Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa
File:                     cf7322cd-659f-31c1-827f-bb470449d31d.roa (raw, json)
Hash identifier:          d35AWYi2ulLu9hK4olpbdnSpWOPi+QNfb+7KsyWIc8A=
Subject key identifier:   60:CA:66:0E:C1:1E:06:02:F3:43:4E:61:D3:E6:5D:EB:28:5F:0E:43
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F4328584DD78B1A75EA83949D130D7380
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     209242
IP address blocks:        2606:2c0:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1a:75:ea:83:94:9d:13:0d:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=1c43d4dc-0ab6-4293-ad2e-bd3c402c49fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:a5:6d:df:92:7c:b6:68:74:3c:de:c3:85:
                    b2:8e:7e:29:4d:a5:ae:81:1e:d4:88:be:c9:88:28:
                    60:ff:fc:35:87:f8:48:68:2c:3c:de:3f:e1:36:d1:
                    46:a6:27:b7:44:8b:78:67:e9:d0:17:ad:bd:0d:4f:
                    be:96:8e:cc:3a:a2:7c:74:64:fa:cc:ec:f8:76:fe:
                    75:90:ac:3d:6b:cf:bf:8f:23:f5:e6:56:64:f4:27:
                    ec:e7:c8:19:ca:6b:6d:70:47:18:18:eb:d2:2f:cc:
                    b6:a6:7f:81:f6:13:7c:17:7f:fa:77:85:18:2d:fb:
                    1a:d4:8f:d3:78:81:3e:32:18:89:1b:da:75:55:67:
                    a2:aa:50:c5:f1:4b:50:be:c2:57:7c:09:b1:8f:22:
                    aa:63:93:e8:e2:b8:5e:26:d4:ae:2c:77:3c:e7:2f:
                    1d:09:9d:93:f8:67:18:d8:bf:62:a5:ef:57:3a:39:
                    f0:2d:d4:37:ba:6b:82:fd:54:e7:a9:ee:fb:ee:65:
                    96:d5:4b:c8:86:6d:33:b5:d3:66:48:8e:48:a9:f8:
                    6b:97:ad:d6:12:c8:55:9b:44:b6:3d:63:bb:6d:12:
                    e6:ea:f0:90:96:3d:12:e2:28:a9:db:be:7d:2b:d1:
                    59:0c:ca:50:38:4b:1b:52:ef:a7:43:a1:71:4c:75:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CA:66:0E:C1:1E:06:02:F3:43:4E:61:D3:E6:5D:EB:28:5F:0E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2c0:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:16:81:5b:e2:7e:25:4d:d3:dd:c4:e8:4e:62:5d:7a:34:1b:
         86:6d:16:da:bf:5d:6c:a3:b2:3d:1b:1a:fd:14:9a:00:09:04:
         8e:ee:d8:de:54:76:f9:4b:77:e8:63:a7:d7:b5:f0:00:1d:7f:
         66:8e:d1:bf:b1:e2:c8:37:04:2d:31:73:75:78:71:ac:fc:0f:
         38:83:61:c3:33:cf:a9:43:b0:98:c5:4d:e5:1c:16:45:e4:27:
         25:67:16:d3:e8:90:c9:5a:1c:97:27:e3:e7:21:f2:8e:14:ce:
         21:c7:d4:7f:41:f6:8f:5b:ac:70:8d:7c:e6:11:a5:38:f7:15:
         03:89:f0:4c:bd:b1:27:71:6b:66:4e:f0:c9:80:e5:cd:25:23:
         ba:9f:1b:35:80:75:29:0e:29:23:cb:50:dc:b4:77:3f:86:3b:
         3c:c1:77:ce:c9:85:ce:54:2f:e1:c9:97:84:75:78:ba:d7:9d:
         c6:20:04:05:5e:15:d5:2c:47:12:c3:d7:28:99:61:81:f2:02:
         29:b8:a7:1e:53:94:5e:98:1f:d1:e7:09:9e:02:20:32:c0:95:
         a0:54:81:29:a5:7b:58:48:0e:85:97:04:b2:60:3d:77:1d:a8:
         9e:58:93:80:33:1d:d4:f2:55:a6:a0:5b:7f:56:7d:de:dc:4a:
         56:0b:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:58 2026 by rpki-client