Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
File:                     1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa (raw, json)
Hash identifier:          dcw2ZibaT61TZirSU29kyoc16NDDCS0OPFG3XVgQ7ow=
Subject key identifier:   58:E6:69:AE:45:77:15:1E:23:CF:DE:DA:40:C0:64:14:50:F3:DE:B4
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584E2AD4693135811CF3512C80C0
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        2604:ba80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:69:31:35:81:1c:f3:51:2c:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=bea86195-963e-418d-a019-3fefd24e4b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:e8:ff:db:81:2d:74:49:b3:48:80:38:9a:
                    e2:f5:f4:d5:ee:85:30:b3:5f:f9:6b:45:6f:49:50:
                    10:67:9d:c8:70:24:57:b0:60:48:13:4f:48:b0:9f:
                    e0:4a:05:d0:38:2b:bb:1a:1c:bf:ef:60:07:2b:ec:
                    f0:e2:b4:c7:85:ae:41:a9:69:14:e5:ac:92:c2:1f:
                    c6:85:71:a9:1f:e3:d6:32:42:4b:c1:e4:67:ae:4c:
                    9a:f2:50:89:93:21:19:33:53:bd:1d:5e:6f:0c:7e:
                    15:ad:41:0f:78:ed:32:02:21:7e:dc:c1:ab:bd:06:
                    59:71:c0:71:2d:ef:44:8d:09:89:0c:b9:3b:d6:f5:
                    c1:50:ea:4f:27:9f:59:90:2b:9b:7b:0e:8b:a4:63:
                    77:5a:95:5c:98:73:39:6c:5c:f2:e2:d3:ce:a3:27:
                    73:59:81:62:25:c9:e1:ec:e7:48:22:72:2a:2f:68:
                    ea:f9:8a:c4:f9:88:e8:6d:25:2f:0d:d8:00:08:18:
                    34:fe:82:5e:07:d4:03:a1:09:cc:49:f9:2a:6f:c2:
                    0a:cf:f3:63:81:4d:4b:c7:ae:f6:ed:7d:2d:77:67:
                    60:2e:f3:c0:34:46:ef:0f:bf:67:46:8d:05:c7:d9:
                    62:16:fb:e6:27:29:53:a2:23:10:6c:44:25:d5:a8:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:69:AE:45:77:15:1E:23:CF:DE:DA:40:C0:64:14:50:F3:DE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:6f:17:2c:8d:fa:2f:1e:d1:74:d7:f0:0c:17:52:ac:07:
         5f:43:56:74:b5:e5:f4:6f:70:c9:e2:a2:6b:e6:d8:10:95:e5:
         57:69:9f:c4:87:65:75:b0:a1:b2:6e:43:51:fa:f8:54:e6:fd:
         88:c8:5a:b1:f9:c4:ea:bc:2d:9c:cb:a4:65:89:4d:cb:b1:f4:
         00:c7:7f:08:3a:c6:ab:f6:52:fe:94:0f:87:20:85:c8:79:6e:
         d4:21:b0:78:d3:2d:b4:70:f6:1c:ef:75:7b:99:7e:56:29:c7:
         45:86:9a:42:b5:80:38:57:87:18:2d:3d:82:a7:fb:f4:bc:ad:
         d6:65:ae:05:02:0e:51:09:ef:a3:eb:18:ce:45:c0:92:5f:5a:
         0c:39:2c:2d:9a:1a:18:d5:e3:c4:b6:8f:91:19:ee:26:23:ca:
         07:8b:0c:a5:1b:a8:9e:d4:9a:a3:87:2e:65:13:02:6e:31:32:
         f8:e5:8d:fb:d1:ce:e8:5c:2e:fd:a3:e6:ab:e2:50:4d:ef:98:
         40:21:e9:78:23:64:38:52:16:91:4b:8e:a5:9a:a9:9d:d7:d2:
         ef:e0:5a:64:85:6d:95:9c:98:f5:d8:2c:2e:4c:72:df:ef:70:
         e2:20:cd:9c:3d:d7:40:ee:86:25:68:59:66:71:5c:84:08:27:
         2a:41:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:17:20 2026 by rpki-client