Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/662f96d5-2bf4-3b0a-985f-6b0f489bfa64.roa
File:                     662f96d5-2bf4-3b0a-985f-6b0f489bfa64.roa (raw, json)
Hash identifier:          iBdRE0z8JaalNUXS+Pb8cF+DCZqATcSAf8+Gvt+/Dc0=
Subject key identifier:   DE:2F:65:BE:31:24:10:1C:F0:44:8A:64:E9:B2:7A:57:92:38:8C:A4
Certificate issuer:       /CN=456dae9d-cba8-4008-b6b7-2c9b9407b641
Certificate serial:       010D0C9F4328584E101791C0595A68C861C82700
Authority key identifier: 0C:E5:3F:63:97:90:50:DD:93:80:A9:F0:61:6C:15:AA:48:27:38:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/662f96d5-2bf4-3b0a-985f-6b0f489bfa64.roa
Signing time:             Thu 04 Jun 2026 19:08:56 +0000
ROA not before:           Thu 04 Jun 2026 19:08:56 +0000
ROA not after:            Wed 02 Sep 2026 19:08:56 +0000
asID:                     53959
IP address blocks:        2606:9980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/456dae9d-cba8-4008-b6b7-2c9b9407b641.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/456dae9d-cba8-4008-b6b7-2c9b9407b641.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:17:91:c0:59:5a:68:c8:61:c8:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=456dae9d-cba8-4008-b6b7-2c9b9407b641
        Validity
            Not Before: Jun  4 19:08:56 2026 GMT
            Not After : Sep  2 19:08:56 2026 GMT
        Subject: CN=e42e1ced-1e2f-4add-8d07-98ab5f152ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:4f:72:0f:da:69:23:2c:59:60:90:68:ff:
                    67:a9:61:c1:d0:95:f7:01:27:15:5e:c1:1c:d4:e7:
                    02:56:df:68:3f:63:31:98:9d:cc:10:9b:21:04:d9:
                    9e:d2:99:65:5b:ba:b3:11:02:8d:18:43:0e:30:f6:
                    70:0e:23:9c:0e:40:70:b9:1a:b1:71:d7:20:ad:82:
                    b8:23:4a:3e:34:d8:ac:d0:40:4f:56:1a:dc:05:e3:
                    15:ac:64:dc:c2:08:f5:9d:fe:79:36:0a:2a:41:ee:
                    2e:e3:6b:ad:c4:e9:c4:f2:8b:9c:54:e6:a2:d8:59:
                    7c:e1:be:27:01:2f:15:dc:6b:b2:9b:ce:ca:62:9c:
                    13:7d:c0:a1:f0:da:94:04:f5:70:11:65:8d:70:e6:
                    e7:cc:5c:7c:5c:a1:02:57:45:63:b3:f5:fe:97:1d:
                    bb:8f:63:15:76:aa:de:7c:91:d0:a4:63:a2:c0:06:
                    71:ae:e7:45:42:8b:40:06:83:0a:65:ec:04:72:b3:
                    73:bc:37:75:81:b7:b8:bd:91:2e:df:e1:1c:4a:c1:
                    7a:15:40:59:08:d4:e7:c8:15:81:16:75:e6:b7:e7:
                    3d:c6:5b:eb:69:4f:93:a9:d2:4e:d7:15:cc:1f:b2:
                    5d:54:ac:cd:df:84:da:c4:d0:d5:f2:35:46:ef:0b:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:65:BE:31:24:10:1C:F0:44:8A:64:E9:B2:7A:57:92:38:8C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/662f96d5-2bf4-3b0a-985f-6b0f489bfa64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/456dae9d-cba8-4008-b6b7-2c9b9407b641.crl

            X509v3 Authority Key Identifier:
                keyid:0C:E5:3F:63:97:90:50:DD:93:80:A9:F0:61:6C:15:AA:48:27:38:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:35:24:3d:23:93:e0:12:93:d1:37:9d:71:26:e4:24:f2:
         41:5f:91:dd:d5:33:90:c9:0c:03:b2:82:e8:9b:27:a5:9d:f4:
         dd:1f:30:5f:34:90:d8:ee:30:f6:6e:e1:d8:48:0a:da:5d:97:
         2f:95:62:d4:c1:f2:01:9e:2e:30:20:eb:b8:af:38:99:8e:bc:
         98:91:d5:77:0e:1d:30:f5:d3:0c:5b:4d:55:a2:22:5a:d2:0d:
         47:de:71:93:43:ce:cc:dc:1e:b0:f9:a6:15:d6:61:b1:a6:48:
         e5:a8:00:53:67:5e:56:28:2d:4d:2f:b2:02:82:63:5f:94:21:
         7a:e1:d0:65:d4:a4:d0:14:38:8a:4d:4e:41:34:93:7b:56:ed:
         18:41:69:27:0a:6a:7c:e8:cb:ac:57:c1:7a:f0:0e:72:c6:45:
         aa:88:16:c2:1d:b7:9d:2d:52:55:1f:8e:e6:a7:f7:bc:8d:c9:
         94:69:c8:4b:45:eb:b5:4c:45:33:fd:85:e1:8c:81:be:02:b2:
         45:54:d2:9e:15:19:32:53:92:1f:69:12:2b:40:db:77:f3:da:
         fe:01:43:3d:17:3b:52:f6:52:2c:50:b2:d1:94:9d:76:3e:91:
         8c:c2:b5:f9:69:71:bb:f6:a4:ac:0b:44:d9:aa:15:e6:7a:bb:
         36:6a:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:24 2026 by rpki-client