Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa
File:                     551fc2be-c880-3b4d-bed4-93cf69acd18a.roa (raw, json)
Hash identifier:          yzXr2Kn74WAJh6sTIO8ABXPj9o/RhE3aOqJhZCeGrL4=
Subject key identifier:   59:17:9A:20:88:AD:E9:BF:B6:2E:88:A1:ED:E8:7E:2B:C2:FA:B5:0D
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584E3A2F370198DB810A00822980
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     14773
IP address blocks:        2620:1d5::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:37:01:98:db:81:0a:00:82:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=e6022567-41dd-4fde-9a07-154f15ae98bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:a9:64:4e:06:b1:2b:99:38:3f:a6:72:0b:
                    96:8c:d0:a6:60:bf:9b:a7:85:64:68:16:bc:7d:3d:
                    3c:22:33:9b:ab:96:df:b5:3f:f4:a2:fa:98:b2:1e:
                    37:73:67:d5:27:e4:ad:f3:cc:7b:14:bc:c2:fb:30:
                    ee:7f:77:4f:6e:7b:43:03:50:65:78:04:54:a7:f3:
                    92:05:54:48:41:bb:49:8d:d0:1f:5a:be:f3:67:c3:
                    f3:d1:a5:05:eb:89:96:b8:40:f2:3e:9d:ec:eb:36:
                    96:85:57:05:53:2e:5b:3a:88:ab:aa:cd:3c:b9:5f:
                    b2:0d:13:f3:f4:ff:1c:f8:ba:56:dc:eb:71:5c:df:
                    46:ac:7d:a6:af:24:f9:bf:3e:35:a8:0c:20:b2:55:
                    a8:44:3b:4d:71:49:ea:f1:1b:5b:13:f2:5b:c2:a9:
                    b6:74:d4:5f:7c:49:26:4c:a8:d8:06:98:1f:88:2d:
                    cc:06:eb:3d:71:7f:35:6b:60:d5:55:f4:5d:6d:8c:
                    24:39:9a:8b:e6:ad:15:84:c6:40:3a:b6:8a:e8:5a:
                    a7:5f:46:de:24:1a:7a:fe:dd:3c:f2:30:c1:9b:59:
                    e2:37:54:2e:78:d8:f5:2c:5c:0b:bb:a8:38:ec:4f:
                    99:8f:c1:74:53:6f:70:9f:30:9a:9c:74:0f:b7:2e:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:17:9A:20:88:AD:E9:BF:B6:2E:88:A1:ED:E8:7E:2B:C2:FA:B5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3f:9d:c3:fd:cf:3b:3d:29:54:3e:ed:72:f1:77:1c:3c:e3:
         f1:c5:86:0d:95:52:0a:e9:d3:49:21:d7:2b:30:af:94:12:4c:
         6c:31:df:99:4d:f3:8e:40:b7:71:80:19:9f:03:0a:78:b3:fa:
         d8:99:b0:75:11:39:d4:49:0f:65:4c:13:f1:1a:b3:3e:d2:a0:
         a6:ea:a3:61:cb:e6:7f:c5:60:da:25:93:73:e5:3f:ff:f4:23:
         e2:54:2f:84:c6:72:c5:d5:b0:0c:05:c0:f6:ab:67:10:eb:74:
         72:8b:ce:98:44:10:9b:73:58:8f:20:6e:f8:62:d5:25:1f:1e:
         a9:13:0c:c0:d7:ed:61:19:a3:ce:2f:47:9a:4e:2a:59:42:a0:
         8f:cb:6d:7a:0a:a2:57:2f:7b:f4:d6:3c:b8:88:4b:b2:30:d8:
         19:91:ff:d1:a7:a7:bb:ad:cd:f6:9a:cc:47:cf:9d:50:f4:d5:
         e5:42:bf:95:4e:11:05:2d:ba:bb:27:ec:63:f1:a3:33:d6:c9:
         55:18:73:f2:6e:8b:ae:49:f2:87:91:d4:91:82:71:b8:08:ad:
         5c:2e:85:23:b6:28:75:28:4b:13:2f:76:60:a6:3a:dc:84:74:
         00:60:e9:4d:c3:e5:ee:c2:57:c1:a2:00:a0:da:ce:4c:73:d4:
         f4:78:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:32:43 2026 by rpki-client