Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa
File:                     cffa80ce-dddf-3206-be5e-b60edcafd97d.roa (raw, json)
Hash identifier:          sOnQxHfL807K6axrOjeyw8iNi8/IX03q0Lf6yGKJ/YY=
Subject key identifier:   71:EE:0E:8E:C0:27:6D:C7:ED:11:FA:BB:EE:5A:B2:65:2B:97:88:FA
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F4328584E253F075FB76A7FB3EB5E0DA0
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     210645
IP address blocks:        2602:2c9:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:07:5f:b7:6a:7f:b3:eb:5e:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=9458672b-4a68-4fe3-851b-fb774ca467dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:96:be:2d:8b:5e:50:70:e7:53:20:b8:4d:
                    6f:56:df:be:b7:99:99:37:f6:fd:d1:92:3a:08:6d:
                    0f:b5:65:69:e8:ca:b0:41:6b:4b:1e:a3:f9:e0:65:
                    28:1f:e6:50:5b:18:9b:c5:12:42:ef:4a:ea:51:47:
                    17:f1:f5:3d:77:0f:b3:49:69:53:67:c1:a2:62:91:
                    52:3b:6d:14:5f:59:c8:99:ad:f5:a3:f3:f0:14:56:
                    ff:ff:c6:5e:ca:5f:47:a0:f9:a3:40:50:cf:81:e8:
                    3e:49:0a:d9:96:21:b1:42:bb:93:ce:75:b5:55:74:
                    30:9d:88:ce:83:84:9d:c4:dc:51:07:2a:d5:c5:65:
                    bb:7e:e6:b5:ed:4b:4a:9a:1b:9d:7d:d8:a0:95:09:
                    27:46:46:0f:2a:be:85:a3:42:ed:f6:a7:4a:53:b2:
                    91:cb:49:f3:65:b0:eb:2a:06:12:93:52:46:35:08:
                    94:9a:03:1e:a2:ba:16:73:24:5e:a8:58:9b:1f:db:
                    a0:91:bd:22:30:9c:75:cf:d9:71:f0:23:e4:4f:13:
                    43:73:25:16:66:b7:8e:e9:8c:b5:a6:cc:c5:24:84:
                    64:d4:18:de:16:c7:13:fa:95:c3:56:94:1e:5a:42:
                    8b:55:6a:b0:e8:32:37:c8:e1:9b:82:03:be:a5:57:
                    92:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EE:0E:8E:C0:27:6D:C7:ED:11:FA:BB:EE:5A:B2:65:2B:97:88:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:87:ce:58:7c:0d:b3:46:db:e1:fd:30:4c:03:3c:cc:d7:
         61:25:23:bc:9f:fe:98:3f:36:e9:6a:03:a9:37:e7:1b:25:98:
         20:91:d7:b3:43:1a:16:13:98:7a:79:69:69:7b:a2:70:1e:c7:
         0a:b9:96:b2:91:f0:2d:60:78:e1:b6:9a:9b:cb:dc:19:b7:6b:
         e1:17:92:13:c7:de:1b:53:9e:74:0c:e8:91:06:51:45:0e:d4:
         f1:32:ca:27:e1:23:35:8e:70:2e:79:68:4a:2a:25:2b:64:1b:
         d7:bd:48:da:28:05:45:a0:8e:83:6f:59:f0:85:a8:a4:62:09:
         7b:55:6e:a5:1b:bc:45:ef:90:c1:92:dd:f0:1c:70:70:0d:68:
         c3:30:77:c0:33:5c:62:a8:6b:a4:1e:7e:10:d5:32:0a:2c:f0:
         c7:e5:b7:9d:c0:96:5a:12:29:53:76:ca:e5:8d:e9:2d:b9:7b:
         57:6a:9e:4f:09:65:f2:a4:60:cc:0e:14:13:c0:44:1d:5f:8a:
         40:62:99:76:a7:b8:2e:d2:d2:ae:01:4d:d2:06:3d:ec:9c:ce:
         79:02:2d:8e:b3:7a:04:00:7c:39:65:8b:3e:b4:25:f1:5e:00:
         e5:fe:55:a7:0a:da:29:13:f5:00:c5:a3:b2:25:35:04:54:a9:
         fd:56:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:01 2026 by rpki-client