Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
File:                     f3eb19d5-af1e-3d62-921a-950796610e1c.roa (raw, json)
Hash identifier:          0BwiBflYuuimLOhIaGlT7+DEElDosYmK0g5Z0WpeBYQ=
Subject key identifier:   F5:01:65:CA:59:F8:DF:C0:9D:9A:24:B1:6A:84:1B:20:E6:F7:1D:4A
Certificate issuer:       /CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
Certificate serial:       010D0C9F4328584DE9B087BE8DAB368662D5C400
Authority key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     393581
IP address blocks:        2620:1fe::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:87:be:8d:ab:36:86:62:d5:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=2baca760-23a9-46fd-8317-b2c0b86462f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:57:1d:fa:46:a1:86:0b:70:2e:29:28:90:
                    e5:df:0c:62:30:49:93:35:c3:b3:f7:c5:15:1a:8e:
                    33:0d:e1:23:36:08:f9:55:1b:72:fc:38:8c:90:71:
                    99:8d:de:63:3f:fc:91:fd:fb:36:c2:8a:fd:de:0d:
                    85:65:81:94:05:7e:8b:23:ce:54:72:f5:59:76:6c:
                    4e:79:ff:55:88:2a:8f:02:39:cb:c1:56:bf:66:59:
                    0a:77:89:d9:bb:ce:6b:1e:ea:56:93:f3:db:a9:86:
                    38:ca:11:6a:b6:2d:d1:f3:7f:79:89:c4:64:d7:db:
                    2a:73:00:69:24:ef:e0:e7:90:d9:c6:bb:7f:3d:09:
                    48:97:3c:ac:af:4b:7d:7b:1f:d6:9e:73:46:7b:24:
                    3c:26:f5:2e:a0:26:80:3c:75:09:45:1c:90:0c:be:
                    4d:78:d4:95:8e:ff:87:b3:6e:e5:a9:a8:38:ee:e8:
                    37:8c:b7:08:2f:8e:3a:81:65:1b:a7:0a:01:c9:f3:
                    47:8d:56:43:12:78:0c:06:45:2f:00:4e:3d:e0:97:
                    1f:fb:a9:9b:18:c0:c4:38:29:97:8f:4a:bf:64:28:
                    fb:71:c9:e3:de:43:5f:ad:58:7b:ae:ef:31:7c:10:
                    33:ba:f6:10:ad:08:bf:97:86:9d:80:6a:b3:1c:6e:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:01:65:CA:59:F8:DF:C0:9D:9A:24:B1:6A:84:1B:20:E6:F7:1D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl

            X509v3 Authority Key Identifier:
                keyid:CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1fe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:95:54:66:f3:15:53:a6:3d:53:9b:81:5c:04:ff:5a:b3:6e:
         dc:c1:2d:2d:39:5f:ae:1f:9e:42:93:90:2d:49:92:5f:47:b2:
         96:5c:52:ed:a5:52:a4:93:c2:9c:d4:ec:f4:a6:18:57:d1:10:
         f4:54:4d:c3:59:c4:19:86:6b:c3:ee:1b:4e:f2:42:7a:a0:4b:
         4d:0d:ea:c1:7a:0c:aa:a3:a2:75:99:d9:f7:b6:4e:ee:d2:19:
         9a:5e:69:80:1c:76:f7:7e:88:c3:12:ad:6f:cc:46:58:6b:f7:
         cf:74:70:4b:4c:d3:9a:32:ab:88:10:11:ad:bc:9c:52:fb:a8:
         47:19:06:19:74:3f:90:dd:4a:06:8c:07:89:13:28:0c:87:57:
         0c:cb:78:37:d2:c9:c5:46:dd:b0:bd:63:68:35:55:f1:31:2f:
         58:b0:ad:17:03:c4:be:1b:50:fe:31:3b:e9:7d:fd:f9:31:09:
         11:2f:27:bb:eb:f8:f1:71:58:ca:63:ce:15:db:1f:61:e9:e9:
         cb:df:bd:fb:25:cf:d2:43:cd:bf:bd:ef:18:ed:e7:24:66:36:
         3b:06:56:1e:62:76:7c:4c:e5:db:36:65:81:7e:40:4c:15:92:
         6f:66:ec:88:dd:57:e4:c0:67:cb:a4:02:5d:20:2b:a7:c8:82:
         9d:1e:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:30 2026 by rpki-client