Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/06428e3c-5113-3803-9d85-2f26395b0d1e.roa
File:                     06428e3c-5113-3803-9d85-2f26395b0d1e.roa (raw, json)
Hash identifier:          Ks7PF+u0cpbtrk2BoEtyGnZkjlNwl9apeGL9PmRcEJg=
Subject key identifier:   8A:13:35:1B:7A:1C:5B:7B:BB:02:16:C9:DE:7D:E0:95:4E:B0:12:16
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584DBD05A265D0382AEFD4044400
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/06428e3c-5113-3803-9d85-2f26395b0d1e.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     61112
IP address blocks:        2602:fa4f:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a2:65:d0:38:2a:ef:d4:04:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=4f7f4899-a8f3-4e59-8249-b88db4cf68b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:a5:bc:22:af:cd:24:6d:2b:c2:7a:97:0f:
                    4e:00:8a:3c:5c:c2:c2:ae:ce:3f:72:ca:20:e8:a1:
                    16:bf:28:05:58:7c:59:f2:e7:a1:1a:49:5e:46:dc:
                    6c:3c:26:84:c3:42:77:cc:94:5c:47:54:ea:88:83:
                    b0:0a:b6:fd:11:3e:c8:49:26:07:f6:7e:1e:8e:bc:
                    82:6f:63:3b:2c:c2:6a:d1:5a:96:cb:d3:87:d4:19:
                    0f:48:42:f7:73:11:bb:49:6b:7e:7c:88:b5:3e:30:
                    6f:1b:61:de:9e:0a:9f:16:0f:d8:ad:60:ad:26:31:
                    54:2e:ba:2a:f5:6f:f4:f7:09:23:57:6f:0f:ac:dd:
                    ea:e9:f6:2f:dd:0a:4b:f5:13:c5:95:5b:a0:f5:8c:
                    61:59:19:c2:8a:a4:53:5b:e5:ba:f4:7f:b1:ea:a1:
                    02:31:a1:d2:6a:6b:7d:bc:24:2e:dc:72:7e:4c:62:
                    87:96:63:3a:95:c1:5a:4d:95:0a:a8:3a:9b:2f:eb:
                    70:60:55:3b:96:25:4c:53:ef:64:02:ab:a3:a6:59:
                    50:b9:e0:4c:0c:71:42:82:10:32:ff:e7:a7:99:04:
                    c5:5e:5e:c7:a4:7d:c7:ea:a0:49:ef:7a:54:ff:66:
                    2d:37:c7:f0:17:b2:42:32:0d:d0:36:db:ea:09:cb:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:13:35:1B:7A:1C:5B:7B:BB:02:16:C9:DE:7D:E0:95:4E:B0:12:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/06428e3c-5113-3803-9d85-2f26395b0d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:f4:dc:ac:74:4d:47:68:26:e1:3e:37:da:08:85:c0:76:
         3e:a7:97:1c:91:f4:bc:f9:eb:66:fe:3b:10:86:a4:61:9a:c3:
         03:bd:cf:fe:dc:16:5c:70:f1:0f:01:fb:22:46:80:22:ae:42:
         55:16:d8:a0:19:f2:73:97:ca:48:d5:16:b2:09:30:b3:a2:bf:
         86:86:a7:76:28:2e:54:29:55:1e:b2:67:68:23:79:9b:ef:9c:
         be:c2:55:76:f8:6a:dc:66:a1:f8:5c:92:1b:4f:5c:a7:b6:45:
         85:3d:e0:9e:d3:e2:db:b2:ab:80:1b:31:65:11:d8:e6:32:8c:
         45:e2:c1:c1:07:c2:69:3c:47:8e:10:a2:10:65:3e:c0:01:37:
         ab:55:43:1b:53:01:bc:2d:18:d5:24:f2:ff:85:dd:2b:37:32:
         3b:7f:b7:f8:97:74:62:31:d0:28:ca:7a:fa:95:f1:41:54:7a:
         4e:64:b2:f0:1b:75:fa:c8:d7:3e:4e:d1:ba:d1:50:56:f7:e1:
         2d:43:42:26:93:79:79:c5:5f:8f:09:91:78:5e:12:0d:f3:9e:
         05:e9:46:30:a2:8a:4f:f3:35:1a:a1:55:95:db:5f:8d:4e:73:
         83:32:35:ec:47:80:40:67:6d:30:9d:93:68:4d:5d:51:16:00:
         d7:c4:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:56 2026 by rpki-client