Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
File:                     803c99b8-f23c-355a-bcca-59b3fa52407e.roa (raw, json)
Hash identifier:          A691rtv3H/PchEuIdQQac0c0OusGP47D77TCpzoZ4YY=
Subject key identifier:   8F:C7:1A:F6:EF:3C:9F:94:71:EE:26:C3:21:DB:88:B5:00:CE:7F:60
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584E2D9F0B7595F1A6FCEBE36BC0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     21928
IP address blocks:        2607:fb90::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0b:75:95:f1:a6:fc:eb:e3:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=547953eb-dccb-461f-b8d2-592892bf1748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:5b:6d:e4:af:8f:63:0e:78:67:4b:99:79:
                    6a:7c:6a:70:0b:0c:ee:a8:5c:75:11:b1:ac:58:cf:
                    4c:eb:da:81:eb:5a:5d:35:d5:ae:1a:ff:f5:4c:8d:
                    a3:f2:20:da:82:f9:30:b0:a5:1b:53:d9:1e:e0:70:
                    c2:9e:4a:09:d0:d5:04:6e:06:5f:a3:df:ae:f9:af:
                    da:76:e0:16:b5:b9:81:3a:a6:95:fb:6f:75:d1:a3:
                    c7:3b:89:79:7c:a2:b4:38:0d:3e:9f:b9:6a:bd:ff:
                    df:b3:42:ab:46:08:1a:b5:a9:bf:f9:03:3d:c3:b9:
                    5e:ea:f1:ff:57:e9:89:35:71:8f:74:4e:b8:05:2e:
                    6f:a9:68:74:9d:ef:0b:fb:79:bc:e8:d6:f6:e9:12:
                    91:c2:cf:71:a8:38:55:b1:2d:63:be:f0:0c:eb:3a:
                    72:98:14:e8:32:36:d7:32:0c:24:4a:86:fa:5b:c2:
                    26:88:1f:f9:63:99:86:31:c0:36:73:e7:c1:50:4b:
                    87:7e:fe:51:3b:b2:0c:cf:23:48:db:24:da:0e:4d:
                    df:26:87:a0:2a:41:95:d5:f0:fb:aa:ba:ce:12:9d:
                    e8:5f:d1:56:3f:3b:6a:39:7d:7f:4a:dc:fc:29:5f:
                    f3:ef:28:75:e1:fc:87:97:d2:11:63:53:99:57:d7:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C7:1A:F6:EF:3C:9F:94:71:EE:26:C3:21:DB:88:B5:00:CE:7F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb90::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:0d:39:9d:d4:b2:bc:f0:ad:eb:7d:a4:d2:db:d6:e3:82:
         4d:49:5a:13:07:d7:cc:da:53:15:bc:43:9a:a5:33:0c:d1:61:
         8c:39:07:b9:d7:22:9b:ae:58:c1:44:ff:86:a8:55:27:29:5e:
         db:46:1a:ff:98:ac:6d:63:98:1b:cc:63:80:25:6d:65:93:2d:
         e6:89:de:17:26:e2:21:c5:86:46:69:9a:c4:88:84:74:24:73:
         18:44:00:ab:ab:e4:e3:24:12:94:51:15:15:f1:32:81:37:b7:
         c1:97:fb:b0:99:00:15:35:82:a6:9b:14:3d:3e:c8:78:26:99:
         dd:3b:a9:da:3d:ee:8c:ff:26:2d:4e:89:40:a2:93:8a:06:28:
         1d:54:26:dc:fc:f6:09:ff:23:03:44:0c:08:94:e7:fc:b3:2b:
         ec:09:97:57:a2:12:cb:ad:fc:01:66:ad:13:09:0a:d0:71:d6:
         c1:3c:66:7c:14:c8:0f:7b:24:ff:6d:dd:a7:24:f5:5d:7b:9c:
         79:d2:cd:50:ef:4a:c1:f4:0d:e9:2e:03:e2:46:4c:94:de:a2:
         49:29:a0:33:b6:e8:ba:fe:ca:96:20:f0:3c:45:86:1e:7c:44:
         48:67:20:e4:22:69:9f:a2:83:b5:9d:ee:2b:b2:d5:c4:ff:ca:
         a8:0a:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:25:53 2026 by rpki-client