Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/64cde935-ae3c-3b99-8860-f4b000709563.roa
File:                     64cde935-ae3c-3b99-8860-f4b000709563.roa (raw, json)
Hash identifier:          2YYGB28H6Mh2PCfnkLqDD7WqkTHHS7y8xOIYbcp3iTc=
Subject key identifier:   5A:CB:45:7C:11:6F:86:5C:AA:64:C1:29:9A:16:CB:59:1B:6E:10:65
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584E1FA9942CABBC69E562D2A400
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/64cde935-ae3c-3b99-8860-f4b000709563.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     401659
IP address blocks:        2602:f5c1:1::/48 maxlen: 48
                          2602:f5c1:2::/48 maxlen: 48
                          2602:f5c1:3::/48 maxlen: 48
                          2602:f5c1:4::/48 maxlen: 48
                          2602:f5c1:5::/48 maxlen: 48
                          2602:f5c1:6::/48 maxlen: 48
                          2602:f5c1:7::/48 maxlen: 48
                          2602:f5c1:8::/48 maxlen: 48
                          2602:f5c1:9::/48 maxlen: 48
                          2602:f5c1:10::/48 maxlen: 48
                          2602:f5c1:11::/48 maxlen: 48
                          2602:f5c1:12::/48 maxlen: 48
                          2602:f5c1:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:94:2c:ab:bc:69:e5:62:d2:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=f0b48c27-150a-4b9d-b8b7-c70317da5f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:d6:c6:ba:97:8c:c4:01:cd:5c:3e:a2:c8:
                    8a:ec:8b:c3:c3:3a:99:72:4e:ea:17:fe:a6:2d:63:
                    15:43:39:44:33:69:8e:3c:53:64:8b:4b:fb:be:52:
                    c0:52:0e:e0:e7:54:67:ad:a9:3b:3d:c9:50:11:b8:
                    58:01:ad:62:6a:0a:25:98:90:9a:c1:77:12:0e:37:
                    33:ef:3d:ec:64:8b:e2:23:21:8f:0f:01:4d:23:09:
                    6f:11:e4:05:d2:cc:15:1c:4d:b4:d5:bf:26:73:89:
                    f0:72:48:79:73:05:c3:6b:8b:65:fa:dd:3e:d4:25:
                    84:7c:f0:af:06:36:8c:b2:d2:d8:af:bb:80:6f:00:
                    f6:25:e2:0d:fd:9c:3c:fd:d7:ac:19:94:db:6a:2f:
                    34:21:e8:eb:d3:a3:c8:a4:f9:8b:49:3c:65:4b:0e:
                    5d:f9:5f:c0:05:b7:a6:a8:8b:70:fc:5a:3b:66:75:
                    39:a3:d2:36:66:10:0a:3b:10:b1:f6:36:d6:b5:86:
                    41:16:72:18:19:50:c3:77:6e:89:22:a0:be:84:eb:
                    ff:6d:65:ad:65:4e:29:b3:a8:26:07:0d:e2:ad:70:
                    76:00:aa:45:a1:7d:db:61:4d:3b:33:03:09:f6:9e:
                    7b:2e:e4:8a:40:59:2c:50:e5:6b:22:b7:d5:b9:e6:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CB:45:7C:11:6F:86:5C:AA:64:C1:29:9A:16:CB:59:1B:6E:10:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/64cde935-ae3c-3b99-8860-f4b000709563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:1::-2602:f5c1:9:ffff:ffff:ffff:ffff:ffff
                  2602:f5c1:10::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:a7:df:7c:48:4a:68:eb:90:97:1d:85:44:e8:0f:e2:68:
         90:3b:ef:a3:32:c8:3f:0d:3e:52:54:a5:ca:0d:bf:13:9e:14:
         ca:20:d5:d9:d0:0b:89:b9:42:1e:dd:57:59:32:22:46:81:49:
         00:f9:66:f1:c9:e0:c7:9c:c5:ab:9c:20:da:a1:f8:f0:64:e4:
         68:49:ea:2d:54:db:d9:5b:06:1a:96:57:81:ea:25:de:09:f7:
         c7:d6:06:17:4c:72:2d:b2:f9:1d:83:8f:cf:2c:fb:14:99:a8:
         39:1c:ee:90:53:e1:b9:20:10:fe:f5:7e:63:30:2a:6e:16:11:
         1f:06:d1:57:99:6b:38:cd:94:45:86:8a:88:73:ce:0e:2c:d0:
         38:d3:a4:17:1b:cf:0e:fa:c3:9e:02:7f:c6:e8:74:83:a1:27:
         49:31:ef:87:60:0b:0a:aa:e0:6b:fb:cf:16:c0:75:8f:75:de:
         10:06:36:80:65:31:58:7a:b9:c2:61:b7:45:69:26:6e:f5:4a:
         c4:d2:73:2a:7e:40:4c:f1:45:f7:51:fb:45:48:91:b8:c1:75:
         33:1f:71:a2:e1:29:69:c6:f2:2b:d4:0b:9f:b6:2f:3c:09:78:
         8b:a8:3a:63:6d:5f:4b:9d:51:00:51:1a:96:4e:b2:d6:44:8b:
         c5:5f:e5:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:29 2026 by rpki-client