Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa
File:                     be0423cd-3e30-33b2-905e-76cb963a377d.roa (raw, json)
Hash identifier:          0L5QApuGzV59D1HVFcJIeNyuBsZbexF2Lb6lI4z6du4=
Subject key identifier:   27:94:BD:E7:27:AE:4F:79:4E:CF:02:30:74:90:1A:3E:71:BF:0C:85
Certificate issuer:       /CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
Certificate serial:       010D0C9F4328584E4559F3E5646ABEEAA0869740
Authority key identifier: 1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     399788
IP address blocks:        2607:d440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f3:e5:64:6a:be:ea:a0:86:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=a0dd59d4-ec87-4ce0-a0c7-c65eaceb5a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:62:ce:27:57:6c:19:a4:77:61:9c:56:19:
                    b5:e7:90:76:2f:f2:db:32:0f:be:6d:56:e2:5f:b9:
                    1b:5a:5e:f7:63:0c:31:34:84:f2:fb:41:89:d0:fc:
                    8a:f5:56:24:5e:54:99:4c:ab:67:4a:29:7b:a7:44:
                    df:2a:e2:79:35:f2:1b:e1:a9:54:a1:8d:ac:38:78:
                    6d:b3:12:31:3e:01:f9:1c:66:8a:a8:ff:c4:d4:e3:
                    fc:3d:bb:dc:4a:e6:88:6a:56:12:8e:6b:84:05:36:
                    12:bf:77:98:76:21:ee:41:4a:67:b3:fa:fd:1b:a2:
                    02:0d:bd:ad:fa:4f:a1:6a:32:08:ac:f0:90:f9:80:
                    a3:2b:15:4e:32:f0:19:f1:a2:dc:6b:0c:b6:a9:9f:
                    71:82:33:32:eb:65:91:6f:0e:a9:ff:2c:2c:21:20:
                    83:85:cb:47:87:88:fd:c1:34:37:18:c3:f3:fc:ce:
                    0a:ce:73:10:98:bc:0c:39:5b:8f:fe:b2:60:75:f9:
                    29:74:fb:5a:31:f5:38:a3:2d:d2:63:89:ef:c5:a8:
                    d2:a1:47:3b:b2:92:09:41:e5:2d:4a:b6:9f:2f:b1:
                    8c:11:7d:9e:66:0e:a6:44:74:af:9c:16:b0:11:99:
                    80:45:6e:3f:a1:66:8d:e2:9a:ee:5f:ed:76:c9:e8:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:BD:E7:27:AE:4F:79:4E:CF:02:30:74:90:1A:3E:71:BF:0C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:44:bf:d3:0e:aa:e1:aa:5f:84:c6:ae:d7:e2:9c:0e:a9:97:
         24:a3:0c:63:cb:b9:b3:e9:b5:78:bc:d8:ce:0f:f7:df:76:0e:
         a4:58:e3:9a:d0:ac:49:c6:87:9a:a4:51:83:56:52:d3:3e:b8:
         25:af:1d:47:b8:23:93:c5:9d:73:74:90:be:01:8a:15:a4:60:
         10:92:89:13:c8:d9:7c:9c:2c:68:fa:87:3c:ad:ed:79:e5:79:
         d0:c9:fc:9c:4e:26:ca:bb:f6:91:7e:89:14:d9:f2:ad:0c:32:
         42:b5:21:1c:03:70:64:2f:88:79:6b:fe:ef:8f:99:8d:87:23:
         9f:66:f8:88:54:2d:e1:4e:66:c4:a1:8c:0a:ec:af:37:30:80:
         e7:fa:15:ac:90:51:aa:db:69:02:22:d4:bb:90:85:93:d5:6b:
         92:48:12:6d:58:0a:7c:9a:f6:71:a0:55:7a:12:25:7f:06:17:
         18:f6:bf:df:93:d8:65:dd:e5:05:81:4c:f0:37:52:40:9a:05:
         32:63:38:29:a3:e1:9f:1c:d5:94:81:d6:40:58:40:d1:6a:46:
         63:17:6e:a9:f8:bd:03:80:98:54:66:04:cf:15:b0:60:03:48:
         de:2c:c7:63:ec:c6:a4:ca:56:a6:0f:09:b6:c2:19:e6:7e:f0:
         07:25:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:20:44 2026 by rpki-client