Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f/bee57f27-bf95-3fd3-9281-99610447be9a.roa
File:                     bee57f27-bf95-3fd3-9281-99610447be9a.roa (raw, json)
Hash identifier:          aChF8fIL3HlfO9Hvtr5nZFd+vP9v0HjvNxDhG1m/G4g=
Subject key identifier:   69:04:E2:52:39:AF:18:97:B9:8C:14:DF:65:74:A0:BC:36:11:1A:AD
Certificate issuer:       /CN=77970fe8-8a84-4d4a-9ed8-804c93cd986f
Certificate serial:       010D0C9F4328584E2061BAAA6A61FA8851C35D00
Authority key identifier: 63:9F:D9:15:36:F4:38:3D:F1:76:5B:E4:C7:C9:7B:C2:9B:22:F7:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f/bee57f27-bf95-3fd3-9281-99610447be9a.roa
Signing time:             Wed 10 Jun 2026 15:11:17 +0000
ROA not before:           Wed 10 Jun 2026 15:11:17 +0000
ROA not after:            Tue 08 Sep 2026 15:11:17 +0000
asID:                     402565
IP address blocks:        2620:32:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f/77970fe8-8a84-4d4a-9ed8-804c93cd986f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f/77970fe8-8a84-4d4a-9ed8-804c93cd986f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:20:61:ba:aa:6a:61:fa:88:51:c3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77970fe8-8a84-4d4a-9ed8-804c93cd986f
        Validity
            Not Before: Jun 10 15:11:17 2026 GMT
            Not After : Sep  8 15:11:17 2026 GMT
        Subject: CN=a19a0227-74b7-422e-b58b-bbab61d7427f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:6a:ba:c9:2f:08:16:14:5f:c5:ae:55:16:
                    1e:0b:55:47:af:1f:f5:5b:11:37:65:54:a6:42:24:
                    d4:a5:4e:d6:7f:ff:91:34:ca:78:40:23:9f:88:ed:
                    7d:60:13:c3:81:97:b9:ba:6a:49:7b:5a:8d:ae:20:
                    a2:21:b3:6f:98:2f:3d:ef:eb:d2:cc:1a:7a:e2:d1:
                    88:52:46:33:c3:44:67:c0:5c:63:4b:72:64:52:ae:
                    e8:9c:10:00:56:f3:a6:e5:cd:7c:cc:5c:59:dc:c1:
                    6f:9f:87:ba:48:02:f4:e9:fe:03:44:44:b3:46:ae:
                    46:be:2c:e1:79:8e:ba:b1:3b:6e:5a:26:9e:fb:71:
                    c4:ad:86:36:9e:ee:fd:a9:4a:6c:ee:bf:b8:eb:55:
                    50:16:9b:dc:9b:1f:f3:5a:ed:49:13:ee:57:5c:59:
                    73:34:76:ef:66:64:45:b8:22:d0:45:0b:06:51:d7:
                    e3:74:8e:c6:4b:36:d4:b8:da:6c:1a:d6:e0:77:69:
                    21:d2:cd:1c:91:98:a5:55:9c:07:40:15:cc:58:f9:
                    82:32:2d:ea:bb:e9:f7:c6:0a:00:08:ec:f4:c8:e8:
                    fb:40:17:3f:63:88:a5:e2:43:86:cf:cf:f5:86:f8:
                    1a:ea:ba:b1:45:09:ea:fb:2d:3d:f7:6e:48:40:5a:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:04:E2:52:39:AF:18:97:B9:8C:14:DF:65:74:A0:BC:36:11:1A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f/bee57f27-bf95-3fd3-9281-99610447be9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f/77970fe8-8a84-4d4a-9ed8-804c93cd986f.crl

            X509v3 Authority Key Identifier:
                keyid:63:9F:D9:15:36:F4:38:3D:F1:76:5B:E4:C7:C9:7B:C2:9B:22:F7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77970fe8-8a84-4d4a-9ed8-804c93cd986f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:32:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:fd:4e:3f:c2:23:d9:0c:10:8a:4a:6a:5f:de:e7:91:8d:
         af:7d:1b:58:ef:f3:68:55:75:dd:48:6e:ad:14:e1:2b:9c:21:
         51:7c:cb:d2:82:33:be:8c:3d:d1:8f:a4:68:ff:a3:7b:03:0b:
         be:18:43:d5:21:92:c5:19:48:af:10:13:4c:20:b6:2d:d1:af:
         48:43:9b:2a:1d:75:9c:85:a6:4b:8b:2d:a7:3d:ec:f8:e3:cc:
         3e:a7:74:75:4b:65:df:e0:04:45:f1:0a:06:c9:0d:5b:0c:70:
         26:5b:80:a3:d7:84:55:43:32:f6:f4:8d:39:16:77:c2:22:7b:
         d7:f9:24:72:3a:c0:32:ec:19:76:6f:71:9b:2c:75:8e:d0:9d:
         d0:af:40:22:fa:81:4b:d8:00:34:c1:fe:ca:cb:41:7a:bc:42:
         36:05:e3:c3:70:08:d7:b6:6b:e8:09:be:43:38:56:b0:d1:cc:
         4f:28:9a:d2:cf:d6:1b:00:01:0f:9b:27:92:f7:3c:1f:23:45:
         0f:9a:0f:7f:a7:46:a6:bc:96:5b:8e:95:f8:9d:a7:9d:0f:77:
         11:b4:ba:ef:0f:4e:cd:57:d8:9e:52:53:61:18:f0:d9:8e:0b:
         9e:53:49:e7:07:0c:34:38:03:26:7f:17:b0:1e:06:ad:93:8c:
         21:47:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:07:43 2026 by rpki-client