Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa
File:                     cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa (raw, json)
Hash identifier:          AP1OG0lJF9qMCMrz4LcmiiGdqWtbRQCwo7ck1lgRMtk=
Subject key identifier:   0B:6C:3A:14:76:FB:E0:B4:3E:42:DF:11:F1:84:A1:22:07:DC:8D:ED
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584D40CA51F0C3DCF52DDED4A900
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2606:3dc0::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:51:f0:c3:dc:f5:2d:de:d4:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=05cc2c53-475a-4916-bf74-7acc8c5612db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:86:24:13:43:cd:0a:ef:59:7a:5d:e6:52:
                    da:61:16:d8:fb:a5:2e:d3:41:75:ab:4d:f4:93:d0:
                    b6:34:13:a2:3e:7a:2f:10:33:ed:2b:2b:8f:0a:c6:
                    aa:2d:66:c1:e4:9f:a8:84:17:66:5a:91:75:b8:e2:
                    e7:bf:1d:5b:ef:81:1b:cc:81:95:37:fe:77:5b:98:
                    a0:9e:fe:b6:08:1f:d5:98:14:6d:c8:7f:e7:f7:da:
                    81:92:59:ec:f6:b4:1f:c3:66:2d:35:2f:7e:11:94:
                    b7:d7:76:3c:ae:6a:16:88:9c:eb:74:66:01:8a:d7:
                    23:b1:8a:08:d9:b4:39:be:a1:62:8b:c5:55:e1:5c:
                    35:61:5f:21:70:89:68:49:20:c6:a8:fa:ae:c2:71:
                    23:f9:38:92:64:2c:e8:ce:1a:60:a6:66:8f:65:99:
                    2c:e2:95:a6:54:10:5c:2b:d5:aa:1c:da:7d:92:bd:
                    5f:d9:9a:3a:4f:e7:6b:5f:62:5b:1a:ef:eb:b3:f0:
                    51:50:25:f9:60:cc:65:8c:18:17:55:a0:26:c2:c7:
                    04:f3:98:b6:1c:cf:ac:c2:f7:98:fe:e0:8e:97:01:
                    36:66:1b:4c:48:66:6f:e6:80:32:ca:27:48:29:57:
                    8f:c1:cb:44:ee:f8:5e:ef:e0:c5:21:ce:58:e7:02:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6C:3A:14:76:FB:E0:B4:3E:42:DF:11:F1:84:A1:22:07:DC:8D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:1b:97:05:fe:14:84:0c:dc:e6:be:09:63:ce:51:b6:e5:
         98:8c:58:12:05:aa:6b:7a:29:3a:19:b6:ec:05:f2:93:0c:58:
         e1:95:3d:50:a9:92:10:5e:58:07:d3:b8:71:6f:c2:75:44:fb:
         c3:ca:ff:b0:9f:2f:f8:2e:0a:5d:16:c4:72:b8:77:35:a3:ad:
         83:31:55:d6:f7:22:f3:35:be:76:fb:12:6a:ef:e2:07:37:50:
         23:85:2b:cb:d5:41:2e:ba:93:d5:27:b8:a5:08:24:73:91:ac:
         e8:4d:0b:7a:74:35:66:71:67:d3:11:c6:46:b5:30:f3:dc:ed:
         f8:4c:3a:ca:db:85:07:53:30:89:6d:ed:9d:07:09:ef:e6:43:
         e7:18:52:37:18:21:9a:8c:ae:dc:73:f3:2e:9c:18:97:3f:88:
         51:76:14:ad:d7:98:2d:65:46:76:7b:f1:f1:a6:b4:31:c3:e9:
         2b:73:f8:68:f1:c6:94:66:1b:16:37:9d:75:24:82:26:05:14:
         71:04:6d:bb:3b:f6:bb:45:45:5b:af:e3:cb:f4:8c:84:0a:b3:
         c7:e3:cc:d1:ac:53:5c:8f:dd:5e:07:69:e9:bc:3c:bf:98:a6:
         67:06:3c:9a:1a:b2:3f:c2:d4:bc:4e:5c:13:91:99:2c:b6:be:
         74:d4:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:32 2026 by rpki-client