Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa
File:                     064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa (raw, json)
Hash identifier:          QSidDuAMBVKfIr2dKX4DaabH0fiPzwNWWaoSnDXAJqs=
Subject key identifier:   50:AE:89:6E:97:86:F3:7F:95:7B:FE:48:95:B9:43:EC:EF:AD:1A:8D
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584E428F21EE2F2BAC8BF1B9C260
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     5400
IP address blocks:        2606:f100:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:21:ee:2f:2b:ac:8b:f1:b9:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=d53695d9-ae58-4e94-9fc1-5fff99089620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:ad:cd:bb:ab:e7:cb:7e:1c:4d:c2:1b:05:
                    15:e9:26:a1:90:2e:9e:98:9d:08:04:2a:44:ff:f0:
                    bf:10:91:64:3d:0c:7e:bd:69:ea:0d:97:2d:71:38:
                    93:3a:61:e4:b0:a5:8f:69:43:4a:ce:e4:cb:7d:3c:
                    75:f1:17:51:34:40:b3:6b:03:4e:31:1a:03:6b:b2:
                    5f:89:64:0c:8b:cb:15:c7:b7:03:cb:ae:ff:fd:1e:
                    f5:3a:17:3a:ad:b3:26:28:6d:af:40:65:c3:ee:dd:
                    13:6a:13:3b:71:18:05:49:bd:b8:b8:76:a2:9d:a9:
                    63:a6:ca:bd:4b:f4:50:fd:22:a5:70:b6:c5:ae:39:
                    45:5c:3e:71:40:31:f2:eb:14:d3:86:2f:c7:fd:f4:
                    af:e5:1d:04:7b:2b:7e:11:d8:d7:68:56:0e:08:88:
                    5f:16:83:de:99:69:8b:a0:7d:6f:cb:ec:65:88:12:
                    a7:6b:1c:25:b1:8c:40:b5:6c:0c:53:ea:6d:f5:3a:
                    4c:81:25:d6:7d:71:45:1b:1f:70:c2:83:01:28:37:
                    96:a9:7d:46:8a:09:03:a4:92:60:cc:6d:ff:d7:09:
                    d2:73:4d:cb:9b:ab:2a:57:56:65:8b:ac:a5:b8:4f:
                    66:40:b1:da:3d:0f:57:d9:01:de:2c:ea:fd:b7:37:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:89:6E:97:86:F3:7F:95:7B:FE:48:95:B9:43:EC:EF:AD:1A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:72:e2:c2:e3:46:ea:52:7c:c9:f5:80:1a:dd:9d:31:86:2c:
         ab:d1:d4:50:1c:81:5b:0b:7c:96:73:09:89:f3:37:f2:41:d0:
         d2:b9:8f:97:87:e0:85:92:75:2e:40:a8:50:05:fa:f0:b5:e6:
         0d:c1:6d:fd:0d:27:89:39:d8:18:b1:f0:39:74:80:b4:94:ba:
         60:cf:85:24:b8:e5:a4:95:0f:f0:84:44:65:96:1a:4a:e8:69:
         d5:a9:7f:16:cf:44:ff:49:a8:5d:1b:8b:34:5e:11:42:ac:d8:
         a9:13:7c:38:c3:e2:77:58:cb:6f:22:c3:89:44:39:e4:80:89:
         30:24:18:b7:b7:7e:29:0f:9d:bb:18:be:c6:d0:b1:82:a4:da:
         6c:75:34:05:07:e8:45:3e:b6:12:33:30:35:ef:8a:3a:ac:71:
         4b:94:07:97:b0:5d:05:2b:5b:50:9b:56:ee:c1:75:4b:68:74:
         d9:cf:5d:cc:f1:8c:40:37:83:29:0b:12:fa:61:8a:2d:05:61:
         a9:49:0c:aa:83:4a:5d:25:fc:e2:36:bc:67:20:5b:9c:bb:0e:
         2b:5d:28:37:52:90:00:a3:15:e4:fe:fc:16:49:fb:6b:a8:86:
         90:c1:99:48:fc:70:56:45:ad:5d:cd:5c:2f:fa:28:21:07:79:
         01:31:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:12:49 2026 by rpki-client