Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa
File:                     b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa (raw, json)
Hash identifier:          vPVoqdmHrjRecG5oH2wm+FttH65cP1vhFsarMD5BOEI=
Subject key identifier:   7F:AA:57:C7:3F:AC:B9:72:22:E9:EC:34:0D:F0:19:3D:DF:18:14:C4
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584E1E449843550AD7C29C6445E0
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     11867
IP address blocks:        2602:f700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:98:43:55:0a:d7:c2:9c:64:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=f2583c64-cb92-4e3c-9763-279cfbb2ee0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:63:f0:75:82:56:3d:46:cc:6c:9a:f8:6b:
                    20:8e:4b:12:45:3f:49:81:15:1a:21:5d:1f:af:ed:
                    9e:ec:64:2e:c2:78:22:cb:54:9b:9f:bb:53:0a:ec:
                    2a:94:d7:1f:9e:b1:e5:18:85:b7:47:d8:aa:20:60:
                    ed:85:fd:7f:0b:d6:f2:9f:22:68:01:85:65:77:52:
                    a3:59:0e:45:d3:ec:1e:dc:05:7b:d6:d4:2c:b8:ce:
                    30:7b:6c:3b:31:65:b9:f3:3a:72:10:70:b1:0d:b6:
                    43:22:6b:c5:a2:8f:7f:5d:1c:64:94:8b:e5:66:05:
                    9a:e9:87:40:96:bc:ae:a3:c8:b0:72:e7:13:1f:26:
                    83:ca:88:d9:ed:0b:9c:b1:02:d0:88:56:3e:08:59:
                    ce:71:4b:83:c5:a9:15:c8:5d:88:84:e2:35:bf:0c:
                    23:68:76:57:6e:35:07:9a:00:be:e3:c9:3f:3e:e2:
                    d6:ac:28:11:48:bb:4e:f6:55:69:c6:db:35:82:c3:
                    bb:e5:fb:0f:e8:cc:c1:e4:09:8d:7d:94:e9:ad:b6:
                    b5:93:55:1f:56:e6:d0:f4:f1:ab:36:14:d0:7d:3f:
                    a6:81:e8:c2:3f:c5:e9:4e:4b:a5:45:4b:45:1e:f4:
                    7a:05:35:ed:94:42:37:50:ef:e0:c3:97:0e:b3:63:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AA:57:C7:3F:AC:B9:72:22:E9:EC:34:0D:F0:19:3D:DF:18:14:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f700::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:c1:ca:ee:7e:f7:77:3a:d1:ae:db:e2:53:f7:7f:3b:7f:
         45:23:1b:37:7c:4d:8e:80:19:5d:f4:7b:52:da:17:84:33:3d:
         ff:27:7e:25:8d:2f:3b:91:b5:1a:0f:a6:b3:1c:58:75:d2:88:
         13:ca:ba:56:af:99:ae:7c:6d:da:f0:fe:9b:a1:df:30:30:a1:
         36:e3:3a:fb:b4:0e:c2:47:ba:f9:ff:f8:9b:92:2d:d3:3a:85:
         0e:40:d5:9f:34:2a:4a:c2:5b:13:6f:69:67:23:b8:12:95:12:
         37:59:a5:5c:6d:6e:8b:89:dc:8c:45:91:a5:df:9e:b7:93:b8:
         29:cb:7b:a7:85:6b:4a:c8:db:fc:10:61:df:fe:7c:0a:7a:cc:
         3a:5b:52:46:43:7b:1f:b3:dc:8f:46:39:d3:07:8b:2f:af:40:
         c0:26:48:e5:1e:85:cd:01:8b:97:9d:bb:f7:f9:08:69:6a:61:
         33:4e:70:74:b1:17:2e:04:40:ce:d6:12:bf:53:24:40:de:e9:
         aa:85:ea:c2:1d:ae:5d:e5:36:15:eb:98:ab:42:41:43:35:3b:
         67:a3:94:e0:6d:88:61:14:0d:22:dd:0e:8c:bf:ae:e7:8b:8a:
         88:6b:0e:6e:8e:47:cf:02:3e:01:5f:1c:d0:3e:0f:42:35:da:
         fe:6e:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:09 2026 by rpki-client