Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e79abf10-8489-3735-a147-b4bc642d9efc.roa
File:                     e79abf10-8489-3735-a147-b4bc642d9efc.roa (raw, json)
Hash identifier:          isxx/4SUk1fvg4lVYMD13vuNeaZWZMfLFh5UZce1ii4=
Subject key identifier:   22:A1:A4:0A:6D:C3:31:99:49:74:17:39:3A:FE:F3:CB:65:3B:51:A0
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584E043608DF545EAA21C3F5C280
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e79abf10-8489-3735-a147-b4bc642d9efc.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     2734
IP address blocks:        2605:6c00:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:08:df:54:5e:aa:21:c3:f5:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=8bce6973-daf9-4d1a-8c8b-7ffcb918b251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:9c:8a:7c:9f:c3:42:d6:c1:a3:51:5c:e4:
                    84:d4:dd:8f:51:ad:c9:20:21:46:fb:32:88:93:af:
                    aa:6d:4d:8b:b7:e5:24:0c:54:ff:98:1a:26:73:25:
                    be:64:a4:27:9d:8d:6d:2b:dd:0c:27:65:9a:07:b2:
                    e2:68:a2:d0:ee:26:65:86:3e:84:4c:fd:d0:93:96:
                    03:bf:cb:83:b3:da:fd:c0:96:b5:44:7d:03:7d:82:
                    aa:42:29:e3:33:de:7d:f3:58:8b:e0:7b:ac:79:90:
                    fb:56:0b:8e:98:63:4f:7b:9c:09:4b:13:be:ef:6b:
                    78:a2:3e:f6:0c:bd:8c:00:20:b0:c4:dc:15:82:1c:
                    12:8c:c4:cb:84:66:9a:68:1d:5c:c5:2b:e9:80:ca:
                    ba:4b:88:41:09:97:c1:aa:08:a2:eb:6b:bf:bb:b4:
                    51:03:38:77:e0:1b:a0:f3:02:02:ca:93:a3:1f:2f:
                    e0:30:c4:c8:e9:65:ff:7c:0a:24:9c:e4:b0:67:56:
                    56:0a:96:b5:8d:20:e5:8d:7d:ee:23:31:c3:26:06:
                    4c:1c:50:be:11:90:4c:2c:8f:60:45:8d:4b:27:a4:
                    07:ff:41:8c:ed:8d:3a:01:c3:20:96:80:e4:82:45:
                    b3:7d:22:6a:3a:aa:74:b1:ed:76:6e:7e:72:81:7d:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A1:A4:0A:6D:C3:31:99:49:74:17:39:3A:FE:F3:CB:65:3B:51:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e79abf10-8489-3735-a147-b4bc642d9efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:4f:cb:d8:1e:df:3c:1b:f8:97:72:36:65:90:66:71:e8:
         c1:1d:70:07:53:f1:e4:46:57:cc:21:95:47:58:11:fa:62:ff:
         78:0e:26:e1:76:1f:18:8f:6e:4b:1d:99:2e:24:88:f3:2b:99:
         ca:59:d1:43:cc:0a:c0:e4:60:5a:85:7d:f6:a7:7e:e0:01:20:
         f0:c5:39:0d:18:ea:ae:0f:f2:0f:00:9e:71:a6:96:8a:59:ab:
         96:43:c2:1a:d7:c1:4d:3c:b1:e4:69:88:a8:f6:10:01:c8:48:
         4c:0f:ba:86:79:41:28:27:84:35:c7:8a:58:ef:0e:8d:cb:a2:
         e8:4b:74:c4:c4:ea:33:5f:d9:4a:71:54:59:65:3c:cd:71:c0:
         88:83:1d:7d:7b:4f:a4:6a:2c:97:90:fd:45:9e:d2:81:bc:93:
         90:34:df:ff:8c:19:04:77:3e:57:90:0a:31:48:7a:61:9d:5b:
         98:81:fe:02:d0:76:70:e5:71:6a:32:4f:dd:7b:9d:ff:83:51:
         f7:b0:6f:91:ed:13:2c:8c:4b:15:8e:50:1a:c5:b3:2c:8d:9d:
         b3:c4:b2:14:6a:3b:41:4f:75:a3:11:20:cc:af:ba:88:4a:ff:
         ae:96:51:55:cd:f2:c0:b3:e8:28:66:fe:b1:20:38:50:42:d2:
         d1:16:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:59 2026 by rpki-client