Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa
File:                     fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa (raw, json)
Hash identifier:          enea/HWygQKbssRLgoRTLR3ISTvv6O0oN9CzgNuV2KQ=
Subject key identifier:   4F:EC:B5:10:4F:E4:8A:1B:5B:53:BB:AB:F9:32:A6:B3:B5:3E:18:4B
Certificate issuer:       /CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39
Certificate serial:       010D0C9F4328584E3FC47A3F21950C8BFE6C7E80
Authority key identifier: 28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     395260
IP address blocks:        2606:9bc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:7a:3f:21:95:0c:8b:fe:6c:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=ba734b8a-9e18-4246-bc7d-3019bef23bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:42:6b:b5:2e:9b:b3:3e:ba:2a:3a:6e:ba:ee:
                    a1:d2:5c:a5:78:5f:47:77:06:56:91:58:b9:48:3d:
                    58:94:d5:46:32:73:0a:de:f1:db:ed:57:de:1e:27:
                    df:6c:99:34:14:c0:13:28:0a:15:ca:4e:b1:8b:01:
                    64:fa:a5:25:a9:3e:ac:cf:91:a8:74:ad:f6:3b:a7:
                    36:4b:fa:64:ce:c5:56:da:5c:c7:4d:86:57:e5:84:
                    a8:c8:3b:6d:cf:d5:71:77:b4:cc:2a:66:32:33:2e:
                    9c:49:4d:1b:f8:6b:bd:12:2f:f4:18:17:e8:ed:f5:
                    83:60:c0:dc:d7:cd:b0:cf:23:b5:14:7d:2e:0d:18:
                    76:b5:f9:f9:95:27:dd:22:55:ca:fe:1e:2a:a8:79:
                    62:7e:45:f2:cb:cd:8d:48:59:51:62:3b:c6:bf:35:
                    e1:0c:94:bb:f7:25:05:09:74:73:cb:86:a5:b5:ed:
                    56:f4:02:74:36:d2:88:02:f1:f1:dd:ad:dd:d6:16:
                    e0:34:a4:9b:1e:0b:23:4c:73:03:bf:79:36:0e:b7:
                    06:bb:a4:31:40:7f:97:87:08:c0:fb:bd:41:8e:0f:
                    d5:e6:b8:fa:32:b4:c7:ba:51:3d:59:3b:85:ee:f2:
                    d6:17:44:5e:99:92:be:f6:02:51:77:f7:32:83:15:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EC:B5:10:4F:E4:8A:1B:5B:53:BB:AB:F9:32:A6:B3:B5:3E:18:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:0c:d1:b3:8f:2b:6a:96:55:2d:5b:d3:91:d6:73:48:22:
         fd:e4:82:c1:38:e9:f4:0f:9d:6a:95:80:51:7f:c3:af:17:52:
         16:21:09:dc:17:1d:28:3c:90:5a:99:0e:f4:68:7a:4d:fb:64:
         09:f0:73:b1:81:32:45:00:40:1a:a9:4c:df:39:cb:6e:53:6b:
         9e:87:ee:1d:3c:5e:a7:7e:14:4c:3f:de:0e:eb:7e:0c:9f:cc:
         9f:37:26:1c:3c:4a:9c:c6:a4:df:e4:10:e6:8a:0e:3c:6a:d2:
         b0:b4:7d:3e:39:e3:b2:df:05:07:b8:29:bb:d9:bb:3e:58:56:
         70:82:7f:43:e1:94:8e:fb:b0:f7:fa:9a:4c:5b:2b:56:49:db:
         ee:df:81:d1:0a:b5:f5:dc:34:49:ef:24:cf:87:58:bf:e6:da:
         c6:0a:2d:d6:b9:20:d1:f2:fc:b1:ea:e4:19:6c:4c:b5:5d:f1:
         f0:28:7b:cb:09:8e:ba:8d:97:00:f0:95:22:2d:c7:13:0b:ce:
         89:ac:50:bb:6a:09:dc:9f:d9:ab:56:b5:f8:4c:e6:a0:3d:32:
         9b:97:19:b5:8c:3f:3b:b1:ff:7b:96:b9:d4:37:c2:1b:ef:25:
         ca:7c:e2:6b:6f:eb:2e:b8:bd:9c:47:82:1f:39:6b:96:91:dc:
         c9:ee:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:12 2026 by rpki-client