Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
File:                     fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa (raw, json)
Hash identifier:          VHDR0iS7957gwhYAeoZ1VeLjexuPqu5RdluhRdaM2rA=
Subject key identifier:   88:83:83:E9:E7:07:0D:E2:B8:34:FC:75:5A:69:15:3D:2B:8D:4C:5E
Certificate issuer:       /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Certificate serial:       010D0C9F4328584E4559ED01F1F9EE81C0544F80
Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     0
IP address blocks:        2001:505:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ed:01:f1:f9:ee:81:c0:54:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=006adca0-2f96-4eea-8153-998361f3b52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e7:ec:1e:89:a6:a0:ba:45:b4:40:d1:c2:c8:
                    74:1b:7c:e0:ff:b6:97:7b:5d:64:95:0f:7f:f6:fb:
                    0c:0d:1c:05:01:0c:4c:03:cd:fb:50:1b:78:5e:a4:
                    50:fc:29:8e:a4:d9:24:7d:c8:c6:8c:da:5e:e9:f9:
                    72:81:46:6c:6e:6b:c1:c2:4d:b7:15:7f:0b:52:86:
                    a9:66:dd:53:25:5e:79:c0:a0:ea:85:dc:ba:ee:1a:
                    9c:12:28:c7:46:a6:2e:51:26:21:6a:b1:00:aa:6e:
                    51:0e:6e:c1:8e:2f:2f:cc:e9:73:31:47:9b:3b:6c:
                    db:29:c5:6b:98:b5:03:51:32:1c:61:c1:7b:f8:a3:
                    91:d1:e9:fa:b6:1f:d6:33:b5:21:37:96:74:91:fb:
                    05:5f:69:74:25:06:89:44:fb:2f:85:80:72:b9:0c:
                    36:7c:21:1d:0c:e7:15:cb:b4:58:05:06:57:4c:f3:
                    1e:bb:d8:82:f9:be:27:71:e9:6a:75:1f:e8:8a:08:
                    de:e9:e5:ca:10:24:ac:27:20:e2:9d:d1:ac:12:64:
                    e7:2c:d5:31:c3:ab:d9:df:f0:4b:7b:f2:d7:d7:b7:
                    9f:2d:f3:05:d4:b0:69:3b:af:16:aa:78:62:4e:5e:
                    54:2d:0e:b5:b8:38:84:a4:c5:47:17:9e:a0:8a:95:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:83:83:E9:E7:07:0D:E2:B8:34:FC:75:5A:69:15:3D:2B:8D:4C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl

            X509v3 Authority Key Identifier:
                keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:505:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:cf:51:59:c6:ee:c9:22:71:00:b8:67:a7:cb:ba:e3:fd:ac:
         a3:cb:ec:6a:f1:57:68:b9:08:76:13:d4:4a:24:cf:62:47:b3:
         12:b5:dc:b5:73:c3:c3:09:f8:2e:67:a1:1a:7c:e0:f3:97:95:
         1e:52:9e:80:24:c9:f7:88:29:97:e1:9d:e6:0b:e4:9c:b9:0f:
         ea:8a:23:8d:39:1d:15:77:85:55:c0:f3:16:27:0b:84:d1:f4:
         e3:1e:e2:ee:4f:e2:ae:8b:3f:6d:a9:19:d3:45:b4:06:f3:99:
         2c:96:f5:a9:da:e1:22:0c:3e:7a:66:17:cb:18:42:a1:07:0c:
         d9:9e:12:0e:45:05:2d:d2:f9:61:b4:c7:31:e7:36:ed:4e:c4:
         e3:bc:47:f8:9d:72:8a:e8:60:bb:3f:29:2f:92:09:91:6c:48:
         3a:db:a7:85:49:62:9a:3d:1f:4a:3d:95:2a:24:dc:92:db:7e:
         2d:f2:23:4b:16:01:6c:0c:95:a3:02:22:af:25:a7:4b:d2:69:
         c4:c4:cf:03:8a:53:c4:b0:60:6e:2b:62:17:28:17:22:9d:56:
         eb:d6:4c:11:4d:de:72:c3:29:87:1f:43:e8:18:4a:d0:cc:70:
         84:fb:f3:b6:2c:21:31:aa:14:8c:a3:ae:49:c8:a6:ea:a2:eb:
         2a:a6:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:46:09 2026 by rpki-client