Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
File:                     9e32cafe-3964-3828-b17c-06b289cf828e.roa (raw, json)
Hash identifier:          eDW5r2x69/IQi18Os1IFDONqAz/jOMXv7P0CAQHMt5c=
Subject key identifier:   D4:06:D0:F3:81:5D:BC:6A:29:BE:9E:1A:A0:FB:74:0A:C6:87:5F:18
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584E043608EB43518D362BA16700
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     2734
IP address blocks:        2605:6c00:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:08:eb:43:51:8d:36:2b:a1:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=f0856f97-c1ee-4800-a747-066112307943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:3e:9b:f3:3c:ef:e2:d9:e4:32:17:82:14:
                    68:05:df:ea:91:1f:24:ef:a6:af:6e:bc:3d:53:0d:
                    75:d6:67:27:e6:fc:d1:2e:75:e4:7d:e3:8e:24:a9:
                    5a:71:47:b6:46:df:fd:ff:44:c2:50:a8:a7:ab:66:
                    df:4b:e3:11:1f:2a:76:be:92:1d:0e:09:7b:4c:c6:
                    fc:8e:11:7c:2d:f9:c2:e9:c9:6a:db:08:6f:b1:98:
                    c3:a0:9c:d4:54:b1:50:43:d4:e2:f4:c8:87:d1:ad:
                    4e:a9:e7:55:94:b2:01:98:0b:dd:d0:08:b1:5b:45:
                    81:f0:ab:8f:d7:00:12:7e:d9:0b:ec:e7:91:50:58:
                    4b:b6:bb:b9:7a:63:a7:27:23:d9:f3:02:b4:48:e1:
                    eb:66:df:c3:a9:b4:4f:d7:ae:31:9f:bb:67:57:7c:
                    ed:54:7f:64:19:f6:4c:c0:ee:28:53:e5:08:91:83:
                    46:78:84:8c:bc:dc:30:ce:35:0d:6c:dc:9d:20:fe:
                    fa:3f:57:13:b2:91:af:b1:fe:21:15:7d:40:56:3d:
                    08:6b:1a:c5:f9:2d:9b:a5:b0:a7:e3:b6:6f:de:80:
                    6f:99:be:dc:5f:92:f0:26:47:2d:83:96:58:8b:73:
                    5f:19:38:5d:da:99:50:38:ea:4a:d4:82:38:2e:f8:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:06:D0:F3:81:5D:BC:6A:29:BE:9E:1A:A0:FB:74:0A:C6:87:5F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:10:e2:13:ac:73:0e:ae:69:9a:db:8c:0d:b2:76:b8:0b:a3:
         f0:a5:36:b6:68:34:66:a9:58:a5:2d:d0:cd:1a:17:57:6b:36:
         09:47:39:4b:ec:7e:ef:c9:0e:8e:29:7e:2d:55:53:e1:1b:95:
         41:4f:2b:4a:9b:b4:0c:47:c0:56:3a:07:12:b8:6a:26:36:b0:
         4d:8e:0f:64:a8:15:d7:2a:6c:20:72:bc:1c:67:f2:a0:19:77:
         f8:0a:51:a3:54:43:86:e5:ee:44:aa:8b:ee:98:fa:0e:64:61:
         e9:76:70:0e:a1:06:e4:b7:00:02:d9:2a:db:5f:df:7d:d6:fa:
         c6:b6:d8:a4:fa:4d:de:28:12:c2:b6:a4:fe:9b:12:25:06:02:
         f4:3e:a8:d0:de:27:20:02:b6:80:b4:ea:98:f3:7a:3c:c4:5c:
         0b:9b:27:61:8d:65:c6:8a:9b:56:e5:6e:3c:e5:23:8c:20:01:
         86:86:b9:e1:54:4b:98:bf:6f:27:99:8e:0e:eb:86:1e:5a:02:
         4c:c2:ed:cf:d1:3b:00:95:ac:54:a8:04:6b:c7:31:2a:da:2d:
         04:92:f4:14:59:8d:66:13:c9:18:e6:20:b0:b9:c8:22:f8:11:
         7f:9e:76:7d:0e:1e:4c:76:1f:5c:b6:f8:fc:da:67:b8:9d:2a:
         3c:99:85:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:59:12 2026 by rpki-client