Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa
File:                     a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa (raw, json)
Hash identifier:          aCtnhVW+1sFpi00aGkPfhugubImSttHZrdSqIeN+AsA=
Subject key identifier:   BD:C1:98:84:24:91:55:23:F4:F6:E9:F1:5B:31:B5:AC:75:06:19:EE
Certificate issuer:       /CN=60e6a30d-f63a-493d-8227-28d94c142383
Certificate serial:       010D0C9F4328584DA6B00CF289106FD7DC0AC800
Authority key identifier: 3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     19163
IP address blocks:        2607:b340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0c:f2:89:10:6f:d7:dc:0a:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e6a30d-f63a-493d-8227-28d94c142383
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=3025f64b-f628-4f9e-9535-8e28b1d355cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:a7:22:db:b4:94:1b:81:c5:55:b6:63:df:
                    f3:8b:b6:b2:5c:f0:6a:45:05:86:d7:b3:a4:c0:99:
                    f2:b7:08:8d:48:e2:8a:99:a6:59:ed:2c:35:4b:d3:
                    4a:ec:8e:2a:17:c5:b3:63:9d:c8:a0:e6:c8:89:6b:
                    d3:35:8f:22:cb:6b:33:ac:61:ba:6d:80:ac:5e:8a:
                    08:80:70:f6:e8:d3:d6:80:d4:8e:3e:20:34:81:b2:
                    fb:b5:80:d5:3d:58:33:62:2a:ce:16:93:e6:c4:6a:
                    37:92:3a:eb:d3:cd:2d:e3:99:20:9f:c5:09:75:43:
                    03:b1:79:21:03:80:fb:07:2c:d3:6c:38:c7:da:3b:
                    b2:c9:0b:45:25:7d:7b:4b:e7:5e:13:54:ff:ab:ac:
                    2b:3f:fe:c6:cb:87:3f:3c:f5:b7:e2:03:c8:f9:18:
                    13:9e:9d:72:34:46:7d:1f:fb:6a:bc:4a:97:25:22:
                    da:4c:90:c8:56:8a:76:9b:06:9f:e5:5a:1f:a5:bb:
                    fa:7e:53:d7:6d:40:bd:17:b8:47:39:14:7a:20:63:
                    2d:4c:81:d2:01:7f:5c:f9:c3:61:fa:0e:6a:d2:23:
                    13:11:bf:66:aa:1f:62:75:86:69:de:28:63:d8:9f:
                    2e:d4:a5:be:aa:84:c7:d2:d9:6a:d5:87:6b:86:45:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C1:98:84:24:91:55:23:F4:F6:E9:F1:5B:31:B5:AC:75:06:19:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl

            X509v3 Authority Key Identifier:
                keyid:3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:cb:b3:0a:66:3f:e8:3b:66:fc:3a:70:de:23:5f:1f:1d:81:
         12:02:2b:1a:57:87:bf:42:79:8b:9f:ea:2f:2c:5b:d4:47:09:
         9a:d2:a0:5c:38:c6:ad:53:b5:2f:d9:5a:75:e8:4d:41:38:2c:
         c1:d7:26:f2:6f:34:ed:11:3b:d4:8b:09:c0:32:9c:0d:fc:95:
         f9:f1:53:82:56:21:d3:9c:74:87:50:35:7c:c2:dc:52:85:2e:
         eb:29:8c:a3:cb:b0:40:4b:30:9a:e1:3e:ca:c6:b5:47:7a:88:
         46:3d:a2:c8:3c:84:29:d9:d7:70:b3:82:21:b9:5e:2c:e4:39:
         23:d2:56:58:f2:af:8a:7b:00:3e:25:19:aa:87:d4:84:85:a7:
         95:4d:62:eb:0e:57:b9:b7:54:ca:83:0f:83:0d:a9:76:d3:e7:
         59:ed:a8:b8:31:97:e4:c4:96:a4:dd:71:bb:da:e5:6d:d8:23:
         b2:c4:8c:50:c5:01:1a:47:04:1b:db:1e:84:2f:35:e1:82:30:
         e2:42:f7:e0:14:dc:3e:69:4a:d8:4b:37:98:ce:4a:21:0e:26:
         1d:f1:bd:25:d8:a8:94:dd:e2:5e:9e:94:bd:de:18:6a:a0:28:
         7f:02:5d:8a:0f:bd:72:d6:3f:7b:73:e9:c6:e7:15:fd:f7:26:
         58:0e:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:04:42 2026 by rpki-client