Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa
File:                     6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa (raw, json)
Hash identifier:          cq+wAX/vLW31ivg6/F4mHitbbHgUD5KPRhL4sT7MFiI=
Subject key identifier:   8F:59:6F:A4:53:9A:DD:C4:CF:6D:75:A6:BA:D1:75:47:A9:CB:EB:F8
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584DC56598074E4DEBE1A77EE280
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     25664
IP address blocks:        2607:cc80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:98:07:4e:4d:eb:e1:a7:7e:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=a1d3d713-ce29-4ee4-a739-7af7c62d55ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:6c:b8:21:0f:85:9e:43:cb:ef:8b:b6:b6:
                    e7:74:45:56:1a:2f:dd:12:88:7f:40:ad:5d:cd:fc:
                    42:51:c0:8f:91:ee:38:99:a8:20:76:17:6c:b5:0e:
                    d5:08:e6:b7:81:a3:da:35:3f:0e:d0:60:9b:fc:98:
                    00:64:b6:af:f5:c6:db:99:90:59:47:a7:ca:2f:6d:
                    ea:0f:d0:55:09:f2:7a:8c:a2:44:fc:19:9e:a1:68:
                    89:f5:9c:e4:6a:6e:f1:1a:be:c5:c3:8c:40:ba:ef:
                    5d:1e:93:e9:2f:e8:01:d8:99:b4:27:ad:bd:39:88:
                    9e:f0:99:a7:86:67:7c:84:60:ff:f2:27:be:68:51:
                    12:cb:5e:b9:30:d6:bf:a7:d8:bc:c2:7a:c1:fe:76:
                    14:b4:13:db:a0:9f:df:7e:a5:f3:5f:ed:d2:3c:9c:
                    86:00:3f:60:8a:97:cf:6f:e6:c9:bd:7f:87:68:47:
                    15:27:78:95:06:c0:06:8b:93:df:95:4b:f1:5a:f8:
                    1a:9d:76:cd:f2:3c:56:be:58:d4:bc:d4:ba:21:86:
                    6e:d2:bd:3d:53:51:2b:49:44:12:34:e1:74:26:28:
                    a4:56:ea:17:8d:e2:6b:79:bd:c3:32:0a:dc:2b:24:
                    14:0e:ad:8c:94:25:2a:b7:fc:aa:76:b7:a6:09:e4:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:59:6F:A4:53:9A:DD:C4:CF:6D:75:A6:BA:D1:75:47:A9:CB:EB:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:48:31:20:4f:41:47:4b:42:2e:9e:1c:41:3a:38:3f:52:12:
         6f:56:64:cc:aa:b7:6a:ba:6e:55:44:e4:2a:29:fb:43:73:9d:
         e5:a4:48:fe:6f:ea:97:e2:e5:da:1d:2d:f8:26:44:46:95:a5:
         f7:40:6f:50:b3:31:3d:7e:98:79:3e:c3:ab:ad:56:82:22:75:
         3a:b6:0a:7d:87:54:b1:df:4e:7d:78:ff:29:24:f9:84:9f:b4:
         26:a1:7c:46:bf:c5:22:4e:52:07:e4:4d:2c:0b:cc:6c:4f:17:
         05:6e:69:6c:65:e9:53:c8:65:fd:32:58:ca:92:3f:63:c5:75:
         93:a1:3e:88:f3:88:fc:0e:93:f1:bb:9c:43:cc:f6:cc:b0:0c:
         4a:27:07:60:f7:1f:e7:7a:c4:34:32:e3:84:07:f0:52:9d:55:
         16:d5:69:1b:07:11:18:b9:82:53:47:15:10:92:55:2f:a8:8f:
         25:72:85:38:fc:78:ab:2d:7d:0b:f9:b3:b1:ce:3d:54:3d:3f:
         2d:4c:78:e2:26:0f:0f:b9:39:03:06:d1:8b:f9:25:4d:e1:ed:
         29:8f:dc:9e:7b:7d:c3:c4:8c:7d:25:c3:60:a5:81:c3:97:b3:
         51:ba:cf:02:4f:3b:9d:ad:00:c6:45:b5:20:f7:36:e1:88:ff:
         a2:67:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:56 2026 by rpki-client