Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa
File:                     c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa (raw, json)
Hash identifier:          naW84axDdl4sM6vsQtShNUjLv+7pPoylpBbcSSOawaw=
Subject key identifier:   AE:99:CC:FC:A9:3C:A6:91:DE:C2:62:48:32:58:9B:17:99:04:5C:00
Certificate issuer:       /CN=2ce98e57-da60-49a3-b167-e6998e0d2945
Certificate serial:       010D0C9F4328584E07009EA66B16EC13E1F8BB80
Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     14618
IP address blocks:        2604:29a0:f000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9e:a6:6b:16:ec:13:e1:f8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=00a9073a-fbce-4f38-bd64-a0b17b9d6307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:df:af:92:e7:f5:75:9e:ae:fb:c0:a8:54:
                    01:7f:82:eb:69:18:b1:a9:4f:84:7c:25:46:da:5e:
                    ae:f4:ef:fe:2b:1b:b4:44:6e:2e:f7:42:46:82:a1:
                    9c:46:81:5c:2a:3a:b2:0d:b3:16:fd:b6:42:26:9c:
                    e3:37:cf:e6:55:0e:c1:26:9e:14:2e:29:e6:5c:f6:
                    87:f0:52:9b:e3:7d:21:ff:8a:f2:31:0a:fa:38:55:
                    24:ca:ea:e7:bf:25:ad:35:c4:6f:80:f5:23:ce:ff:
                    bc:93:d4:0a:bf:d8:06:12:5b:73:f8:5e:8b:0f:40:
                    21:0d:fa:8b:c3:2f:33:9b:6e:b6:03:8d:f7:27:54:
                    f6:1e:68:48:eb:e5:17:63:ac:23:2a:f5:f3:ed:0c:
                    82:ba:16:dd:1a:8a:69:64:a0:8b:39:16:bc:0d:2b:
                    28:98:3c:73:8f:b4:8c:76:e3:9a:4d:f1:ca:d8:77:
                    86:36:83:61:ab:c8:ff:28:87:4b:e9:6f:7d:87:53:
                    3d:1b:dd:4c:bf:06:c6:ca:d5:12:a2:26:7d:63:cb:
                    1e:8a:30:8a:13:b0:43:3e:d1:e9:63:7c:41:2b:2c:
                    4c:40:46:f7:3c:d8:a8:71:e0:0d:ff:7d:b4:04:e2:
                    d9:78:d3:ff:b5:7c:64:70:8e:d0:ca:82:ce:26:9d:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:CC:FC:A9:3C:A6:91:DE:C2:62:48:32:58:9B:17:99:04:5C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl

            X509v3 Authority Key Identifier:
                keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:29a0:f000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:21:8a:93:a8:e9:68:e8:7d:85:77:d8:fd:95:c7:88:1a:f7:
         07:66:da:af:3f:a6:77:d4:1e:ef:2a:62:34:d7:28:4d:5d:a2:
         81:a6:d2:0b:57:d7:41:16:d5:22:89:0b:2c:de:02:f4:5f:e1:
         cd:b3:f8:e7:87:a4:17:57:7d:c7:6b:9c:81:20:80:fa:fd:50:
         3f:2f:d5:9b:e9:53:af:8b:97:cb:be:68:53:43:4d:cd:eb:dd:
         94:b6:40:a8:c5:03:3a:8c:62:51:45:1a:ce:c8:a2:ee:92:fd:
         c8:57:39:98:fa:9c:2d:57:3c:bc:07:1c:20:2d:a3:f5:75:c3:
         2c:2f:ee:68:5c:80:af:ed:d5:bc:d0:ce:bb:b0:6a:80:be:2f:
         32:66:93:85:dc:2a:fa:c3:e9:25:33:0f:cd:fe:2b:28:b1:c1:
         b8:1c:a3:a3:0d:18:31:09:cd:2c:6a:2d:1b:60:31:c6:12:ab:
         aa:dd:0c:8f:3e:ce:62:70:00:f3:c7:84:e6:31:15:b2:1c:a2:
         c5:04:13:16:e1:7a:46:c6:9a:10:4b:58:c0:df:b2:03:5a:99:
         41:0c:00:96:8e:e0:5b:5e:50:7b:0f:e3:52:42:0b:5d:6f:c3:
         32:a2:dd:24:c7:ef:b6:8e:4e:d3:60:a0:e9:68:b4:fa:dd:cb:
         88:5e:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:17 2026 by rpki-client