Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b987851a-da2b-3f25-af51-b20be3696b16.roa
File:                     b987851a-da2b-3f25-af51-b20be3696b16.roa (raw, json)
Hash identifier:          C0m+u1koQ2lgUdpF3X0lCdKNNqk0b3CbJgqx75ImRxA=
Subject key identifier:   0D:A1:09:C6:7B:1C:B6:22:AC:57:FF:AE:5E:61:D6:BC:A3:89:3C:FF
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E1AE2E8658267E9812D5A7300
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b987851a-da2b-3f25-af51-b20be3696b16.roa
Signing time:             Mon 08 Jun 2026 15:56:43 +0000
ROA not before:           Mon 08 Jun 2026 15:56:43 +0000
ROA not after:            Sun 06 Sep 2026 15:56:43 +0000
asID:                     20473
IP address blocks:        2606:f180:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:e2:e8:65:82:67:e9:81:2d:5a:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun  8 15:56:43 2026 GMT
            Not After : Sep  6 15:56:43 2026 GMT
        Subject: CN=2e9066bb-2650-46f5-9a03-31eb19a378f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:d7:3b:cc:a7:7c:61:f6:cf:13:da:42:d4:
                    ca:c6:d5:9e:d7:32:6c:42:8e:33:63:48:e2:a7:93:
                    ff:e9:7a:72:31:76:74:8f:b0:6d:14:0e:71:22:df:
                    03:f1:23:bf:34:12:c5:8a:8f:31:76:ab:47:01:1f:
                    d1:50:11:23:e9:8b:c5:a0:2c:12:b2:d9:f6:ae:a8:
                    11:00:96:5d:95:b7:b8:8c:08:0f:25:ba:74:ff:17:
                    e9:f0:e8:87:f8:86:9f:d5:11:40:bf:9e:89:74:ec:
                    11:b6:b1:f1:00:f7:92:ae:45:20:5b:66:4a:e9:3a:
                    25:c6:02:72:3f:dc:dd:84:5f:dd:23:18:47:c1:84:
                    e7:ae:f9:ce:38:21:fc:f1:f1:51:0b:a9:83:9c:86:
                    cb:8d:ef:ab:bf:11:e6:d6:a3:ee:ba:a5:43:26:55:
                    25:df:78:4a:85:96:63:e3:68:ee:72:3f:5d:98:44:
                    f7:25:e3:81:a9:c0:76:b0:22:d6:bb:c6:54:a1:e5:
                    fb:bc:22:b6:3c:0f:f9:11:0e:72:42:6f:2a:f4:19:
                    aa:69:24:71:d5:d0:95:d6:73:62:9d:e8:fc:40:0b:
                    03:5a:e4:87:45:c9:24:53:ea:45:5e:46:03:21:11:
                    c0:04:44:06:d9:23:61:3c:e3:3c:57:aa:91:30:4c:
                    6c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A1:09:C6:7B:1C:B6:22:AC:57:FF:AE:5E:61:D6:BC:A3:89:3C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b987851a-da2b-3f25-af51-b20be3696b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:7e:27:8d:41:10:3c:1f:95:9e:0f:18:af:f7:81:a4:ed:
         d2:35:f8:40:d0:34:49:d4:0f:56:1b:05:7d:14:ad:83:83:86:
         24:f0:82:1b:62:b0:cc:b9:8c:3b:0d:58:f0:26:f4:8f:b7:3a:
         6e:aa:87:2a:dd:0b:95:6b:52:78:d3:f0:86:7d:7b:94:eb:75:
         74:90:db:7f:fb:bf:7c:83:bf:9d:15:1c:19:01:76:e1:69:a3:
         9d:db:0a:7d:9d:83:df:2a:8c:22:7e:4d:bc:50:7e:5f:23:57:
         70:32:f9:92:14:39:93:0c:9f:ce:01:b4:56:f9:91:cb:2e:da:
         28:de:e5:c0:a8:84:10:a3:de:8e:14:4f:53:93:bc:27:55:71:
         f1:a2:f2:6e:f0:e4:3d:11:0f:27:1f:b8:56:06:10:01:a9:e9:
         bc:bd:73:ca:a3:fd:8f:d2:90:b3:1e:f4:5f:5f:64:16:5c:0b:
         3e:33:2d:51:bc:de:3d:dd:e0:ad:6a:93:80:4d:65:dc:d0:87:
         4f:6f:f3:26:f6:a0:68:83:d3:5c:d1:ef:b1:59:df:0a:4d:5f:
         46:1b:6c:8f:d5:55:8f:e3:13:11:7d:29:95:83:1b:74:2b:ed:
         d0:ac:0e:68:de:d3:c6:2f:a3:ff:ac:ae:ea:28:73:f3:d2:76:
         49:1c:35:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:42 2026 by rpki-client