Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/ea803a64-8721-3d62-8f42-c0308a4047bf.roa
File:                     ea803a64-8721-3d62-8f42-c0308a4047bf.roa (raw, json)
Hash identifier:          bnROtCCDpeozI3YtmHtMk/MwMb/AG5PZp3xx1m5gkZY=
Subject key identifier:   21:11:9E:4F:00:AF:6C:A1:75:C8:CE:8C:A4:F5:0C:4F:74:F5:68:BF
Certificate issuer:       /CN=19e853ae-8c54-460c-a726-cbd1c7fc5ba2
Certificate serial:       010D0C9F4328584E4DB9D7AB53A0EC1E891EFB90
Authority key identifier: 06:46:9E:1C:CA:FC:41:CE:1C:37:CC:73:CF:75:34:01:50:0A:10:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/ea803a64-8721-3d62-8f42-c0308a4047bf.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     402359
IP address blocks:        2602:f406::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:d7:ab:53:a0:ec:1e:89:1e:fb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e853ae-8c54-460c-a726-cbd1c7fc5ba2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=339d336a-dd66-49ec-8ac0-91ac81d24d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:5e:2a:36:28:b6:ca:e2:3a:ac:d0:6a:cb:
                    ef:fa:46:8a:9a:4d:29:05:4f:91:1c:51:0d:7f:c7:
                    cc:7c:5d:87:9d:1b:b3:50:ef:3f:9b:f6:07:94:58:
                    a7:b8:16:5d:3d:7f:8f:88:25:f1:a3:f4:35:cc:f9:
                    4f:57:46:93:4d:40:af:06:cc:86:23:df:d6:a3:19:
                    0b:01:38:04:02:c7:87:b4:15:50:ad:b7:b6:08:71:
                    e1:71:67:98:55:4b:cd:f1:7d:bc:26:43:b0:03:1a:
                    c3:61:ee:b4:dd:75:a7:f0:c4:7f:1b:f9:ef:93:b7:
                    45:7a:5e:8d:7c:05:bc:cd:01:49:e9:4a:62:b8:be:
                    af:ae:72:c7:b5:12:d9:e8:e2:04:9a:0a:de:c4:96:
                    14:9c:83:3a:cd:6a:bb:2d:50:ae:d4:e8:b9:ae:28:
                    eb:3c:a3:d5:67:33:d2:8e:96:a8:78:87:be:13:25:
                    ed:da:1e:ad:a9:25:c1:99:2c:48:50:79:3a:7e:11:
                    04:4d:5d:c4:78:d4:32:c4:29:42:4b:57:ae:ca:13:
                    49:05:18:e1:26:84:a3:a9:2b:61:ab:ea:26:79:c1:
                    d1:d9:b4:9c:0f:05:5b:43:7c:70:6d:07:7f:a5:0d:
                    9d:c0:21:b2:eb:87:d5:8c:eb:04:47:fb:be:7c:a1:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:11:9E:4F:00:AF:6C:A1:75:C8:CE:8C:A4:F5:0C:4F:74:F5:68:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/ea803a64-8721-3d62-8f42-c0308a4047bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.crl

            X509v3 Authority Key Identifier:
                keyid:06:46:9E:1C:CA:FC:41:CE:1C:37:CC:73:CF:75:34:01:50:0A:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f406::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:32:82:27:d8:d5:80:07:a3:41:75:e6:93:f8:46:64:cb:96:
         25:d2:33:18:1b:5f:91:6f:f7:75:7f:31:30:2a:a6:28:4a:e2:
         0c:38:f9:5a:16:a9:0e:e8:f9:20:ac:fe:17:cf:86:35:7b:aa:
         98:7b:f9:6c:9d:17:1b:e2:2e:23:e2:34:fd:6c:a1:8f:e8:2b:
         ac:e4:37:27:87:f8:c9:93:51:a9:8d:63:9f:cf:3c:3e:20:6c:
         0f:1f:69:52:b2:19:55:fc:e6:63:ed:7d:63:85:8f:29:b9:35:
         27:09:fd:ad:2e:ef:63:ad:7e:f8:47:08:0e:f5:ee:6d:1c:7e:
         50:4d:4e:ee:ff:66:98:36:f4:35:17:67:f7:c3:c8:0d:f2:01:
         ee:fb:0e:83:d8:d2:c9:dd:7b:43:d2:2f:a6:4d:f9:5a:22:95:
         a5:8a:ae:0f:6e:0b:0d:e9:cd:09:90:a2:a3:df:bf:ca:36:1b:
         6d:f6:70:68:ee:ec:c5:50:77:65:da:52:fe:50:49:6a:96:f9:
         43:50:e8:26:ac:de:34:04:9e:e3:e7:34:1a:08:41:49:65:31:
         09:20:ef:6a:42:c3:fc:84:68:44:2b:b4:e8:f8:8d:bc:9b:17:
         bf:25:80:5f:a8:37:5d:e1:c3:63:a0:3f:ed:eb:2f:e6:50:7c:
         73:e3:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:23:05 2026 by rpki-client