Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa
File:                     68250aec-f861-319d-ba5b-6553bba87e15.roa (raw, json)
Hash identifier:          dFWs6yGxv61oWetWw0OahSvIjmpe3OKiE+nOcylaH6g=
Subject key identifier:   ED:2A:63:5C:2C:ED:75:DB:A1:73:A9:89:D7:24:8F:D9:29:DE:0A:49
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584DC135C513E622833182DCC200
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     19229
IP address blocks:        2607:2e00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c5:13:e6:22:83:31:82:dc:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=d67d1258-09f7-4350-8ea2-a05127428afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:62:c3:00:16:d2:62:76:32:3e:fe:84:09:
                    c0:54:10:50:6a:e6:4d:43:3a:05:20:00:45:87:16:
                    b6:bf:8a:2a:25:dd:69:47:2a:76:8f:fa:69:08:3a:
                    e1:cc:3f:f0:a9:16:0f:29:96:95:38:69:54:36:19:
                    e7:b1:e1:3c:b7:84:3a:26:c0:06:44:ca:6e:6e:38:
                    b4:8a:dd:73:ed:df:73:78:88:9a:a4:14:d1:f6:a8:
                    8e:74:6c:52:b9:93:51:c0:6d:fe:69:67:30:ea:c8:
                    9f:7f:9a:92:cf:76:97:e5:b6:1f:c6:16:dc:4d:40:
                    28:07:64:03:9b:a2:94:df:52:22:3f:26:49:ae:ed:
                    84:2b:85:4a:29:9f:2e:cd:52:c8:68:c5:e4:f8:82:
                    b7:fa:0d:c3:fb:ce:3b:50:b2:13:d1:3f:a4:d8:f5:
                    b9:43:05:67:0c:4c:67:0e:c8:57:5e:03:90:b2:be:
                    c2:4b:47:bd:86:05:65:b3:7c:2b:1b:68:45:7d:3d:
                    ef:9b:a7:91:62:21:53:83:ce:8f:40:7a:3e:12:4f:
                    2e:c4:dc:00:f1:6b:b9:ab:75:48:41:03:be:60:22:
                    5d:1d:9f:b1:3b:17:0f:0f:a4:a4:b1:8a:54:94:2a:
                    40:15:63:7d:ba:39:99:5f:23:35:7a:fb:31:25:c3:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2A:63:5C:2C:ED:75:DB:A1:73:A9:89:D7:24:8F:D9:29:DE:0A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:18:12:07:eb:48:ce:25:ce:7d:cf:54:80:b7:c1:5b:62:
         3c:cd:bd:18:17:e1:6b:95:6b:fd:54:f7:a1:22:75:9a:0e:9c:
         9b:2d:31:97:ac:06:ae:dc:f3:b8:71:9a:2c:db:84:5d:e1:cc:
         cb:ec:04:0e:d3:c2:07:14:6f:e2:4e:2f:f6:8b:45:a4:06:3a:
         ba:6b:48:9e:9e:4e:71:7d:5e:3c:d1:27:f4:db:4d:15:27:4a:
         d4:81:72:b2:0f:e6:1c:8d:55:4e:92:0f:b5:7d:a8:9c:40:2f:
         1b:de:d8:6b:e2:2a:23:0c:f0:64:f2:4e:ca:e1:22:5c:20:23:
         ce:f9:45:be:a0:ed:d3:7f:b6:0b:23:48:35:66:63:b5:3b:a9:
         74:d7:04:f5:82:bf:ad:71:70:bc:dd:91:81:42:aa:f0:4c:3c:
         ed:f3:ac:c1:65:cc:72:43:7b:7f:8b:83:71:d5:94:ce:e4:26:
         a7:2f:d5:5a:e0:41:98:42:6a:9f:e1:6a:1d:fe:38:d3:3e:47:
         4a:90:7c:99:e7:67:7b:4d:24:e2:e6:60:0e:c8:fe:94:7a:5a:
         d6:0d:68:bc:07:52:10:f1:34:c4:49:a0:b0:10:0d:7a:4c:f8:
         6b:2c:3b:ad:a3:08:f9:56:59:da:08:5f:ec:e5:47:8c:b2:8e:
         c5:79:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:58 2026 by rpki-client