Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b17d3554-25eb-356e-8d09-78706413ec8b.roa
File:                     b17d3554-25eb-356e-8d09-78706413ec8b.roa (raw, json)
Hash identifier:          8Ku5iB1Jt691HWMhsNqfzOz3RiH1TlBlViXL4dHQSco=
Subject key identifier:   CC:3D:9B:8F:47:C8:40:8F:74:22:6D:98:8F:A7:95:4F:A9:F8:BE:E0
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584DD0906E381E95AC8D74E3F1A0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b17d3554-25eb-356e-8d09-78706413ec8b.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16839
IP address blocks:        2606:3600:1140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:6e:38:1e:95:ac:8d:74:e3:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=70a7a75c-506a-4618-81b0-190bc496709b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:d1:af:2e:6f:6e:71:13:71:b1:dc:17:01:
                    c9:bc:35:9d:d8:8e:62:8c:07:eb:b9:2d:9c:bd:f0:
                    e2:30:be:79:87:8d:0e:b1:fd:ba:12:bb:d1:5c:f6:
                    81:28:46:c0:65:ae:dd:e0:92:e0:90:64:0b:83:40:
                    d8:55:34:03:f1:6b:84:fa:cd:d0:03:fa:bc:cd:cd:
                    2a:9c:4c:d8:92:b8:70:c5:8c:b4:2d:8f:de:f2:43:
                    0c:4d:46:fa:55:12:fb:b9:5f:be:42:f8:cc:52:73:
                    23:1d:49:05:35:2e:1b:3e:3c:80:ad:ae:6d:80:53:
                    b9:16:a9:3a:b7:50:ca:86:48:d1:4a:f2:84:51:be:
                    39:4a:4e:07:99:fb:f1:cd:dd:45:b6:5a:ec:16:0c:
                    40:f8:32:14:b0:d3:9a:55:8b:58:14:04:4c:24:bd:
                    02:9e:d7:2a:d6:63:f9:3e:ee:b4:2c:eb:11:04:d3:
                    07:8c:a9:db:cc:95:b3:c9:39:35:01:5c:84:44:d8:
                    36:f0:be:10:73:89:be:0e:79:35:f7:69:e9:1c:8a:
                    31:5e:71:e1:83:f2:73:93:49:89:bd:4f:81:f3:62:
                    bf:50:b4:a7:e7:6a:b0:31:f4:0b:8a:fd:3a:df:f8:
                    5a:b5:ee:26:fc:33:12:20:d2:d8:d1:fd:d4:83:88:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3D:9B:8F:47:C8:40:8F:74:22:6D:98:8F:A7:95:4F:A9:F8:BE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b17d3554-25eb-356e-8d09-78706413ec8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:1140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:70:79:dc:45:42:ce:ad:b9:1f:08:75:18:82:5d:ad:56:
         01:ce:9a:72:df:d0:9e:8a:38:6c:e0:35:7f:68:cb:f5:ab:fa:
         61:8b:60:dd:9d:de:45:67:ec:16:ed:09:f0:b8:1c:44:a5:3b:
         f3:19:54:39:f7:36:da:9e:16:6b:c3:7d:01:bc:d9:ca:1e:68:
         7b:fd:98:03:89:b6:61:8b:50:54:1b:48:03:69:c6:d6:70:16:
         92:ab:51:67:97:d9:ea:84:1d:14:de:e1:df:4a:26:29:3e:d0:
         06:86:c5:6a:fa:7d:5a:b3:0e:37:a2:92:3f:28:ee:5a:d4:46:
         af:e0:25:6b:80:53:e5:e1:ef:da:20:01:e8:e5:c2:49:7e:ef:
         c7:db:9c:1c:95:fe:43:77:e8:2d:93:9e:b3:35:d5:62:35:e1:
         8c:d8:72:2e:4a:16:1b:36:1f:b2:ae:3c:d2:f6:a4:27:16:59:
         3b:ca:0b:73:2d:8d:91:fa:17:19:d8:50:53:52:15:5e:c9:08:
         91:b0:8f:72:67:76:f2:ab:2b:a5:8f:f6:dd:65:96:4e:e6:36:
         dd:a5:05:e1:7f:6a:da:d3:5a:b5:a8:ab:84:92:1c:0a:dc:78:
         16:8a:5c:50:0b:ec:b6:c2:84:61:7e:39:69:bf:9e:d2:7b:3a:
         c0:16:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:49 2026 by rpki-client