Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa
File:                     1f1d842a-8b80-3174-b179-a1287f433e90.roa (raw, json)
Hash identifier:          ytVCoYbdh4Ft6qXWGX/Un/0K4weAcUPMC+s5VVdUa90=
Subject key identifier:   2A:6F:E7:6E:CE:4E:4B:99:43:34:23:88:1D:30:E7:F9:33:4E:4E:2E
Certificate issuer:       /CN=c5aae53f-608a-4f49-919c-d5976c7324b1
Certificate serial:       010D0C9F4328584E2F04600B6DF94A939FF60F00
Authority key identifier: 19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     54201
IP address blocks:        2605:bc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:60:0b:6d:f9:4a:93:9f:f6:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5aae53f-608a-4f49-919c-d5976c7324b1
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=053345aa-88b7-4375-be72-016a16dbe487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bb:63:42:9b:c8:15:d3:9a:ca:cb:fc:fe:a5:
                    18:ca:8b:f2:72:6b:38:1b:90:cf:3c:28:60:99:51:
                    5c:f9:c2:85:24:25:77:77:fe:c2:9b:b9:44:bc:8b:
                    62:94:76:59:e8:ca:09:85:46:c0:12:e0:ae:8d:0a:
                    c9:15:03:26:8d:6b:e6:66:f3:c0:25:b5:37:4c:5e:
                    8e:a4:8e:62:4f:32:1b:51:c5:49:db:7b:8d:44:27:
                    ec:a5:21:72:19:b7:ad:7a:cc:96:2f:d2:76:2b:44:
                    01:85:e5:16:e7:25:cb:96:6e:01:e9:22:3d:48:1f:
                    88:4f:0c:d5:5d:ee:0c:1c:64:fb:8c:82:ca:36:84:
                    e5:f4:5b:b7:91:c3:38:80:83:08:37:23:f1:73:12:
                    be:a4:65:53:b1:d0:ea:38:5b:0d:aa:7d:03:41:f0:
                    a6:bf:c8:ad:e2:ba:91:89:e8:5f:21:5b:63:b4:20:
                    22:17:1c:2a:24:37:2a:dd:f5:ad:1b:14:10:b7:f1:
                    69:ef:94:df:bc:41:33:ef:77:b1:27:09:9c:19:5c:
                    52:b5:83:8f:a0:d7:01:3a:35:a3:75:c7:b8:a6:e1:
                    ed:87:05:51:a6:97:e4:1f:67:40:16:4d:49:7f:c8:
                    a5:16:e8:ed:06:6d:6e:1f:5f:46:3a:15:f1:83:5e:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:E7:6E:CE:4E:4B:99:43:34:23:88:1D:30:E7:F9:33:4E:4E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl

            X509v3 Authority Key Identifier:
                keyid:19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:20:15:4a:fb:6e:d9:15:dc:42:a6:98:a7:22:1e:c4:aa:
         b8:12:bf:ff:38:9e:21:c0:c4:09:0b:47:27:a8:ee:09:11:d9:
         6c:07:a1:84:0e:dc:db:2a:ec:1f:f3:7a:a0:59:f9:ab:f6:c3:
         6f:6a:12:46:21:2b:8e:2d:42:f9:5b:6c:02:19:eb:67:d0:40:
         ec:22:63:dc:50:92:d0:69:bd:10:48:69:5d:41:63:d7:a6:46:
         22:c7:90:fe:b1:64:96:85:b8:32:4b:0a:6d:34:f6:59:da:3c:
         a6:3a:00:47:17:6b:e4:a5:2f:f4:d3:b0:21:1c:4d:73:fd:f1:
         02:3d:87:d6:97:33:43:c2:da:c7:95:f8:dd:f1:4e:15:31:47:
         6c:52:03:96:62:d4:4d:f7:b9:3d:b6:77:55:fc:3e:33:06:9c:
         c9:9f:c9:ec:e3:1d:22:3c:cd:53:5e:5d:c3:5a:10:e6:ce:69:
         c8:71:4e:e5:ab:57:04:82:a3:5e:2c:90:27:f1:33:3c:aa:0e:
         b8:01:4d:0c:27:59:3f:76:21:24:9f:24:cf:7d:b4:3f:d4:88:
         b1:13:54:84:cb:03:9b:22:9c:e8:32:af:ae:6f:db:50:26:b9:
         dc:da:0a:62:c8:56:3d:16:d7:59:41:c4:14:18:36:22:39:68:
         43:cc:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:11 2026 by rpki-client