Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa
File:                     df598e26-10ec-3155-9d2d-35a5a76f7e84.roa (raw, json)
Hash identifier:          WlpZQkAV2NQ/MwCDn9oYqbplpMM0cpQgC6Oif+tnjr4=
Subject key identifier:   32:C6:F2:E1:19:66:BC:50:E2:11:21:A0:7D:E0:A4:30:1D:DE:62:4C
Certificate issuer:       /CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
Certificate serial:       010D0C9F4328584E3764792DBFA0C4DC6DA0D040
Authority key identifier: 51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     3152
IP address blocks:        2620:6a::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:79:2d:bf:a0:c4:dc:6d:a0:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=79578e9f-3f2c-40d9-88b7-f5a94278b19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:7c:e3:cf:c7:c8:cc:35:89:af:d2:c6:a4:
                    fa:7c:41:14:9a:ab:1a:85:8e:52:c4:88:be:a8:26:
                    3c:99:75:2d:bc:44:cf:ae:9a:85:32:fa:6a:53:77:
                    83:0d:62:44:14:cf:6d:24:05:d3:6f:e2:53:a6:e5:
                    58:ec:ad:32:4d:3c:9b:fe:8e:c5:ae:3c:19:01:f4:
                    0f:3f:9b:e2:7c:fb:ea:b0:40:a3:ee:fa:4f:c8:1f:
                    4b:b2:ce:2c:6b:03:3c:b3:29:98:ae:43:8e:b7:32:
                    ce:7e:a1:bb:b9:72:e6:f1:0c:d5:ea:b5:18:ef:5b:
                    43:97:54:76:39:15:35:44:5e:3e:9f:0b:31:75:0f:
                    93:b2:1e:7a:f5:09:d7:9f:e5:4a:ba:f3:58:09:76:
                    c7:5d:c6:3a:d0:ef:35:15:2c:0a:57:97:ec:4a:14:
                    1f:b0:a3:ec:78:7f:d9:e7:e7:8f:62:00:d3:de:fd:
                    c9:52:45:e9:0e:00:6f:c4:09:da:f1:fd:07:03:7b:
                    ac:5f:bc:80:4b:81:43:4e:b8:f0:29:42:12:3e:85:
                    d5:af:fb:73:fd:3b:a5:e4:a4:cd:3c:b0:1e:e6:29:
                    0d:ac:dd:9b:5a:84:b9:45:28:82:e4:cd:a1:2e:38:
                    3a:f0:8b:ab:ed:9a:0a:68:dd:22:a9:57:75:57:34:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:F2:E1:19:66:BC:50:E2:11:21:A0:7D:E0:A4:30:1D:DE:62:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl

            X509v3 Authority Key Identifier:
                keyid:51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6a::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:ae:99:27:4f:28:31:9e:ff:29:be:91:2c:5c:78:64:be:
         fc:39:13:55:d8:82:77:8b:94:fd:7b:cf:bc:6f:24:fa:c5:93:
         6d:f0:be:4a:61:31:bf:48:51:a5:9c:9d:e6:6c:66:cc:c1:e8:
         da:fe:60:b3:08:04:72:3e:de:c2:d3:cd:24:7b:57:6d:12:67:
         c3:23:c9:9e:51:cd:29:20:43:eb:31:08:3f:41:ee:c2:1a:26:
         14:15:77:9d:7c:47:8a:59:9e:72:09:a7:55:83:cd:df:d7:6f:
         45:b9:70:83:94:cb:ae:52:eb:18:19:50:68:4f:c2:48:0f:01:
         9a:7d:b1:75:53:3d:9a:82:73:51:23:65:3f:e4:9a:a8:bd:ae:
         db:ab:2c:ae:62:fc:76:c3:3c:59:ef:4e:6b:cc:94:b7:41:7a:
         21:82:66:f5:0e:f3:77:3f:fa:32:47:96:b6:45:8c:3d:fe:a9:
         7a:39:05:8e:37:26:65:79:d0:dc:7f:ce:28:92:97:9d:d8:49:
         94:58:91:32:c6:f8:f8:16:9c:86:6f:7e:45:0d:b3:9b:d8:53:
         40:40:cb:64:7c:b7:3a:00:63:9f:d6:09:f7:4f:02:e2:c2:5e:
         5c:e0:d7:e7:ce:50:52:e6:ea:92:58:b7:03:8e:4e:af:71:23:
         b3:17:c1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:02 2026 by rpki-client