Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f/129b0ba8-1ccb-3bb9-ac68-a53123df7122.roa
File:                     129b0ba8-1ccb-3bb9-ac68-a53123df7122.roa (raw, json)
Hash identifier:          lM0GJhUuV5eFdVRs7s62BvfREBD5LxRQ5Ivgp5xLlA4=
Subject key identifier:   F3:CA:31:55:3F:B8:56:13:B3:30:89:4E:E1:4E:60:95:5B:A0:87:8A
Certificate issuer:       /CN=ac04b244-7209-4aef-b722-541e5f0e790f
Certificate serial:       010D0C9F4328584E81B32818EA21F9D592E40980
Authority key identifier: 79:88:69:6E:C3:F3:88:32:9C:26:39:73:D7:6F:0F:1D:5F:77:E4:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f/129b0ba8-1ccb-3bb9-ac68-a53123df7122.roa
Signing time:             Wed 15 Jul 2026 11:48:46 +0000
ROA not before:           Wed 15 Jul 2026 11:48:46 +0000
ROA not after:            Tue 13 Oct 2026 11:48:46 +0000
asID:                     16509
IP address blocks:        2620:59:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f/ac04b244-7209-4aef-b722-541e5f0e790f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f/ac04b244-7209-4aef-b722-541e5f0e790f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:b3:28:18:ea:21:f9:d5:92:e4:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac04b244-7209-4aef-b722-541e5f0e790f
        Validity
            Not Before: Jul 15 11:48:46 2026 GMT
            Not After : Oct 13 11:48:46 2026 GMT
        Subject: CN=85be1dea-c67b-4ae1-afa5-f398afc23c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:54:83:7d:67:e7:0c:2e:57:e1:47:26:cd:
                    51:c9:30:d0:0b:bf:ed:d9:f8:b0:e8:96:aa:26:e8:
                    e6:aa:d6:1b:6f:8c:f0:89:66:8b:a5:f7:53:11:7f:
                    f1:87:d1:76:90:8c:c2:c0:c2:c9:b4:b2:98:4f:fb:
                    fc:65:db:c1:9b:35:41:2b:61:7f:81:ee:99:21:04:
                    7d:c8:46:f3:57:7b:e0:53:0f:d1:ef:11:aa:cd:3f:
                    c7:6c:6b:1a:b3:c9:56:4c:9c:6a:5d:40:ff:21:1e:
                    67:6a:f4:25:4e:2d:d5:b9:19:61:a6:f4:65:3a:26:
                    7b:37:2b:e1:a1:a7:85:95:91:13:d0:ed:4c:6d:41:
                    0c:1e:cd:a0:e7:c7:2d:63:94:a4:ff:ec:00:2f:de:
                    44:eb:fb:fc:cb:28:95:96:37:7c:5d:3d:c6:cf:3e:
                    c8:6c:f7:8b:e0:c4:d5:ef:e0:2d:cd:a0:61:4e:cc:
                    b6:a1:81:81:4c:68:fb:cc:ca:19:3b:67:ed:f4:80:
                    cf:7c:59:d2:5e:8e:ad:e1:f7:67:f2:14:59:3f:15:
                    b7:f1:e6:de:1a:63:3d:87:ae:54:c2:f4:cf:db:88:
                    29:6a:82:e8:d5:3d:90:28:d9:97:b1:01:fe:2a:70:
                    ca:ba:a6:8b:30:25:15:26:f7:1b:96:50:be:1f:60:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CA:31:55:3F:B8:56:13:B3:30:89:4E:E1:4E:60:95:5B:A0:87:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f/129b0ba8-1ccb-3bb9-ac68-a53123df7122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f/ac04b244-7209-4aef-b722-541e5f0e790f.crl

            X509v3 Authority Key Identifier:
                keyid:79:88:69:6E:C3:F3:88:32:9C:26:39:73:D7:6F:0F:1D:5F:77:E4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac04b244-7209-4aef-b722-541e5f0e790f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:59:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0b:94:ce:43:45:f5:bc:d0:4d:ec:24:e9:47:07:56:1c:c3:
         98:0c:05:a5:c9:40:bd:04:df:65:cb:72:92:37:0f:76:fc:f8:
         b1:09:ea:fe:db:0a:7d:bd:68:1c:fa:3e:5c:3e:65:13:69:cb:
         c7:51:1c:12:6c:75:8b:41:7e:61:73:e8:2a:7e:9e:86:e0:a0:
         55:4f:b1:b0:bc:59:42:3d:56:24:89:56:a3:66:de:53:02:7f:
         91:89:08:4c:ae:e5:61:09:8d:f2:25:c3:19:7c:e4:e8:fb:2a:
         d8:f4:27:83:42:0c:dc:58:51:f6:f0:a8:9d:07:5a:05:c3:c7:
         4d:47:61:64:8f:1f:0f:41:12:f0:68:a8:64:4d:ea:ff:58:b0:
         3c:ca:e9:64:5c:ea:87:0f:58:62:c2:36:2b:2e:87:71:7b:67:
         32:62:57:5c:fc:af:4e:ff:5f:a1:d2:94:8c:3c:bb:56:58:b4:
         7e:ef:76:4f:4f:b8:09:b0:b9:25:07:42:77:ed:e0:87:fa:da:
         72:74:bb:6d:7b:34:4c:26:89:60:02:f7:06:30:01:b5:1f:42:
         c2:48:e8:c9:cf:f8:f5:d4:56:b3:1e:b8:15:8f:34:93:0c:e5:
         f7:24:69:d7:cc:08:d4:da:5b:7b:b4:09:e3:7b:58:75:00:81:
         50:97:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:27 2026 by rpki-client