Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/e9dc3a30-7386-3e84-9584-970f4018f4fe.roa
File:                     e9dc3a30-7386-3e84-9584-970f4018f4fe.roa (raw, json)
Hash identifier:          +//AH1nMQqjxbjT8GnRV1va0k0KD3YOGjW+PFqXod38=
Subject key identifier:   8C:37:1B:8B:C0:C9:4B:26:8D:70:00:D8:67:FE:7D:49:4A:22:2B:75
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F4328584E296DAD06D4991ADDB26CB6C0
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/e9dc3a30-7386-3e84-9584-970f4018f4fe.roa
Signing time:             Sat 13 Jun 2026 20:57:38 +0000
ROA not before:           Sat 13 Jun 2026 20:57:38 +0000
ROA not after:            Fri 11 Sep 2026 20:57:38 +0000
asID:                     32024
IP address blocks:        2607:69c0:7fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6d:ad:06:d4:99:1a:dd:b2:6c:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Jun 13 20:57:38 2026 GMT
            Not After : Sep 11 20:57:38 2026 GMT
        Subject: CN=20ecf889-e304-4112-910c-60d73389987a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:28:e0:9c:22:e2:1b:d6:c7:54:a4:ce:a3:
                    92:04:a9:f5:5b:01:74:85:da:3f:23:9d:bc:77:a1:
                    d6:3d:b2:c6:8f:5d:8c:c5:ac:e7:bb:6c:4e:77:87:
                    9c:04:89:2e:96:72:c4:aa:f3:fc:4f:a8:c3:75:41:
                    6e:1f:3a:77:93:c6:e5:6e:17:b9:03:38:95:0a:c5:
                    cb:e1:8e:d8:ad:98:00:00:35:79:b6:83:f4:03:05:
                    c1:92:d4:07:46:14:88:c2:d5:cf:f7:24:63:68:87:
                    3a:75:90:39:46:0f:d1:c8:91:1c:5f:f0:6a:80:ed:
                    d4:20:be:5b:6d:49:ea:9e:1e:2b:97:ab:0e:9e:af:
                    14:26:9c:72:eb:bd:77:37:3a:97:80:0d:e8:01:bf:
                    96:b6:79:14:e4:b5:6e:06:ad:73:75:b7:16:b5:45:
                    8e:2b:d8:5c:97:e4:dc:f4:d1:c5:64:5a:6a:57:ad:
                    18:0b:7e:b2:36:a8:53:91:0c:e2:f9:3e:cb:0a:3d:
                    72:d3:5c:c7:68:07:1e:89:34:0c:9c:34:dd:38:7c:
                    1d:83:5b:cf:67:44:37:b9:9e:12:c5:b1:a9:ac:a1:
                    9d:03:e5:10:31:af:7e:65:57:66:3c:48:1f:c1:98:
                    8f:9c:0d:e7:7a:85:9b:b3:c5:13:da:d7:38:3e:ce:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:37:1B:8B:C0:C9:4B:26:8D:70:00:D8:67:FE:7D:49:4A:22:2B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/e9dc3a30-7386-3e84-9584-970f4018f4fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:7fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b4:a4:23:44:86:49:7f:b6:0f:67:96:95:cb:4b:da:cd:35:
         10:04:df:75:c3:3e:b7:88:71:6b:5b:32:7d:ce:15:58:96:55:
         db:af:93:01:77:98:97:80:ca:31:fa:8e:3a:15:4c:64:a5:b0:
         79:70:69:d8:cf:a6:39:5d:7c:05:dd:74:74:88:64:52:7e:08:
         1f:ef:ec:b3:92:e1:ff:07:d7:43:3d:1f:f3:ad:28:e6:1e:af:
         c6:7e:55:61:14:78:df:80:da:c3:fa:93:18:dd:4d:df:95:bc:
         64:9a:44:13:61:3f:68:5d:3b:d5:72:3c:0e:6b:87:e2:83:c0:
         08:21:23:44:52:51:0e:11:f1:d4:20:fd:fb:cc:9f:84:d9:2c:
         b9:ad:05:fb:08:f2:cc:70:37:76:f1:dc:b6:ee:f0:ef:42:df:
         47:a3:71:4b:fb:8f:0e:ee:d6:2f:8b:22:8c:75:90:cb:a8:92:
         c9:21:e0:a0:1d:67:1b:d2:cb:0a:28:b7:24:9e:cb:eb:fd:d2:
         07:eb:af:79:08:83:0d:01:0b:3a:0e:85:ba:ef:71:27:5b:54:
         8e:cf:97:07:44:f2:97:0f:3e:9e:be:57:cc:60:cd:67:e1:4d:
         1a:1f:5e:93:30:2c:77:93:de:48:39:97:13:03:9a:50:5a:db:
         c1:9b:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:19:41 2026 by rpki-client