Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/212ab9a1-0d53-3c21-aa1b-8e90edeef435.roa
File:                     212ab9a1-0d53-3c21-aa1b-8e90edeef435.roa (raw, json)
Hash identifier:          R38thlMFlV4G7u+mI4s8qa4KGQv7jzw5Ylu72lob5T4=
Subject key identifier:   9B:D8:C9:B4:2F:93:79:61:D1:0B:AA:94:C8:3F:99:F1:70:1E:28:DF
Certificate issuer:       /CN=058ef11e-32ea-4ce9-8998-b435c442a300
Certificate serial:       010D0C9F4328584E13197E2E2CA5F72B19782DE8
Authority key identifier: 1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/212ab9a1-0d53-3c21-aa1b-8e90edeef435.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     23013
IP address blocks:        2602:805:c000::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:7e:2e:2c:a5:f7:2b:19:78:2d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ef11e-32ea-4ce9-8998-b435c442a300
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=8aea389c-f7d1-401c-b62e-bd88eef9be06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:97:b0:ef:72:05:09:2e:22:61:c1:1d:ee:
                    c4:97:72:b0:6f:e9:cc:52:fc:22:06:69:2e:8c:fb:
                    15:23:81:63:31:aa:ee:58:44:e3:b9:22:13:57:73:
                    26:a8:9b:43:f1:3d:19:84:99:3d:5f:3c:5d:7c:6f:
                    a1:45:0e:48:41:54:24:9e:c9:9c:7e:e5:11:59:16:
                    14:bf:8c:a7:40:1c:c3:6f:04:52:cd:55:32:a4:51:
                    2c:81:8e:85:5b:75:db:6e:ef:99:19:65:c5:4e:ba:
                    6d:b5:33:d5:62:fd:63:c1:a6:5a:0c:ed:f2:ce:8a:
                    a3:86:ac:77:c4:d2:26:ea:5b:37:f2:9d:59:97:57:
                    3c:06:69:f4:1c:d2:5e:f7:6e:0d:65:83:64:1b:34:
                    b6:c9:6b:30:8b:f4:2d:f2:df:ae:60:6f:9a:24:2a:
                    da:13:75:b8:f2:5e:a7:e2:10:f1:50:2e:26:33:61:
                    5f:e4:e2:24:a3:c7:92:40:94:35:2d:45:9b:54:cc:
                    ff:a5:52:66:16:d1:44:9d:d3:56:77:ad:aa:48:e8:
                    83:80:22:6b:1f:69:15:ec:1b:39:ab:0d:e7:56:ea:
                    eb:34:21:a4:63:e0:4c:fc:3e:b9:c4:7b:aa:74:8a:
                    3d:d3:28:00:a8:9a:4c:a8:12:42:fe:74:d5:5d:59:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D8:C9:B4:2F:93:79:61:D1:0B:AA:94:C8:3F:99:F1:70:1E:28:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/212ab9a1-0d53-3c21-aa1b-8e90edeef435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl

            X509v3 Authority Key Identifier:
                keyid:1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:805:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:15:19:bb:a9:6e:82:3c:08:50:2f:a1:2f:a2:49:36:19:
         84:83:49:24:59:db:de:5e:7e:35:c3:92:b9:a2:be:b5:ac:83:
         0c:d7:c6:58:76:ba:51:a4:4b:64:0e:98:43:59:3e:bb:62:71:
         74:5b:10:f3:55:1c:28:41:10:6f:d6:82:da:c9:dd:5e:34:43:
         ce:66:8f:8a:53:89:91:af:3b:dc:b4:71:95:62:33:d3:9c:a3:
         5d:0a:2b:48:cb:5d:f5:29:d8:ab:e3:28:1e:06:71:c5:4f:0f:
         62:c3:d0:88:7a:20:c4:f1:80:f2:d9:6a:08:57:2e:89:8a:72:
         43:95:c1:4d:dd:9e:75:1f:9e:0a:92:bc:b1:be:eb:d6:b3:f4:
         06:82:dd:62:cc:f9:d0:b2:b0:e3:9d:d0:2a:0b:b0:d3:60:ea:
         00:43:9f:86:4e:35:b9:5c:f3:bc:35:4d:8f:91:bf:dd:52:98:
         95:6b:12:9c:bf:04:69:9a:b7:bd:9d:d8:1a:05:76:17:06:e9:
         cf:93:a1:93:24:3c:4b:31:f8:35:3c:e5:50:62:ab:7a:02:02:
         47:98:f1:a5:2b:78:47:90:e5:9b:f0:83:ba:6d:28:20:32:24:
         68:99:2a:b5:4f:cd:3f:23:26:ea:9a:e4:a7:d4:5d:4d:89:43:
         41:86:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:13 2026 by rpki-client