Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa
File:                     9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa (raw, json)
Hash identifier:          RRs+aQQw+Vn5BWFWRuQShWY2xiuPI5r+IVtafvfCRIQ=
Subject key identifier:   C7:31:DC:06:46:8A:52:5C:7C:BA:FA:F4:8E:E1:DE:F8:16:92:CA:B4
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584E016B4E87D6EFE5EAA231B900
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     16509
IP address blocks:        2605:84c0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:4e:87:d6:ef:e5:ea:a2:31:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=ee738cf1-d445-4450-8d8b-f50f0dcccb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:1b:fa:2a:92:6f:f9:83:b4:6a:48:02:32:
                    27:47:fb:d1:c7:7a:a7:1a:ae:3f:7e:fa:7a:82:3e:
                    a0:1f:db:08:17:4f:e9:3a:67:97:4b:05:5f:8e:1d:
                    d0:09:1f:4e:5e:3e:85:7f:53:99:60:cb:06:4f:a6:
                    1f:fd:a4:dd:c4:1b:df:7d:5c:51:c5:2e:8c:f5:7f:
                    78:b3:55:29:ec:ee:72:81:27:9c:34:c5:69:52:a1:
                    a1:20:77:6d:c2:da:e2:18:76:f5:d4:79:12:cd:51:
                    ba:8d:77:2c:a2:c6:0e:22:56:1b:c3:2e:22:99:76:
                    15:71:ce:fe:2a:5d:02:a6:ce:2b:d3:3a:7e:5e:a0:
                    e7:8e:36:45:ee:21:5e:00:ac:90:bd:79:5e:ff:37:
                    f1:94:73:9a:79:43:d1:30:e2:3d:9d:73:0b:96:40:
                    05:ff:70:20:f0:ef:d2:3f:fe:9f:bb:a5:0b:c5:19:
                    86:b9:6f:06:e9:8d:6a:40:b2:bf:4d:b6:22:c3:8e:
                    f8:8b:9f:96:f8:40:5b:bb:53:65:b4:a6:96:ec:35:
                    2d:94:17:fe:4d:f7:7c:ba:4e:d7:3e:2d:a5:35:81:
                    30:a8:38:d9:36:84:53:95:06:3d:0d:89:70:b3:e9:
                    39:a8:b6:3b:27:9f:60:f6:c3:8a:52:2d:df:1a:ff:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:31:DC:06:46:8A:52:5C:7C:BA:FA:F4:8E:E1:DE:F8:16:92:CA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:09:18:c6:62:ea:89:ef:df:aa:a3:e3:0d:e0:b1:bc:92:
         9a:bd:00:c9:cd:6b:35:4e:08:40:b2:14:9b:be:ff:59:62:e6:
         f8:48:d9:af:51:31:b7:97:39:aa:a8:08:20:cb:9d:ff:d4:2c:
         84:e3:10:fb:1a:6f:b2:2f:2a:07:ca:20:78:bb:13:29:5d:9d:
         39:b7:28:6a:c7:0b:b5:81:08:f5:7a:b4:68:16:57:5e:8e:bb:
         14:08:e3:38:fd:92:f6:4a:49:2a:70:77:6a:93:48:b5:64:ee:
         b7:07:e8:f4:0b:4b:d2:4c:5b:87:85:49:f5:a9:36:a4:d8:d6:
         7e:a2:97:d4:d9:ca:ee:2b:5e:92:3c:3c:21:3e:31:ce:f9:7e:
         ba:93:fd:75:b4:ef:31:21:f9:e8:f2:08:d4:c8:b8:0b:5a:bf:
         b4:b3:5e:94:e5:a9:0f:b3:6e:5f:f8:d5:06:d3:c9:9c:b0:d5:
         07:e6:e0:8e:cf:fa:8d:60:38:27:52:f0:67:8f:18:ca:71:8f:
         1c:e4:77:e6:c5:14:6d:a0:51:2b:a4:23:c2:39:ec:b4:d5:df:
         50:19:7e:34:b0:65:f3:2e:e2:21:6c:62:a0:19:b6:d1:0a:dd:
         7b:00:af:a2:3a:ad:fa:e4:ce:02:32:31:fd:6e:d9:01:5d:11:
         9b:87:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:16 2026 by rpki-client