Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa
File:                     4d858919-717c-34a0-af03-e397e8e819f1.roa (raw, json)
Hash identifier:          zq7QJO50a+SAzkJp543HATCEQqALeK36B3ekDgYNF7M=
Subject key identifier:   DA:F4:04:20:55:FF:15:71:CA:A6:2F:89:22:89:DC:BC:34:DC:5A:73
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F4328584DFBD621A6DF68B8ABCBC50600
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     16509
IP address blocks:        2620:12c:8041::/48 maxlen: 48
                          2620:12c:8051::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:21:a6:df:68:b8:ab:cb:c5:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=eb557d38-fb66-47b2-a3fa-2c84ac41d625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:cd:47:e0:fb:eb:38:39:f1:14:59:fc:6f:
                    5f:12:cf:b6:31:57:a8:be:65:7e:d6:1b:b5:a7:38:
                    46:19:8e:ea:0f:98:21:51:4b:f1:8c:6e:1e:a4:6d:
                    d6:c1:8e:c6:1e:9a:ee:26:b1:43:00:68:35:83:56:
                    ab:f1:76:2b:6c:fe:54:6d:f2:e5:59:e3:63:4d:3f:
                    a3:e6:8e:12:e6:db:d1:2f:3c:ed:f7:54:26:a9:2c:
                    d3:98:c4:10:c1:a9:fa:76:42:90:fc:e8:cb:07:a9:
                    a1:d0:db:7d:2a:1c:54:5e:7a:c2:06:ac:b7:7f:33:
                    ff:c5:96:35:19:ee:e0:84:52:8c:7e:97:80:bf:f6:
                    ec:ce:ae:9e:46:8e:78:a1:9f:bd:12:c4:98:39:c4:
                    17:b0:12:2e:5f:d9:4f:46:ae:ec:a3:cf:41:3f:91:
                    6f:41:ed:88:3b:56:b4:80:f7:ee:33:f3:5d:cf:36:
                    6c:51:2a:65:a9:61:fc:13:7c:7c:b7:25:b1:27:71:
                    55:15:e3:59:6c:83:fb:a1:ba:a6:f3:a6:98:f8:2b:
                    bd:db:94:6d:36:8a:11:90:eb:e2:ce:57:04:4c:e2:
                    d3:6f:76:ab:1e:91:7c:a9:3d:31:96:44:de:4a:64:
                    ab:51:8d:69:ca:9a:59:3c:36:9d:07:ab:23:33:b2:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F4:04:20:55:FF:15:71:CA:A6:2F:89:22:89:DC:BC:34:DC:5A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12c:8041::/48
                  2620:12c:8051::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:fd:b9:4a:2f:cd:ab:59:56:5d:ec:bc:1e:1b:58:ec:07:
         4e:cd:10:3e:61:88:fa:7f:dc:57:e9:6b:9d:55:c4:15:39:54:
         ce:07:e7:4b:a5:8e:55:c6:a0:17:e8:48:e4:40:ac:cd:71:7b:
         fa:4b:b1:d0:5f:56:bc:2c:2e:ac:ac:86:f3:e8:9a:2c:27:fc:
         64:e5:06:1e:dc:dd:e6:d8:83:7b:35:bb:8e:4c:54:53:a5:c4:
         c2:4b:28:e3:9c:09:bf:49:d4:df:95:99:35:e5:0a:0e:ba:4a:
         20:90:9b:3f:12:b6:87:84:a3:35:83:74:b8:45:bb:a5:80:4a:
         df:6f:34:09:bf:2e:8e:7c:dc:82:68:a5:7e:f5:71:ef:68:96:
         47:f4:0e:dd:c1:63:ff:e8:0d:57:bc:42:aa:81:eb:f1:ba:f4:
         c1:79:9e:32:47:3a:f2:78:1c:b5:71:6a:88:85:80:c9:14:ad:
         9b:32:f1:f3:be:5f:3f:31:f8:43:67:fc:4d:2b:25:14:79:f4:
         f1:eb:62:9c:45:e4:47:0a:b3:af:f8:cc:2a:25:3f:11:0f:ae:
         c9:e9:7a:c9:ed:b6:b6:e6:75:2c:23:7b:82:21:a5:6c:47:25:
         e2:42:8e:a8:68:d1:f4:12:fc:e7:f1:ac:cd:fc:f3:32:51:10:
         33:de:7c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:36 2026 by rpki-client