Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/4f4cdd01-db7f-30e3-aa20-96be1b9affb3.roa
File:                     4f4cdd01-db7f-30e3-aa20-96be1b9affb3.roa (raw, json)
Hash identifier:          jWTiVtN7ZU1kloOFQrVUtvGIW0Qg1fTACGC4XnGxjlU=
Subject key identifier:   8C:35:56:AE:5A:70:C7:3F:3A:21:C8:85:FB:41:C9:E6:D0:2B:AE:6D
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F4328584E561A15205FE629D3C793BA80
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/4f4cdd01-db7f-30e3-aa20-96be1b9affb3.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     8987
IP address blocks:        2605:c540:8c00::/42 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:15:20:5f:e6:29:d3:c7:93:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=5649d44e-3584-47be-b264-e23c8eb0d28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:e7:84:1e:01:a6:66:fe:f3:eb:71:cc:5e:
                    dd:f0:66:dd:b8:23:df:e4:c7:73:bb:d4:4f:1a:5c:
                    26:e0:20:82:aa:0a:15:fa:e0:45:ce:4e:0d:0b:67:
                    57:ad:e0:d1:62:1e:69:f3:02:3e:4a:a1:5c:4e:ab:
                    fe:f8:91:43:26:b9:eb:3e:76:be:2b:a3:58:44:72:
                    18:df:2d:15:01:1c:35:ad:a0:dc:95:45:e0:02:20:
                    60:5c:89:8d:7c:51:4c:24:38:a7:b8:b3:1e:cf:97:
                    39:91:96:5d:70:d8:07:13:6f:58:77:c5:19:97:3b:
                    4f:5c:1d:ea:e7:d5:9e:a6:35:02:66:71:4b:63:26:
                    3f:79:d9:19:0f:db:98:b2:77:b5:c3:e5:ab:51:85:
                    7c:46:b3:4a:eb:6d:9b:cb:06:a0:c7:f6:6b:e3:aa:
                    f9:7c:e2:5c:8c:fa:28:03:f3:be:70:fd:3e:28:0b:
                    92:c3:80:8b:99:35:8b:b9:c4:98:4d:24:e2:37:a8:
                    c2:ef:3f:20:42:2c:7e:49:11:81:46:16:36:09:76:
                    86:ed:a9:ef:fe:aa:d2:18:1b:3e:17:a2:ff:2d:44:
                    99:66:9e:24:a9:05:a0:3d:14:5d:f4:b3:bb:77:2a:
                    80:bd:16:12:ee:af:f1:b5:fa:95:ee:2f:60:5e:9b:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:56:AE:5A:70:C7:3F:3A:21:C8:85:FB:41:C9:E6:D0:2B:AE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/4f4cdd01-db7f-30e3-aa20-96be1b9affb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c540:8c00::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:51:d7:88:3d:8c:30:4d:ea:59:a4:3a:4e:b2:57:a2:2b:d9:
         9a:25:a0:48:59:40:6f:6c:f0:2a:9c:00:17:5a:81:75:f3:d6:
         28:31:8d:ab:8a:d3:69:8c:f7:94:4b:e1:5f:75:3f:06:af:5f:
         12:ab:90:25:5c:fc:61:3c:c5:45:39:b7:a9:b8:e8:38:6e:4d:
         48:6f:19:2e:22:7b:1b:16:ca:c4:72:ef:1c:9a:1a:cd:c6:61:
         cb:34:0d:24:b7:ca:8e:b9:eb:13:3f:f3:d0:06:f2:d2:43:97:
         54:7b:d9:a6:e3:11:46:4f:2e:88:2c:75:ee:a8:b9:6e:7b:00:
         16:b8:b1:92:a4:e3:48:e9:7f:ba:e1:fe:4a:ed:88:4b:1f:e3:
         0e:b8:a0:53:6b:04:fa:4f:d4:d3:00:71:8d:5d:f2:45:89:7f:
         57:27:1c:b6:4a:4d:a2:43:0f:c0:81:37:6b:e2:12:ee:63:ed:
         5c:47:fd:c8:10:cb:07:81:13:19:d2:7b:d8:4a:63:51:7a:5e:
         bc:8e:39:93:00:df:22:8d:d2:1e:c2:de:1a:0d:c3:10:b7:f6:
         cb:43:00:96:4b:f2:d3:3f:51:45:79:2d:c5:45:e9:ad:92:2a:
         49:89:f4:8d:80:d2:9f:c6:d9:c0:62:15:02:2d:d3:1e:f6:1c:
         85:c5:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:08 2026 by rpki-client