Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa
File:                     897074be-6233-32df-a4ab-14bb263538b9.roa (raw, json)
Hash identifier:          5TkBnu4wok2tsnrAk+BtCELX3wcT+9Mg/hsTOGfppMk=
Subject key identifier:   D7:57:24:00:BC:B7:67:B9:0B:87:DA:B1:F8:BD:E2:D7:CC:84:BF:6D
Certificate issuer:       /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial:       010D0C9F4328584DD8F064741D8AA124F568A340
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     1011
IP address blocks:        2602:fac8::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:64:74:1d:8a:a1:24:f5:68:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=6f0c0fe8-3e66-4bc4-8569-eabecd3bda43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:f0:45:6d:14:ee:cf:c2:5c:ab:a8:2b:75:
                    f9:16:f7:21:13:2d:99:f3:e0:8c:91:eb:aa:16:c0:
                    cc:76:e9:8a:4a:72:af:68:89:15:f1:b5:5f:62:4d:
                    b3:27:b3:f6:ab:a6:d2:dc:68:74:d3:da:65:34:3c:
                    f0:7b:51:74:94:49:eb:0c:d9:19:d1:cf:43:a1:a8:
                    f2:3d:8e:0b:6f:61:60:87:cc:84:ea:07:38:1b:69:
                    41:24:0e:d8:4e:d3:f8:81:c5:9e:7e:5d:dd:40:0f:
                    80:f9:cc:b3:eb:a7:59:36:88:5d:bd:5c:0a:62:e6:
                    ee:8d:f2:fc:db:d9:48:62:9c:4c:b2:64:bc:33:04:
                    2b:f5:89:b9:ea:59:18:d2:43:32:45:e7:2c:33:1d:
                    d5:1f:cf:6d:23:c4:b1:de:70:67:48:87:86:45:d8:
                    e7:ee:b4:86:01:c3:da:9d:08:75:33:f2:34:27:fe:
                    46:70:ce:cc:67:51:94:b2:5e:b5:55:5b:4e:54:12:
                    87:bf:60:2f:e2:50:69:9b:58:67:08:e8:c3:53:c0:
                    d5:05:6f:ad:08:70:ba:19:a1:70:66:32:28:1c:b4:
                    0e:49:c8:7b:96:10:08:81:af:ec:eb:c1:d9:80:7d:
                    31:83:91:6b:a8:35:6e:a8:53:6b:da:4b:38:99:df:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:57:24:00:BC:B7:67:B9:0B:87:DA:B1:F8:BD:E2:D7:CC:84:BF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl

            X509v3 Authority Key Identifier:
                keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:a6:76:6a:d3:83:24:ed:b5:67:c0:bc:26:c4:ab:89:10:
         84:af:bf:36:dd:cb:5a:aa:b0:01:4f:34:93:29:85:a1:9b:78:
         66:bd:9c:e8:5a:88:20:a2:d2:4c:22:c5:67:f2:91:71:ce:d4:
         63:ad:58:42:be:cf:c6:da:61:03:28:03:08:58:fd:7d:5f:9f:
         12:2e:9b:f5:e8:c1:00:c7:68:c7:cc:1d:27:39:a2:99:6f:d0:
         67:96:29:8c:7d:70:c8:3a:e5:b7:5e:61:7a:0a:02:66:70:61:
         d5:0d:64:0e:6e:98:97:32:6a:ad:07:4c:c2:4d:81:95:99:00:
         fb:5b:11:3b:18:11:6e:a8:53:b1:ab:ab:44:df:d8:b0:18:32:
         c2:24:70:95:07:41:bf:ba:79:da:07:5b:cd:79:f3:18:39:a7:
         8b:6d:39:fb:6d:5c:81:40:3a:9f:c4:9b:18:dd:0e:db:a2:1d:
         09:24:20:e5:cb:1b:80:42:02:04:90:fb:eb:64:28:83:b9:39:
         91:64:fe:d6:59:f4:62:fd:c0:8c:03:33:8b:0e:a9:a3:5d:a5:
         21:48:c4:aa:3f:5f:45:67:28:58:f5:b7:61:9a:24:00:a2:ad:
         ef:d6:07:51:50:24:82:51:d0:b6:3b:52:22:36:a0:4b:0c:ce:
         f4:99:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:35 2026 by rpki-client