Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/f13b2373-95c1-3ae3-85a4-ed00b958a310.roa
File:                     f13b2373-95c1-3ae3-85a4-ed00b958a310.roa (raw, json)
Hash identifier:          /9OQZAR3P41cjOjAHr4aBNmSOV4PQu1QcYmI/qX078Y=
Subject key identifier:   17:FE:E3:66:D3:E6:67:60:B0:6B:03:5C:62:5D:60:4F:38:EE:4B:E8
Certificate issuer:       /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817
Certificate serial:       010D0C9F4328584E285D4CC7EF3C387C1FF94F50
Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/f13b2373-95c1-3ae3-85a4-ed00b958a310.roa
Signing time:             Sat 13 Jun 2026 11:48:50 +0000
ROA not before:           Sat 13 Jun 2026 11:48:50 +0000
ROA not after:            Fri 11 Sep 2026 11:48:50 +0000
asID:                     210352
IP address blocks:        2602:f3ff:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:5d:4c:c7:ef:3c:38:7c:1f:f9:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817
        Validity
            Not Before: Jun 13 11:48:50 2026 GMT
            Not After : Sep 11 11:48:50 2026 GMT
        Subject: CN=0c4fe4fb-457e-4409-b4bc-d66e79991c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:d8:2d:1f:6d:8e:c2:4a:06:c5:81:95:9f:
                    12:de:37:62:e9:1b:1a:92:54:83:2e:40:e2:e6:bc:
                    ba:0e:63:f1:23:5d:5f:01:f4:f2:c2:30:e8:17:01:
                    09:9a:c7:b7:39:3c:b6:1c:02:bd:ad:c3:de:6b:1a:
                    ef:52:09:f4:8c:51:bf:44:0d:7e:82:88:86:d6:22:
                    24:e4:24:f2:b1:2c:5f:86:40:b6:a8:3e:b1:20:5a:
                    2b:ca:c0:e5:6d:dc:22:17:1e:76:e5:f7:26:ff:14:
                    8e:67:dc:28:bb:74:38:53:bd:d6:92:79:3c:64:aa:
                    4f:a6:3a:2e:0d:31:98:37:8d:c3:92:17:cf:59:ee:
                    af:e9:a7:b2:f9:30:2c:47:e9:ee:75:ae:86:e5:fa:
                    21:f0:4e:fa:49:ee:7d:71:c1:27:b1:68:44:25:35:
                    ee:93:8a:d4:ef:5c:2f:26:42:e4:d9:6d:36:bf:e1:
                    35:0f:43:76:63:d8:6e:16:df:c8:db:69:fd:b8:39:
                    c4:99:94:63:b3:a8:8e:3b:13:53:a8:fb:23:cc:47:
                    97:71:9f:1b:9f:f9:67:2d:16:07:1f:96:15:11:16:
                    7c:93:25:8a:79:86:19:18:a4:7c:bd:da:ec:0e:31:
                    f9:83:8a:07:78:81:7e:8e:57:ab:8e:dc:70:5d:11:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FE:E3:66:D3:E6:67:60:B0:6B:03:5C:62:5D:60:4F:38:EE:4B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/f13b2373-95c1-3ae3-85a4-ed00b958a310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl

            X509v3 Authority Key Identifier:
                keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3ff:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:98:f5:05:21:4b:5e:16:6b:92:64:4d:0f:e2:13:93:26:95:
         3f:d2:9d:d9:2b:65:3b:68:46:f2:61:21:5f:f4:f5:97:81:3a:
         f1:cb:da:cc:5d:d6:46:a8:69:ca:f9:fa:a7:e4:be:f2:24:b5:
         9d:af:7f:21:5e:20:eb:3a:e5:63:ad:4e:ca:21:b9:b5:48:53:
         53:b7:d3:ed:52:d4:92:aa:f0:c8:20:6c:1c:be:96:45:f1:3d:
         11:86:e0:03:ac:30:5c:e5:f4:57:52:06:7c:d8:45:52:7d:2b:
         2d:73:cd:7e:07:88:57:2b:52:f0:33:1f:f5:9d:24:08:6e:f4:
         63:97:46:6d:05:b2:7c:2a:8a:d9:a2:96:d5:11:e6:2c:18:18:
         0a:8e:80:88:d9:79:7f:a9:23:99:76:8f:8e:bc:6c:1c:22:e5:
         4b:8c:de:f6:66:38:53:26:eb:ff:81:70:14:93:8b:e5:75:e4:
         80:9c:a6:b2:dc:1d:6e:e8:a0:6d:2b:38:63:f0:8b:d4:09:56:
         84:0b:d0:f8:c0:38:e5:53:1b:7d:78:14:97:34:c8:43:fb:b8:
         c4:4f:78:17:f9:06:4c:47:41:14:95:b6:e7:b2:96:4d:cf:0c:
         cc:08:15:6f:a6:60:ec:4f:f9:db:96:23:a3:3c:46:a9:3a:05:
         c5:e6:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:50 2026 by rpki-client