Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
File:                     f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa (raw, json)
Hash identifier:          ifaczUueg5qcK0ZmdLigX0cRXnQNLG61qZku+teEFgU=
Subject key identifier:   60:18:08:21:9E:4D:35:B5:09:34:D1:D2:61:AF:E6:59:79:61:90:74
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584E561A04B23223AF825BA550C0
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     46455
IP address blocks:        2604:c880::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:04:b2:32:23:af:82:5b:a5:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=79067747-e3c3-4e72-a83c-a7fa57c786b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:5c:93:40:82:84:2a:de:73:51:90:06:59:
                    f9:3d:fa:3b:ea:87:5a:c7:ee:61:0b:60:a0:f5:47:
                    d9:8c:f3:05:c1:da:2f:6d:85:c8:6c:db:96:ac:15:
                    67:a1:98:eb:aa:42:fd:5b:10:3d:e7:eb:44:22:15:
                    7d:51:59:2d:6f:13:08:7c:06:08:af:ec:42:a9:5e:
                    b9:9a:db:7d:73:7f:d6:04:68:df:3e:e9:4e:4d:71:
                    e8:e5:1f:10:19:07:d4:da:f7:22:2d:a6:b3:45:4f:
                    c6:b4:ce:63:c2:e9:b5:66:94:1b:29:cb:84:2e:a5:
                    ca:91:d1:74:a4:ca:15:e4:06:13:e7:24:28:a5:86:
                    6e:52:28:61:44:41:df:fc:62:98:1f:4d:0b:a8:6e:
                    96:2a:2d:d6:1f:46:d6:02:4f:e6:bf:b0:7e:e9:80:
                    0a:1b:62:79:e7:2c:fd:9c:49:51:b2:3a:cd:97:69:
                    3d:d8:56:fa:c1:70:b6:c0:db:7d:81:5c:c9:a0:83:
                    fc:dc:33:b4:2d:2c:3f:57:1a:f1:01:1c:ea:3f:5a:
                    78:83:44:49:d6:73:44:43:21:db:d5:32:66:6d:96:
                    5d:45:09:04:08:eb:03:5e:22:64:a5:6a:ed:e6:f4:
                    46:30:00:d0:b0:3e:fb:27:45:51:08:4b:40:80:86:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:08:21:9E:4D:35:B5:09:34:D1:D2:61:AF:E6:59:79:61:90:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:89:74:64:b9:b2:32:16:cd:3e:0c:09:9c:c9:79:2b:61:68:
         57:6d:5c:75:c7:44:fd:d3:75:e3:80:30:59:16:fd:96:14:ca:
         dc:35:8c:c3:c2:67:c5:d9:de:c7:9b:64:1e:e2:05:9b:a9:86:
         b3:12:c9:ee:30:8e:55:fd:bf:70:aa:a0:ea:ce:72:d2:58:13:
         c6:57:f6:a6:a3:aa:b7:bb:b6:f5:8f:96:77:19:3e:86:17:3a:
         80:f9:40:ef:ea:78:c0:80:3a:86:dc:fa:78:b9:ed:60:5b:8c:
         2f:ff:33:1f:db:94:4c:27:83:58:b2:4e:20:cf:da:11:ff:59:
         27:8a:91:34:fd:d9:2f:46:c6:63:5c:13:de:a1:34:9a:34:74:
         20:92:1a:4e:2f:97:07:5d:6e:78:3c:05:c8:69:cc:d8:d8:91:
         dd:20:a2:ea:e8:52:da:db:ed:64:a3:ca:42:34:a5:29:fd:2a:
         0c:50:07:31:94:e7:7c:e8:d4:d3:10:39:94:7a:98:2d:4e:0e:
         82:10:98:f2:f9:36:82:be:7a:27:f1:8f:72:bc:d3:64:7c:c6:
         bf:3b:09:42:49:ac:1e:34:55:74:e3:b7:e9:63:5f:46:c4:c5:
         07:a9:39:4b:be:6d:28:a5:e0:6d:22:5a:fa:e4:14:db:0f:0b:
         62:2f:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 22:43:55 2026 by rpki-client