Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c6b87ef9-73d8-3b79-95d1-9a249471517f.roa
File:                     c6b87ef9-73d8-3b79-95d1-9a249471517f.roa (raw, json)
Hash identifier:          3xlmA4jEAf91iHyn3zn6UcubgD/xLY6xi8nV997NWxc=
Subject key identifier:   BB:97:31:27:56:0B:55:FD:15:F8:73:7C:06:AA:95:4C:01:C3:25:1C
Certificate issuer:       /CN=c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a
Certificate serial:       010D0C9F4328584E3468D164F4387A05CEC83A80
Authority key identifier: DA:8F:98:3B:1E:53:F2:63:08:50:A0:00:B9:BE:71:B3:14:FC:21:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c6b87ef9-73d8-3b79-95d1-9a249471517f.roa
Signing time:             Wed 17 Jun 2026 19:21:44 +0000
ROA not before:           Wed 17 Jun 2026 19:21:44 +0000
ROA not after:            Tue 15 Sep 2026 19:21:44 +0000
asID:                     402646
IP address blocks:        2620:35:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:68:d1:64:f4:38:7a:05:ce:c8:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a
        Validity
            Not Before: Jun 17 19:21:44 2026 GMT
            Not After : Sep 15 19:21:44 2026 GMT
        Subject: CN=43c9272e-0587-4273-b233-94603c0aeca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:19:b5:69:d4:cb:e5:95:54:68:a9:76:d3:
                    33:9d:67:22:c1:83:5f:3d:15:87:52:92:d7:46:6b:
                    39:24:a7:97:18:5d:c2:4f:14:76:b5:32:41:e0:f2:
                    1b:8e:b0:c0:f7:93:63:36:c0:35:26:d6:c7:19:99:
                    11:64:e4:a2:7b:9d:1c:c1:49:2c:32:87:e1:0f:d3:
                    69:c0:3a:09:18:9a:0a:dd:f4:34:62:86:41:1b:de:
                    e4:85:0b:03:9f:0c:ab:e4:46:a8:2c:5a:48:33:a1:
                    d5:a1:24:c6:8b:ba:e7:43:89:22:2a:69:43:48:e8:
                    a4:62:d4:89:14:ab:17:ff:1f:4c:bd:4e:11:29:d1:
                    c3:d3:d0:59:68:a0:15:62:aa:a8:f2:50:0f:35:a0:
                    0a:14:76:3c:d6:3e:7e:54:e6:81:d9:ae:23:b3:e8:
                    c3:5e:b3:5f:fa:b4:33:34:aa:ed:30:5d:01:9b:74:
                    dc:c5:55:98:2b:9c:40:09:de:66:bc:fc:5c:96:41:
                    62:ad:07:3d:89:96:a9:4f:90:ac:cf:d0:9c:d7:65:
                    a8:9b:32:d2:96:48:6b:08:b3:91:63:38:b0:12:4b:
                    07:d3:3b:d8:3e:41:d6:49:5b:f5:fe:1f:b5:4f:03:
                    bb:49:02:d8:60:c9:c3:04:9a:33:21:a9:be:73:6d:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:31:27:56:0B:55:FD:15:F8:73:7C:06:AA:95:4C:01:C3:25:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c6b87ef9-73d8-3b79-95d1-9a249471517f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.crl

            X509v3 Authority Key Identifier:
                keyid:DA:8F:98:3B:1E:53:F2:63:08:50:A0:00:B9:BE:71:B3:14:FC:21:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:35:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:4e:dc:49:11:f1:4c:07:c1:a4:2d:1d:96:74:6a:88:cb:
         fc:58:c6:1f:69:c1:e1:81:d1:15:1b:3f:bc:2b:a0:a7:8d:57:
         2c:18:ae:12:fd:e9:8a:b3:7a:96:25:54:64:de:27:49:da:53:
         14:5e:c6:2f:10:83:0c:2c:0e:50:e2:b4:1b:2c:45:5e:e6:37:
         36:de:69:61:5d:59:39:20:6a:75:46:5e:20:08:be:f5:51:1a:
         9a:1a:d0:69:e6:e3:a2:92:1d:3a:cf:c6:1c:51:e2:20:fd:c1:
         df:06:6d:b3:a1:19:b3:8b:c9:88:aa:a7:10:db:c5:69:98:d7:
         3f:54:47:67:c2:57:b9:f7:9b:47:f2:26:d6:d8:48:bc:a4:d9:
         c6:56:44:11:1d:2c:ba:07:de:20:93:f7:93:1a:6b:69:7a:47:
         63:6d:7c:1d:af:48:03:c3:9c:d8:26:5c:fd:c6:ac:4b:76:c2:
         26:8d:e2:2a:d5:c8:b6:84:81:1a:4d:e2:48:e5:5b:c1:bc:30:
         69:bd:a4:3c:02:eb:f9:da:42:29:9c:7d:57:a4:2c:9e:d5:3d:
         fe:20:5b:b2:92:ad:1b:48:bc:bf:79:85:fa:6b:81:2e:70:64:
         5a:c6:d3:36:32:43:85:d8:18:0b:87:7f:02:6f:82:45:b7:52:
         89:6e:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:10 2026 by rpki-client