Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/bb168825-f4c1-360d-935b-43eae06afaad.roa
File:                     bb168825-f4c1-360d-935b-43eae06afaad.roa (raw, json)
Hash identifier:          FmFise9pi6emS7Thx5rUz9BhjaKnm7l4Nw0veXkA5Cw=
Subject key identifier:   87:44:68:2A:8C:97:ED:6A:F8:E2:87:CC:56:5B:E8:A1:F4:C9:3F:59
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584E253F02FD08E71ADFAE1C7700
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/bb168825-f4c1-360d-935b-43eae06afaad.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     10430
IP address blocks:        2607:fa78::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:02:fd:08:e7:1a:df:ae:1c:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=91dcb926-7222-4689-830b-4878295ea577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:6c:11:52:b3:f2:a8:ee:50:e2:8d:fd:bd:
                    47:86:05:3e:08:e2:b3:38:c0:90:7c:35:c3:2a:e2:
                    80:5b:0d:c4:dd:6e:43:f4:ad:ad:bd:00:aa:ca:72:
                    73:50:6e:2e:c3:d8:56:34:cf:47:7d:ec:ef:34:54:
                    1f:d1:ef:13:ce:39:15:17:b7:12:ed:75:2e:b4:cf:
                    82:ef:e6:7b:84:a5:b4:d8:d1:f9:cc:03:26:7c:91:
                    32:5b:19:00:48:28:1a:53:10:a6:74:13:69:8a:67:
                    75:e3:b0:01:f9:7b:52:02:29:60:ed:d7:4f:d8:a8:
                    92:1c:a3:de:ed:6c:06:0b:77:3a:72:73:ff:bf:e1:
                    3a:78:c6:5e:61:55:73:a9:55:51:cf:2c:ee:14:6a:
                    a7:64:43:b9:fa:cc:7d:c0:56:8b:90:da:0f:ef:39:
                    c0:9a:a0:73:1a:1c:e5:77:a0:e1:c1:af:85:bb:6a:
                    d9:23:ec:cd:08:65:f4:f5:2b:60:3b:68:3e:49:19:
                    e4:99:e7:ce:a9:3b:e0:49:7f:9b:44:25:e7:73:64:
                    30:b4:f7:7b:c4:7c:3e:5a:0a:c2:f0:5c:8b:ba:a5:
                    16:9b:b4:3f:2c:2b:09:90:2a:47:1f:5b:e4:1b:a5:
                    55:c7:b0:a9:8a:25:fd:74:c2:6e:6f:4a:d5:6c:5d:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:44:68:2A:8C:97:ED:6A:F8:E2:87:CC:56:5B:E8:A1:F4:C9:3F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/bb168825-f4c1-360d-935b-43eae06afaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa78::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:80:b6:58:f6:54:2f:2f:ea:d8:2c:59:7a:39:b0:f0:1c:
         27:1d:04:4d:bf:31:4a:13:cf:0a:b6:9c:97:52:60:e5:35:01:
         09:af:0d:18:5c:29:f0:25:2a:c4:82:11:8e:ac:2c:ec:58:cf:
         35:19:f6:7b:b0:d9:1f:92:75:d7:93:fa:e3:70:d1:c0:e5:b9:
         7a:a7:24:68:c4:09:ba:91:bb:31:89:1b:f5:a0:28:80:76:45:
         fb:57:be:1c:b7:d6:77:22:97:a4:fb:be:d7:fc:6c:5a:9a:c7:
         f0:8b:3f:34:2b:15:c2:d6:d4:65:19:cd:de:b8:70:52:91:ca:
         17:29:50:af:11:29:6a:02:5d:61:c2:7e:f4:ba:ba:f7:32:4b:
         1e:98:da:48:fb:1c:21:97:8a:19:83:cb:af:c6:c1:3c:99:c9:
         00:61:c3:79:ca:1e:86:7d:f2:50:6e:60:68:4d:1f:fb:7b:62:
         08:ca:e7:5d:d6:ab:16:68:04:4a:c7:58:e1:4f:c5:e1:c6:f8:
         f9:7e:37:64:ec:d3:ac:87:21:73:55:ad:46:5d:9e:bb:c2:3c:
         76:ff:a0:ee:89:6b:7f:58:82:00:49:60:3d:7d:a1:41:42:d3:
         1a:96:91:91:30:cc:40:36:58:42:c9:4c:f7:d4:b7:e9:50:d8:
         41:23:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:14 2026 by rpki-client