Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/9e0ed40c-ccf0-316d-a111-2d3b1849f963.roa
File:                     9e0ed40c-ccf0-316d-a111-2d3b1849f963.roa (raw, json)
Hash identifier:          e1YLmaP+5rPKyOlcVf+xWgvLJ9Ujh2+j5wV0wk1wF04=
Subject key identifier:   0D:46:AA:3D:07:CE:C3:CE:E2:FD:2C:14:88:70:7A:D2:EB:3D:7F:3E
Certificate issuer:       /CN=6e515aa0-534b-4527-ba50-26195a997cc3
Certificate serial:       010D0C9F4328584DDA43CF0F7FA3DEC85D2C7640
Authority key identifier: B9:94:23:E1:95:FC:1D:7D:B3:0B:72:3E:16:21:51:DA:93:C4:74:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/9e0ed40c-ccf0-316d-a111-2d3b1849f963.roa
Signing time:             Sat 16 May 2026 12:24:25 +0000
ROA not before:           Sat 16 May 2026 12:24:25 +0000
ROA not after:            Fri 14 Aug 2026 12:24:25 +0000
asID:                     395673
IP address blocks:        2602:f815::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/6e515aa0-534b-4527-ba50-26195a997cc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/6e515aa0-534b-4527-ba50-26195a997cc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:43:cf:0f:7f:a3:de:c8:5d:2c:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e515aa0-534b-4527-ba50-26195a997cc3
        Validity
            Not Before: May 16 12:24:25 2026 GMT
            Not After : Aug 14 12:24:25 2026 GMT
        Subject: CN=e84efd3a-36ba-4419-89e4-6850d6ee66da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:dc:b8:2e:a2:7d:b0:d0:2c:c8:af:d0:f8:
                    12:0a:be:e1:08:f0:14:c5:a7:42:f2:7d:ca:21:d7:
                    13:1d:69:90:79:a4:24:c8:ae:5a:f6:f4:29:ae:32:
                    5e:23:39:73:ea:82:4f:fa:65:ce:8a:6b:18:33:f4:
                    a1:52:c4:ff:27:b0:a8:97:2c:fb:ba:76:ca:c5:41:
                    2b:bc:dc:9f:4d:cb:69:0d:2c:9b:c1:98:23:5d:a1:
                    fc:08:9e:99:e5:99:41:5f:dc:95:0f:9a:b3:2b:4c:
                    ef:1f:dc:22:7e:b3:29:a7:1d:7c:a2:44:d5:7b:51:
                    c5:87:d3:fa:37:fa:1e:0e:11:3c:7a:78:57:a5:ee:
                    87:c8:c2:e9:c1:f3:33:8d:45:12:e1:f2:62:88:64:
                    e8:48:a3:5b:9f:8a:ba:b0:a2:d1:ed:79:7f:d2:e2:
                    e9:14:95:78:71:ea:49:2f:d8:6d:4f:22:c5:c8:c1:
                    e6:9d:00:0f:e6:5a:0a:d2:40:3e:7c:8c:0e:43:43:
                    e3:b7:9e:58:1f:9b:4d:7d:b1:9c:af:f5:54:2b:16:
                    b5:7e:88:18:14:74:ac:90:88:4e:78:fa:dc:e6:fe:
                    82:88:e7:6d:eb:20:26:6b:d0:90:27:42:58:0c:9f:
                    26:69:d8:82:2e:18:4c:44:bc:7e:96:dd:fc:16:9d:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:46:AA:3D:07:CE:C3:CE:E2:FD:2C:14:88:70:7A:D2:EB:3D:7F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/9e0ed40c-ccf0-316d-a111-2d3b1849f963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/6e515aa0-534b-4527-ba50-26195a997cc3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:94:23:E1:95:FC:1D:7D:B3:0B:72:3E:16:21:51:DA:93:C4:74:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f815::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:27:2d:bb:5e:55:96:ef:2b:16:f1:2b:91:08:93:98:6d:
         e1:56:e9:d0:d6:9a:fd:fc:e6:43:1e:ee:6b:33:f1:18:ff:20:
         66:5f:6e:3b:4e:11:3b:c8:3e:b2:69:40:e1:6c:5d:77:21:7d:
         47:5c:90:ef:68:4e:db:be:33:dc:bb:d4:17:41:bf:ae:c7:1e:
         51:83:8f:56:85:d3:7c:0a:1e:2e:8d:bf:10:2e:93:5f:c0:42:
         14:ba:a4:f2:8a:eb:d5:c3:2d:c3:04:fb:be:88:39:12:13:42:
         92:6d:74:5d:7c:81:3f:ac:9f:41:aa:29:a2:ff:70:4c:c9:dc:
         a7:7d:dd:09:f6:17:52:8f:d1:b2:eb:3f:51:1e:5d:18:c3:aa:
         20:68:41:08:2d:f5:d7:a6:af:0b:36:76:50:86:b2:37:f9:93:
         02:dd:b6:59:d1:7e:87:04:cf:f0:6c:50:bd:bc:ce:0c:b5:4b:
         fb:0c:37:87:70:59:df:c3:cc:74:f6:be:4a:c7:2c:b9:42:49:
         75:27:d1:7a:35:99:0c:a8:1f:be:57:08:62:25:9a:fb:f7:b7:
         67:7d:e0:83:df:27:69:3a:e8:d9:52:a6:01:09:ba:e6:20:c4:
         ad:59:26:d9:3f:c1:89:fe:1e:1c:ab:03:2f:0d:f2:1d:cd:da:
         8c:de:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:03 2026 by rpki-client