Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/590a989d-0026-3c8a-9651-54349e958a6b.roa
File:                     590a989d-0026-3c8a-9651-54349e958a6b.roa (raw, json)
Hash identifier:          +YcSOPB6bALw5RQVOiJ6mqydgoyAtX1xzHEGAM7Bgig=
Subject key identifier:   E5:26:2D:1B:67:F9:60:9D:24:8F:6F:AB:AC:FF:6B:74:3D:85:DF:2D
Certificate issuer:       /CN=3bb72fa3-359e-464d-be35-978a12d62998
Certificate serial:       010D0C9F4328584E36D677603E5C2B505A92B400
Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/590a989d-0026-3c8a-9651-54349e958a6b.roa
Signing time:             Thu 18 Jun 2026 16:14:17 +0000
ROA not before:           Thu 18 Jun 2026 16:14:17 +0000
ROA not after:            Wed 16 Sep 2026 16:14:17 +0000
asID:                     5009
IP address blocks:        2605:e300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:d6:77:60:3e:5c:2b:50:5a:92:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998
        Validity
            Not Before: Jun 18 16:14:17 2026 GMT
            Not After : Sep 16 16:14:17 2026 GMT
        Subject: CN=5d21bc3d-3c9b-41ce-8a31-3f6f316677c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:d7:11:b2:f8:78:1d:f5:13:2a:8e:8d:56:
                    c8:3e:d9:c1:1e:2a:0a:6c:d8:ff:38:00:47:d3:8c:
                    b9:d3:78:7f:df:53:0d:ce:4f:8d:1e:5f:fb:71:e9:
                    52:22:46:7f:72:f6:46:05:af:c1:eb:61:a2:7d:2f:
                    a7:6c:d7:49:d1:1e:41:27:fa:f1:ee:a6:d0:d2:f4:
                    a6:33:48:f7:07:7a:62:9b:2f:b1:20:4f:3c:93:b0:
                    b5:b6:2e:dd:ae:9d:f0:32:41:54:48:2b:2e:af:08:
                    2f:66:a7:f1:d2:84:f9:c9:bf:40:1b:c0:8c:1b:59:
                    de:d5:b7:ff:7a:2f:1e:61:79:b2:77:56:03:d3:94:
                    8f:ef:1f:d2:19:90:07:61:48:cb:7f:37:50:c1:8b:
                    87:ec:d9:bd:23:0a:d4:99:b0:70:11:84:7d:3a:42:
                    f1:94:80:63:1d:3e:4c:e4:3f:b7:9e:6e:7b:44:64:
                    46:dc:d6:5c:6d:90:8a:3e:86:69:8e:05:ff:ba:d2:
                    54:bc:29:d5:3c:16:fc:5e:3d:fe:7f:73:08:a7:95:
                    6f:be:6f:b7:24:f6:b8:24:9b:19:26:78:b0:73:7d:
                    6f:f6:5d:f6:1d:3f:8c:90:59:eb:1d:e9:ce:20:5c:
                    b2:9e:ab:eb:b8:1b:69:2c:6c:fa:d8:bb:9e:f6:91:
                    85:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:26:2D:1B:67:F9:60:9D:24:8F:6F:AB:AC:FF:6B:74:3D:85:DF:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/590a989d-0026-3c8a-9651-54349e958a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl

            X509v3 Authority Key Identifier:
                keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:06:19:9e:e3:33:9a:ea:db:30:68:0c:6b:c5:0b:a5:fb:12:
         62:23:cf:75:13:8b:bc:f0:e2:ca:27:c0:c5:cb:17:17:73:01:
         e4:30:43:0f:09:2b:42:9b:1a:e2:0c:40:bd:de:bb:37:3c:43:
         3f:9b:43:64:33:a1:83:84:bb:94:20:6a:6f:9a:cf:fa:8d:8c:
         b7:61:3d:3e:d2:f7:cb:51:c5:38:2d:fb:e2:33:f1:81:26:ab:
         82:b2:53:b5:f1:04:8b:31:1c:df:fc:9a:2b:ae:61:c5:49:91:
         63:3d:eb:21:ed:80:ab:23:4d:dd:20:19:12:da:f8:3b:6f:3d:
         97:7d:27:e3:d0:15:e8:dd:05:d4:f1:8a:11:ad:e2:4b:d0:3b:
         34:f8:06:4c:e4:4c:d8:43:0e:1f:1f:14:a4:7a:93:4e:c7:3f:
         c0:35:3d:77:44:f8:b4:e3:a8:7a:46:b1:08:3e:78:43:c1:34:
         ca:d0:7b:3e:c4:65:42:37:4b:f6:dc:6e:88:ac:49:d0:f6:42:
         d0:32:49:b0:58:8d:f1:01:65:df:b3:7a:42:5d:ad:4b:94:6d:
         10:4d:a0:13:52:4d:8f:ee:89:1e:7b:5c:2a:7f:ec:5a:36:71:
         2b:4b:07:37:e9:87:bd:b3:3a:b0:e0:01:c9:3f:37:a2:2d:0c:
         10:4b:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:13 2026 by rpki-client