Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa
File:                     90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa (raw, json)
Hash identifier:          +YVtV8noMtY0YP0G+dmz+7t60L23AVkR/TKlx4QE60o=
Subject key identifier:   3A:AE:1B:AB:3C:5E:19:A7:8F:B9:B3:A7:8D:50:EB:3F:56:E8:7B:FE
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584E059B42D2156480C895E08600
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     14325
IP address blocks:        2607:d00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:42:d2:15:64:80:c8:95:e0:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=da709ad5-1e73-4a10-9bee-a3e76b46735a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:2c:e8:1d:88:05:9b:6e:a9:96:da:cd:57:
                    62:cf:36:84:58:20:73:19:e3:e6:df:53:ba:fe:fb:
                    8c:7e:f2:96:53:5f:94:ea:92:a2:a7:b2:d2:91:20:
                    20:78:d2:67:c8:3c:19:eb:6e:8d:d1:d2:1d:92:9a:
                    08:ac:54:6b:2d:dc:12:81:91:66:43:90:23:09:3e:
                    ee:e8:1e:e5:85:69:bc:82:13:1a:fa:82:37:30:44:
                    ac:26:f9:9e:3e:13:73:97:73:1d:95:b4:6e:b8:9d:
                    38:1a:94:7f:9e:91:c7:97:09:3a:13:fd:15:c1:5a:
                    06:0b:92:c6:7a:69:57:24:a8:19:b2:06:4e:9b:ff:
                    c3:20:5f:0e:b9:41:40:27:4a:ea:d9:57:3a:e9:a9:
                    24:0c:ad:8e:be:f6:de:df:ae:62:a5:ad:1d:cf:dc:
                    24:37:21:32:61:c6:64:e9:30:63:28:0a:51:42:42:
                    77:68:ae:7b:9b:af:e3:bc:70:7d:be:3b:30:fc:4d:
                    30:09:2c:04:33:33:42:bb:e1:bf:31:a2:81:f4:a9:
                    0b:15:5a:86:db:5d:3e:17:66:3c:76:ac:3d:45:bf:
                    85:64:82:f4:49:dc:66:21:90:0d:43:00:41:6c:a7:
                    15:4a:4e:4e:74:dc:a5:61:ba:3c:53:55:3a:39:e0:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:1B:AB:3C:5E:19:A7:8F:B9:B3:A7:8D:50:EB:3F:56:E8:7B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2a:4a:8e:6a:61:c3:05:00:1a:e4:cb:7f:d3:a2:04:aa:74:
         12:f4:c3:98:9f:01:fe:3a:4b:ad:66:a4:a7:cf:f0:6e:db:59:
         2f:1c:a5:9e:13:f7:a8:0b:65:02:31:35:c2:28:b2:4b:9a:e7:
         0b:13:4f:db:b3:0f:d6:51:e3:e8:80:e1:21:d0:dd:7d:37:8e:
         63:e6:3b:9e:a1:99:16:a3:f1:55:cd:14:4f:13:6f:6f:17:41:
         a0:a3:a1:8d:54:44:65:54:78:ca:3a:49:c0:cc:c1:51:d1:86:
         73:c8:12:2a:9f:ca:30:d0:56:7e:6a:36:0e:de:db:f2:9f:57:
         5a:15:93:45:2f:d6:80:dd:4a:3f:69:6b:79:d2:96:4c:37:2a:
         32:94:54:f3:fb:43:e1:25:db:fd:a9:01:17:34:88:b8:02:e2:
         7c:2b:81:a6:04:0a:12:00:f6:17:7a:4f:cb:ae:f6:21:8d:22:
         37:8e:00:1f:23:fb:55:1f:af:7e:ee:bc:ec:19:5c:7e:e0:fc:
         bb:ef:0c:61:73:55:e4:5a:b6:92:11:73:b9:99:4a:a7:f9:13:
         3d:a2:44:d3:5f:84:a5:d3:d0:b3:a9:2c:37:1b:59:5b:45:ee:
         87:a7:f8:0a:b7:b7:a2:ed:e8:40:d8:6d:49:01:df:f8:3c:21:
         48:e4:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:32:16 2026 by rpki-client