Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6f98bef1-da84-3bfe-8547-d7767b8a2b29.roa
File:                     6f98bef1-da84-3bfe-8547-d7767b8a2b29.roa (raw, json)
Hash identifier:          SA2/CMxAbmfl4z0npnsX99C8TDpcieXAkFRVK7sYZyQ=
Subject key identifier:   DC:99:AA:FC:58:9E:6D:58:99:57:C7:6B:3B:17:EF:92:51:31:8B:FD
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D97556B26CAB527792C6FC9C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6f98bef1-da84-3bfe-8547-d7767b8a2b29.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     16509
IP address blocks:        2606:f180:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6b:26:ca:b5:27:79:2c:6f:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=7e4f7d2e-dce7-4713-9f47-d0863a6219f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:de:84:a9:69:bf:88:c6:ce:4f:f0:dc:fd:
                    e8:17:f8:6d:ec:78:ab:93:c4:29:cc:e5:82:e8:50:
                    aa:59:a7:66:56:4d:e6:0b:96:8b:3c:b5:50:f8:e5:
                    c5:78:91:40:08:f1:80:f6:9f:11:c8:6c:30:19:5b:
                    2e:6f:0d:aa:a3:08:11:0c:ef:5b:91:3f:78:16:8c:
                    60:60:5c:c7:ed:27:a7:40:10:fe:87:71:a9:0b:9a:
                    e1:d5:39:69:1e:73:a1:54:3d:5f:9a:87:1c:cb:8e:
                    ba:c3:54:3c:f7:62:9a:7b:9f:f7:21:3b:33:c1:f6:
                    7c:6e:32:c9:d8:80:17:2b:34:1a:a9:d6:2e:78:a9:
                    97:5c:4f:b0:9a:9d:df:b2:5d:e1:79:68:e7:d5:78:
                    64:40:a1:28:ea:71:60:7b:98:00:08:14:78:9c:46:
                    9c:1c:8d:65:2a:50:9f:30:42:a8:a3:13:63:83:a3:
                    0e:e8:17:48:ff:d6:19:1f:d8:6e:c9:5d:3e:f0:fc:
                    38:1d:a0:cc:71:b5:19:d7:68:90:c6:45:86:70:c7:
                    03:8a:ca:4d:f6:c9:10:94:66:8a:b2:99:57:34:18:
                    ec:e9:da:0e:c8:b4:90:d3:6e:8b:83:00:2e:99:56:
                    b3:8d:00:24:1c:cd:6a:90:d1:c2:64:47:41:c3:59:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:99:AA:FC:58:9E:6D:58:99:57:C7:6B:3B:17:EF:92:51:31:8B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6f98bef1-da84-3bfe-8547-d7767b8a2b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:2e:bd:95:39:25:41:5d:c4:0c:a0:38:3a:e6:f9:46:30:
         65:33:ec:bb:26:95:4c:10:aa:f8:22:a9:fd:20:9e:ca:97:e9:
         6d:1b:96:cd:7c:24:1a:a8:29:cb:66:fc:a2:3a:54:76:a6:04:
         ed:f2:36:03:f3:32:d2:2f:7d:db:32:39:ee:e7:d8:f8:9d:8d:
         58:2e:c8:7d:b5:55:ba:b5:17:90:17:96:02:d8:04:32:85:b1:
         83:2c:f2:2e:15:82:7b:b1:3f:f4:07:7d:eb:48:0f:c4:1c:16:
         40:c2:13:5f:38:ae:74:d7:e2:12:a2:c0:e0:be:9a:ad:cb:3d:
         b4:e7:5b:12:41:b6:e5:00:8d:59:e4:95:69:16:93:ff:ff:6d:
         9b:d7:77:1a:87:28:1d:51:b1:b5:7e:b6:60:12:ee:00:01:81:
         83:da:c8:a4:01:02:1a:73:9e:40:1c:a3:d9:e4:0f:5c:32:58:
         20:0d:40:93:55:34:c5:5b:a7:82:2f:4f:36:ec:6e:15:f9:b8:
         c5:55:6b:68:63:b5:a5:8e:d8:45:30:47:00:a2:2c:d6:b1:83:
         21:8e:ec:ec:ee:f0:91:b0:3a:0e:09:b0:08:26:5a:52:db:d1:
         06:72:47:39:4b:ef:99:f1:6c:bd:50:75:20:a8:35:ab:66:ad:
         fb:94:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:17 2026 by rpki-client