Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
File:                     dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa (raw, json)
Hash identifier:          4i/jgiSgHFYsa2v7lKvcf98ekbR6RHPrrizcH6pUgGs=
Subject key identifier:   21:09:C2:86:19:6A:4C:EF:4F:F7:BA:89:4C:25:93:7D:63:0A:81:9E
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F4328584DE41B262A485A215A9C60EFB0
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        2620:135:7018::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:26:2a:48:5a:21:5a:9c:60:ef:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=f513feb1-6356-4b31-a648-aa8a732112e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:8b:18:0a:49:97:60:7a:1d:dd:01:b9:ac:
                    1d:33:56:bb:cb:a7:05:76:8f:79:5a:57:03:25:c1:
                    f1:bf:73:22:c3:3c:d4:57:78:a5:29:42:e7:60:5d:
                    71:ac:2b:a4:86:1d:40:31:5d:2d:e5:22:b3:1f:21:
                    ae:5e:8b:cf:7f:a6:05:e9:ce:ae:3d:fb:a2:9b:32:
                    c8:9d:44:23:0c:cc:72:ae:1b:23:8f:37:11:76:e0:
                    24:af:09:f2:57:36:ee:ba:ec:d3:a7:cf:ec:ba:72:
                    0e:b5:4e:7c:91:4e:2b:23:c3:8d:b6:47:a1:23:56:
                    02:e1:f8:4a:27:37:c7:6b:1e:db:57:bf:98:c7:1e:
                    7d:f9:4d:52:a9:97:ab:88:03:f3:6d:12:91:fb:45:
                    5e:ae:9a:a0:7b:4e:a4:37:77:94:4c:8d:1d:5b:3e:
                    6b:05:48:51:e9:2b:ec:9b:de:a8:01:ba:62:41:b8:
                    0f:a3:e0:5b:ca:62:8b:ab:d5:3c:c0:a5:c3:bf:93:
                    cd:8a:e4:73:2e:19:4b:2c:85:d5:2c:1b:f7:35:17:
                    16:2f:d5:b1:21:a0:0f:e7:cb:19:ca:1f:e0:95:cf:
                    87:1e:0a:e6:59:ee:35:e4:60:c5:5d:68:55:8d:47:
                    a9:b6:42:92:2a:75:70:df:6a:50:76:b3:f2:ea:48:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:09:C2:86:19:6A:4C:EF:4F:F7:BA:89:4C:25:93:7D:63:0A:81:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7018::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:8b:4d:a9:87:34:b1:3e:f3:3a:b7:c2:2e:5d:bd:1a:73:
         60:01:d8:b3:21:60:8f:70:4a:96:22:40:ce:e1:46:2b:61:5c:
         3b:2a:7f:fb:9e:93:41:b4:6a:dd:3b:e7:52:ed:09:18:6e:4f:
         aa:1f:e5:15:19:53:0e:96:a1:77:ac:c5:bf:bb:06:56:bc:51:
         96:87:1b:7b:95:1c:5f:18:c7:74:9e:76:6c:b7:58:ee:72:99:
         1e:98:b2:d2:59:8a:b5:60:2b:77:2d:cc:96:f2:22:18:ce:89:
         41:81:4e:78:e3:9f:46:e7:72:66:1e:92:60:28:b7:94:bb:f2:
         b0:e7:66:4a:ff:81:af:2b:95:9e:74:15:2f:7a:5f:9a:38:bc:
         a7:4d:6b:a2:31:56:7b:1a:29:37:14:1e:7d:98:fd:52:e2:b0:
         88:8c:cc:4a:b2:be:49:d2:80:69:fd:b2:fa:16:3a:5f:e7:79:
         3d:5b:99:f9:66:4c:51:51:39:cc:27:2c:fb:44:d4:54:70:3f:
         5e:3e:a1:98:3c:55:58:c9:63:b8:cf:20:0b:c2:48:3d:a5:aa:
         94:91:b2:c0:b2:a2:ff:2c:e2:46:e5:5f:ae:73:5c:fe:ef:99:
         b3:3c:1d:31:19:de:40:da:8e:ee:6d:83:54:70:9f:4b:62:d5:
         b0:22:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:40 2026 by rpki-client