Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2bad84b-a896-38ec-b1fc-29f057079e8f.roa
File:                     d2bad84b-a896-38ec-b1fc-29f057079e8f.roa (raw, json)
Hash identifier:          Po5D6yJVyYYw4Cxm8zsT/iRbt8jpVUjsSzeAyqIymus=
Subject key identifier:   E2:C9:E6:12:CF:D7:FE:AB:68:D7:E8:83:22:8C:B5:F6:D9:1D:C3:F7
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584E51EA0055F203131D0E89B380
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2bad84b-a896-38ec-b1fc-29f057079e8f.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        2602:f93b:4000::/34 maxlen: 34
                          2602:f93b:8000::/34 maxlen: 34
                          2602:f93b:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:ea:00:55:f2:03:13:1d:0e:89:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=9e6d6b4d-e50b-4bd2-80f0-4262e7f40c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:00:d9:ba:e6:77:54:10:51:b4:8e:c7:45:
                    09:d6:3d:be:db:6c:e4:02:bb:e4:7a:aa:4d:6f:f4:
                    ab:f5:3b:8b:3b:9a:52:23:e1:44:5f:2a:d9:d6:74:
                    d2:ca:4d:60:78:92:ad:37:87:6c:43:5a:82:4a:1e:
                    b8:6e:11:e4:76:76:d1:af:9d:3b:d4:58:1c:17:1d:
                    cf:e7:c1:7f:d6:d9:93:59:de:12:34:98:2e:84:fd:
                    47:4b:07:ab:1d:ab:cc:3b:68:0d:f8:c4:25:04:4a:
                    a1:db:85:c0:08:a0:b8:a3:bf:c1:24:39:13:3a:72:
                    af:c8:e7:d8:f0:a1:c2:1d:ea:31:98:79:13:2f:a4:
                    e0:2e:67:65:c1:66:61:73:2a:78:d7:83:05:0c:5c:
                    19:39:ce:b8:89:23:ca:6c:9b:f3:56:53:57:3d:cf:
                    cf:95:c4:f4:98:e8:d1:a7:e9:5c:9a:0b:f9:11:ef:
                    bb:8d:a8:f3:fe:e9:38:c4:1c:56:62:52:26:d1:60:
                    68:d9:ca:61:0b:2f:80:71:9b:5f:1a:9b:0f:96:26:
                    3d:f7:aa:d4:02:5f:b8:1a:c9:dd:c0:f8:be:34:55:
                    df:b7:7b:09:4f:a7:af:70:35:56:06:21:6e:f2:9f:
                    50:87:61:33:bc:28:58:e5:e4:05:dd:58:5a:ee:dc:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C9:E6:12:CF:D7:FE:AB:68:D7:E8:83:22:8C:B5:F6:D9:1D:C3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2bad84b-a896-38ec-b1fc-29f057079e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93b:4000::-2602:f93b:ffff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e9:e5:ee:34:b9:d9:d4:70:21:9b:14:92:b1:65:49:b9:bc:
         a5:5f:09:6b:90:a6:cd:60:24:41:4d:84:ec:5e:d2:99:25:a0:
         14:85:51:de:1f:6a:1f:c4:7f:5d:e0:a8:5d:03:5e:68:cc:55:
         29:58:25:8e:71:9a:38:16:87:86:ec:6f:fd:b9:39:39:d1:cf:
         f0:53:8e:ab:f9:b8:74:82:8a:a9:9a:94:ec:1c:91:69:fd:9d:
         41:ca:f6:74:e6:2e:06:48:9a:4e:da:b7:74:7d:e9:d9:47:83:
         05:8e:d3:c7:27:b5:35:64:02:d3:60:42:85:e4:75:69:3d:6a:
         ea:03:a8:a0:3f:b6:4f:ef:52:61:5b:4c:e9:e0:41:4b:93:f6:
         4f:a7:cf:fb:b1:29:aa:7a:bd:db:b3:98:df:88:35:87:44:40:
         26:2f:ca:0c:1b:b3:79:01:da:21:c9:a1:9a:c1:80:87:7b:d0:
         54:a1:48:8d:0c:bc:8c:82:04:12:8c:21:a0:52:cd:9a:82:73:
         cd:75:94:32:46:7f:4c:b1:e9:50:f7:4f:49:07:dd:8b:55:ce:
         c5:b6:87:d8:ac:e3:c4:40:bd:9e:ab:10:00:d7:c1:ef:82:5a:
         80:52:57:00:0a:ca:77:17:f8:2b:0c:4d:61:e1:7d:60:49:2e:
         d7:c4:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 13:45:51 2026 by rpki-client