Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
File:                     b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa (raw, json)
Hash identifier:          W0gAiy3dtR9/U4vBJBXM2uK7Yq3eGR8CfvNpPjl6Cos=
Subject key identifier:   AC:DC:73:5F:1C:E8:AC:70:78:75:84:2B:D3:2E:98:57:32:F1:D2:AB
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584E1E4453B2A31D14A8AFE7BD70
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     13807
IP address blocks:        2607:fdf0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:53:b2:a3:1d:14:a8:af:e7:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=356a377c-cbb3-4dd9-ade0-6c001195d124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:19:52:7e:0c:d0:b5:d2:c4:a6:78:4a:20:
                    f6:be:6a:a1:b8:78:c5:4a:22:2a:c7:26:ee:84:9a:
                    d1:7c:56:75:5e:6b:12:2e:a9:e7:55:0a:d9:bb:29:
                    f2:0b:b0:c0:31:8a:b2:9b:d0:85:47:26:85:db:21:
                    3e:d6:cd:46:e1:f0:a1:31:c8:60:8b:c7:6c:4b:e8:
                    30:e2:e0:1a:52:54:dd:76:a4:03:d8:19:97:f4:92:
                    bc:13:8d:36:10:b8:0e:b5:40:87:c0:29:15:bd:ce:
                    85:0a:43:06:69:82:8c:bb:63:c3:67:84:2d:ca:ee:
                    8a:af:0a:03:6f:4a:40:95:af:a2:6b:7d:f1:fd:db:
                    0f:c8:aa:2f:28:60:d4:0c:05:0e:ac:9f:19:5f:c0:
                    59:a3:94:4c:3f:8e:23:b2:34:e6:96:98:47:59:e0:
                    b8:e4:73:e7:36:75:f4:97:40:86:11:28:16:97:ec:
                    47:5d:f2:9a:a7:d8:c3:d6:ce:77:f4:49:7a:5d:be:
                    d8:6f:fe:33:75:7b:f3:69:24:a6:d1:b4:7b:99:82:
                    4b:f4:4b:2e:ff:d6:b9:92:cc:b8:5b:04:44:4d:ee:
                    fb:4b:ed:42:fc:87:65:75:42:fc:9c:4f:89:8b:2a:
                    c1:8c:52:18:94:37:37:80:65:d7:02:e9:4b:e8:00:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:73:5F:1C:E8:AC:70:78:75:84:2B:D3:2E:98:57:32:F1:D2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:07:5c:3a:d4:a7:a3:50:cf:53:de:75:98:66:19:89:9d:b7:
         d5:07:3b:2e:ef:9a:b6:7e:d1:91:a4:02:5a:45:fe:15:ee:3b:
         b8:ff:ec:a2:32:84:47:6c:22:a0:e9:fc:41:8d:5a:ae:62:0b:
         16:00:f1:2b:c6:63:81:36:13:6a:86:d6:73:55:9e:08:3e:00:
         7c:73:29:03:cf:e7:ca:87:2a:e2:f3:f4:15:4c:3c:5b:a7:1a:
         37:95:de:d5:e2:72:30:0e:e1:24:bb:c2:18:9a:39:e4:e4:0f:
         8d:5d:24:0d:ec:7a:01:7d:60:8a:f6:b1:6a:80:d3:6e:7c:66:
         a5:70:77:53:76:79:13:14:35:7f:36:a6:f3:63:97:b2:c2:38:
         df:0e:98:56:c4:ea:f8:b8:7e:46:af:d7:51:fa:04:e8:5f:04:
         25:5e:f9:b9:11:14:b0:3b:34:ed:a9:89:3d:a5:54:f7:a5:ef:
         07:a0:b4:b0:f8:b7:19:6c:3f:ea:5c:bf:28:ab:72:c0:51:db:
         32:8b:d9:cd:4d:81:cf:a0:fc:fa:ee:c8:94:ca:1e:b5:dc:09:
         5e:cc:87:87:7e:23:b0:2d:75:b3:37:3c:21:ec:4e:7d:c5:75:
         9e:6a:1a:4c:1b:75:55:e2:52:06:87:75:01:7f:bf:6f:51:af:
         4f:9a:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:06:47 2026 by rpki-client