Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
File:                     a18857b3-bcc7-3703-9486-773d81f811bd.roa (raw, json)
Hash identifier:          rQQlU0Goxb1xW/T/uvg3GgVCtN/7/nEDQIAslevRH5o=
Subject key identifier:   68:E4:35:66:9E:C5:66:B3:D1:EC:B3:3D:83:11:FA:EE:7C:8F:D4:26
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584DEF45DF1BA552F2F471E77240
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     16509
IP address blocks:        2602:fa36::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:df:1b:a5:52:f2:f4:71:e7:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=6d7ba7a2-def4-4116-96e2-591c4047e1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:a5:6d:e9:3f:34:86:4d:25:15:9c:ff:21:
                    3d:96:2e:6d:a5:52:3a:3d:10:57:99:87:11:fd:2f:
                    21:12:96:d5:7c:01:03:60:c5:7c:0a:e9:b0:7c:54:
                    7c:33:3a:c7:35:f1:b5:36:1d:13:55:cb:ea:df:9b:
                    45:1d:53:a7:97:c7:e6:5b:6f:44:f2:98:1b:71:a0:
                    5d:35:eb:bc:b2:4e:b0:b9:19:f2:b1:dc:8d:06:ff:
                    dd:f0:f4:58:8f:64:1d:5e:4e:84:18:32:79:cd:e1:
                    fd:c5:97:15:cb:dd:37:14:98:bc:7a:94:6d:49:31:
                    26:ae:80:1c:26:50:98:ab:21:49:73:ac:b2:57:e7:
                    64:90:b6:38:d7:99:6f:9b:9c:00:0d:25:41:89:6d:
                    60:c9:f9:02:e1:ed:86:4b:ae:6c:bd:80:39:6e:b6:
                    1d:0e:35:70:ba:94:43:46:11:ef:0b:ef:a5:5e:76:
                    41:ee:9c:56:f5:7a:c6:24:c0:a7:0e:7f:5d:c8:b6:
                    bd:1f:6c:85:6f:99:07:9e:44:0e:5f:c1:7a:80:b5:
                    d2:e1:09:70:53:c7:bf:12:e3:6e:72:11:ed:8f:d8:
                    9a:e5:0c:28:98:7b:73:1f:f4:c4:f2:b9:06:cf:5e:
                    1a:84:ae:cb:41:c5:ce:b2:45:c1:7b:8d:21:99:ac:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:35:66:9E:C5:66:B3:D1:EC:B3:3D:83:11:FA:EE:7C:8F:D4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa36::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:15:22:41:a3:41:77:a8:62:38:94:ae:b7:fb:dd:ec:c0:
         90:2c:f1:44:3f:3a:cb:ea:af:58:ca:c1:13:69:66:f4:4b:b9:
         07:26:f7:61:37:fe:7d:4d:c5:fa:c3:29:49:b9:6b:43:a8:ef:
         5c:5b:63:a0:df:f7:42:a0:a4:c1:dc:0a:2e:dd:06:3e:d6:63:
         c2:47:a3:54:bb:19:3d:39:5d:8d:9a:01:b8:5f:6e:79:95:d0:
         a4:8d:c4:8c:f7:f5:88:f0:89:f2:f2:8d:9a:cf:b4:be:22:88:
         74:b9:f5:4e:81:7a:3e:7b:78:08:ae:68:df:68:3a:bc:6a:2a:
         df:d1:0c:ac:79:e8:48:de:ff:03:af:d4:d8:bc:7c:8c:2b:59:
         a5:03:e7:13:bf:12:7f:0a:c0:d3:cf:8a:66:32:0b:9a:f7:be:
         73:9b:6a:81:93:02:67:b5:c2:da:c9:97:41:8a:30:6d:96:51:
         d8:7f:d7:fd:92:4e:ac:19:93:e9:50:dc:31:10:cc:27:d9:78:
         5f:d7:cb:3c:d6:32:d0:20:96:6c:b3:3d:ad:da:f9:12:5d:38:
         29:3b:67:f2:2c:8e:9c:37:d7:2f:ed:89:14:9c:e0:d6:9a:2b:
         c9:b0:b4:ca:3d:84:30:6a:e2:8c:e0:5a:d1:9d:c3:4a:a6:b6:
         00:66:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:49:16 2026 by rpki-client