Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/6ef0a4b9-bf91-3069-9597-debcf957aed7.roa
File:                     6ef0a4b9-bf91-3069-9597-debcf957aed7.roa (raw, json)
Hash identifier:          dLnLOLAyKGQy5FQvNzmvAIrbRKwkywfZjkB/oOA8m0A=
Subject key identifier:   31:CB:DE:A4:39:5E:33:D8:6C:1D:41:D5:3E:EE:2D:F7:99:02:17:0A
Certificate issuer:       /CN=53a14809-fd74-4e50-a827-e921f11ef1a2
Certificate serial:       010D0C9F4328584DCC606DA6C7F988746A863EC0
Authority key identifier: 06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/6ef0a4b9-bf91-3069-9597-debcf957aed7.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     35962
IP address blocks:        2604:f4c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6d:a6:c7:f9:88:74:6a:86:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a14809-fd74-4e50-a827-e921f11ef1a2
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=4f1937dd-ca3c-426a-b534-c6e6d1016add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:91:ce:f5:f5:4b:9b:9a:1a:8d:cd:0e:af:
                    a3:14:ef:2b:58:cf:f1:92:ce:f4:61:09:8f:56:f5:
                    5a:b6:c6:bb:2e:8c:e9:77:75:2a:fe:3c:c2:08:af:
                    7d:70:c3:66:cd:f0:5f:6b:d9:fe:f4:fe:62:db:e8:
                    ec:d8:3e:29:38:af:3b:4f:c8:db:dd:de:83:3c:2f:
                    62:86:b4:cf:3c:f6:d2:ee:cb:85:07:ac:26:04:7a:
                    c1:ea:ef:c9:38:9b:af:5d:11:42:87:88:cb:3f:c8:
                    5c:a8:96:c6:bc:41:2a:c0:d1:fb:59:a6:c6:ff:5a:
                    0e:49:28:9a:96:9d:77:5e:8a:23:24:0a:d2:59:3b:
                    7f:5e:f0:17:5c:ae:84:0c:0a:90:67:d2:e5:f5:5d:
                    f3:3c:41:f0:86:f1:fc:06:e4:4a:7c:67:17:73:a6:
                    93:9c:da:b2:f5:6d:91:da:63:b3:87:83:fe:9c:f3:
                    14:43:cb:15:b3:8e:fc:e1:86:ad:d4:42:68:b0:e7:
                    56:0f:ec:89:ad:18:bc:09:97:fa:0d:c2:32:14:4a:
                    42:ba:0e:16:21:36:e3:74:c8:76:c5:ce:86:59:98:
                    ce:95:66:2b:9f:3c:7e:c2:3f:cc:41:8f:7e:69:5e:
                    9d:a5:df:00:13:34:da:15:e0:19:46:4c:c2:56:50:
                    0d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:DE:A4:39:5E:33:D8:6C:1D:41:D5:3E:EE:2D:F7:99:02:17:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/6ef0a4b9-bf91-3069-9597-debcf957aed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.crl

            X509v3 Authority Key Identifier:
                keyid:06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:e4:a1:37:fe:f8:bc:ec:b2:ac:96:42:25:1e:78:3f:c4:b1:
         34:d6:3e:05:9e:9f:9e:8e:52:d8:5c:cd:27:6d:88:7e:df:8b:
         d8:49:6a:ae:bf:7c:d4:86:e2:69:39:ea:99:9a:fd:ca:14:44:
         bb:1a:2c:a8:ca:17:66:73:cd:1f:77:3a:ea:ed:8b:11:fb:83:
         13:71:d2:00:30:51:58:ac:1b:88:2c:2b:86:3b:01:2f:2e:28:
         47:1f:7a:b2:fa:8e:f8:38:f9:d3:e2:55:b3:0b:56:f1:b4:70:
         7a:5d:03:98:5e:2d:dc:bb:42:c0:f2:a2:e2:34:11:88:5f:54:
         37:30:0a:89:f8:c1:b3:e3:92:c6:81:d3:22:b5:04:3b:37:c3:
         3c:92:d2:3f:1c:ae:e2:e8:1e:6a:d6:7e:07:1b:4c:8c:d4:48:
         f7:fa:19:8a:f5:59:e1:6d:56:53:56:22:6a:fa:ee:b7:66:7b:
         dd:9f:6f:cd:82:43:7e:5e:26:8a:63:3a:95:36:99:ff:28:ab:
         e5:99:54:7d:c7:f9:28:a5:d2:37:a7:ab:86:6f:a7:44:0e:c4:
         ef:b2:d9:62:b2:6d:ec:1a:4d:9f:98:bc:25:67:6d:7a:1d:c5:
         06:3d:6d:c2:04:8a:61:11:30:16:de:1f:d6:ca:35:7a:57:c9:
         66:fc:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:59 2026 by rpki-client