Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa
File:                     433031db-4285-39e5-accd-f6fb29f9770e.roa (raw, json)
Hash identifier:          c0NbH84KbslTpSiHrIHZCD8uWBIx3teFICWOlRcT8JY=
Subject key identifier:   D2:50:D0:DC:53:D2:F6:40:35:7F:7D:C0:99:38:67:BA:CE:E8:F3:AC
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584DC6CAFCB0B98479925EC81E60
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1064::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:fc:b0:b9:84:79:92:5e:c8:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=bdc32ce7-ad1a-40eb-b93d-194e9f92a2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:16:5c:79:4e:7c:15:3a:94:4f:55:1b:c0:
                    eb:ba:51:73:37:3f:27:db:6d:e7:00:36:d8:3b:39:
                    9d:8c:16:6d:76:37:f7:fb:ae:f3:3a:c9:ef:52:be:
                    39:13:72:0f:1c:7c:f6:60:3a:09:de:4e:bc:17:b5:
                    ca:ef:4d:b2:5b:e9:c6:b0:e4:9d:16:2e:8e:e9:3e:
                    98:1a:95:3e:5c:99:92:c4:8e:99:f3:0c:52:7b:80:
                    04:f8:7a:e3:6c:17:af:fe:b0:12:3c:ec:1a:78:2d:
                    2b:38:70:76:40:ff:ae:c3:b1:28:4f:ca:40:65:a7:
                    d7:a4:55:77:30:99:2c:3a:e4:49:0b:1c:01:54:e0:
                    72:c7:0e:dc:66:be:61:a1:93:f2:65:89:ab:57:04:
                    c1:48:0c:d9:55:1d:a8:e5:55:75:ef:9d:18:0f:4a:
                    21:40:f8:4c:b1:59:7a:2d:22:82:28:0c:9d:c8:5f:
                    d3:08:8b:71:2d:9c:47:64:46:e7:3b:a8:b0:7e:0a:
                    38:9f:68:bd:dd:ec:3d:e8:de:94:7d:85:52:8a:7c:
                    ab:a6:68:df:53:d3:a2:39:14:1f:53:ac:8d:c0:71:
                    ea:bc:1e:0a:bc:0c:7d:96:aa:c3:af:27:59:dc:eb:
                    3d:f0:4a:83:cd:bf:73:ff:b3:ae:1a:f0:bf:c4:22:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:50:D0:DC:53:D2:F6:40:35:7F:7D:C0:99:38:67:BA:CE:E8:F3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1064::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:ff:28:35:54:86:ac:be:42:b7:ac:af:d0:d1:2f:ce:3b:
         71:82:eb:07:2d:75:b7:90:20:4f:80:5d:f0:0d:50:2f:4b:be:
         ed:64:cd:4b:19:ee:bd:89:3a:e6:25:3d:68:7f:a5:dc:55:04:
         3d:02:91:f6:66:3f:a1:32:13:ff:93:16:da:8c:b8:a7:b5:07:
         30:7f:43:21:9a:de:cd:72:23:cb:bc:1d:6d:b5:26:29:56:13:
         ee:c7:6a:5f:cf:88:9b:12:a3:0f:0b:b2:d5:4b:fe:ba:6f:d1:
         3a:7b:a3:e4:32:22:48:d5:dc:71:d7:e7:4e:93:a8:dc:74:17:
         85:38:f2:02:11:a8:f0:10:45:e9:cf:ab:46:26:e4:c8:91:79:
         9b:8c:35:2e:00:1c:2a:0c:5d:94:e9:5f:7a:95:d7:ce:49:01:
         f6:f9:b2:d6:d6:a7:32:ba:d9:0b:fc:42:46:6b:8e:ad:18:6a:
         10:bc:63:76:75:f9:f1:a7:dd:35:97:0a:fe:41:eb:47:f0:1c:
         d3:90:4f:4e:62:69:87:a4:bd:33:99:19:92:1d:05:19:c7:61:
         5d:2f:8b:70:e2:1b:d5:78:7b:49:75:dc:13:df:17:43:19:13:
         fb:e5:d0:4a:20:44:92:80:4b:1d:c9:c1:15:82:a7:40:59:7f:
         47:91:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:45 2026 by rpki-client