:7F:73:25:C2:34:A8:4D:C6:C4:7D:69:44:56
Certificate issuer:       /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85
Certificate serial:       010D0C9F4328584E18AEF147C1693610AC801780
Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     14228
IP address blocks:        2620:d5:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:f1:47:c1:69:36:10:ac:80:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=66e4012c-927b-41fc-b1b5-20f993c91d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:66:db:61:1b:e9:10:93:8f:4c:98:83:80:
                    5c:13:ac:5a:01:4c:4b:3b:af:c5:fe:0b:f4:b7:54:
                    79:c7:e6:7b:79:77:32:4f:cf:a8:b9:df:6c:20:77:
                    77:27:08:d5:8d:a6:57:7e:59:f3:67:62:43:ca:c0:
                    31:a8:ef:a6:e1:47:36:23:76:88:06:f1:c4:b3:f0:
                    8b:38:95:b7:04:6f:69:27:21:dc:a7:fb:d9:fb:4b:
                    7f:5f:53:b2:8a:5d:ce:6f:6f:de:ef:c7:5e:ed:df:
                    80:71:59:19:4a:7d:de:db:7b:3b:96:76:16:4b:cc:
                    df:f7:34:ed:46:42:77:b3:89:20:d4:bf:52:05:ee:
                    f6:ab:a5:da:fb:94:1f:8d:35:fa:d4:71:6b:2b:45:
                    d8:16:c5:9f:c3:7d:7b:cc:f3:e4:76:9b:37:58:9e:
                    e5:8b:d2:1a:82:75:fa:60:e4:4d:73:31:cf:90:3b:
                    c1:48:15:86:26:d4:4d:23:73:5f:99:9e:57:9a:e1:
                    04:a9:97:9c:27:c6:30:e3:c7:06:d4:d6:6b:fb:06:
                    b2:b4:77:dd:93:7e:da:11:8e:28:9b:3a:e3:19:fa:
                    ae:5b:8d:bd:20:05:a7:fb:47:5b:ee:42:11:ff:58:
                    10:4e:46:eb:a3:5d:6c:15:c3:87:10:3f:97:e2:16:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:20:65:DD:1D:8A:7F:73:25:C2:34:A8:4D:C6:C4:7D:69:44:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl

            X509v3 Authority Key Identifier:
                keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d5:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6f:c7:58:17:24:ae:be:3c:2d:cc:da:1a:74:01:8b:59:38:
         1b:41:e9:56:4e:0d:fe:61:cd:a1:79:b1:fe:b9:d9:3b:44:26:
         58:91:f5:0e:ce:f8:af:b4:1e:c4:64:d5:ba:de:a3:b0:db:7c:
         64:88:12:42:c0:82:10:80:dc:ae:60:f0:95:bf:59:7f:5c:e9:
         1c:5f:7e:f3:fc:c0:21:a1:fc:59:8f:1f:11:50:ff:5f:2f:fc:
         1f:5e:d5:4b:d1:64:c2:0d:0f:8e:da:9f:62:d4:3e:af:6a:cf:
         fd:e3:47:bc:fe:0f:a3:e2:15:3b:4d:84:23:26:37:65:13:ba:
         58:d3:c1:96:ca:81:d1:97:4e:92:f3:8c:8a:d2:5c:ff:44:09:
         48:30:78:1f:5d:38:62:76:74:ca:51:b7:34:06:1c:8e:ff:c1:
         5b:eb:27:e6:98:7f:78:4e:fc:51:85:42:df:4d:3e:16:21:ab:
         e1:7f:d5:b5:c3:74:ab:a5:1e:bb:dc:62:74:b6:05:9c:be:76:
         e5:0e:4c:b9:d6:ac:a7:7a:85:e0:07:17:84:2b:ff:e8:2f:d8:
         25:60:de:fb:7e:60:d7:dd:65:10:1d:24:70:47:cf:9e:a6:0a:
         08:e2:34:1f:21:77:e1:78:7c:d8:5b:e2:2d:c6:f2:db:e8:e1:
         61:14:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:48:21 2026 by rpki-client