Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d2ea3170-78ff-3994-b47f-a2a885311798.roa
File:                     d2ea3170-78ff-3994-b47f-a2a885311798.roa (raw, json)
Hash identifier:          cUsorMgz5sJf/35h+R9jorQuY8iPxxHVbYLjkdVwycw=
Subject key identifier:   A5:FE:31:41:31:04:56:3F:1A:9E:52:D6:5F:C4:E2:F6:A4:7E:97:EC
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E3B946D28DC31D04CCCEC6340
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d2ea3170-78ff-3994-b47f-a2a885311798.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     62610
IP address blocks:        2604:980:e03d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:6d:28:dc:31:d0:4c:cc:ec:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=5bcc4ea7-b7bc-4107-83b5-011ab7542602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7b:a0:11:0f:34:c1:19:44:96:68:b4:8c:81:
                    9d:25:e7:d0:f4:84:8a:bb:24:1e:fe:8a:4c:31:79:
                    91:3f:53:4b:67:50:9b:3d:4c:8a:e2:74:8b:e2:ac:
                    f7:6f:4f:1c:81:80:61:70:72:84:21:eb:62:06:1e:
                    75:c1:dd:37:94:49:53:7f:c1:6d:1c:ed:8d:3c:ee:
                    53:79:2b:37:f5:d9:e3:5e:7a:73:0c:07:6e:ed:4e:
                    ad:c1:c3:fa:96:a8:b3:ad:12:1e:ff:ce:b5:57:19:
                    ca:45:d4:7c:60:cd:64:2d:d0:e6:04:f2:93:d3:8c:
                    e1:2f:04:0f:6e:f4:9b:08:9f:79:4f:60:ff:ab:46:
                    64:24:f4:b3:fb:ab:cc:b7:d6:a3:4d:00:16:c1:9d:
                    57:0c:63:e3:31:d3:5b:ad:a5:4b:c7:1f:36:ee:27:
                    9c:4e:cb:16:ea:6a:32:d9:3e:6a:44:e1:63:de:b1:
                    50:5a:13:a4:41:3d:b1:e7:c8:2a:fd:00:e2:f3:5c:
                    3f:c5:37:bf:45:1f:94:16:4d:b8:f0:a4:fc:ce:6b:
                    f3:dd:75:6e:1a:3f:48:f7:3a:89:86:df:e0:38:8a:
                    5f:31:8f:00:44:b7:bf:41:b1:0e:30:06:df:83:c3:
                    f3:8a:7b:58:65:8a:73:ab:4b:84:2a:9d:d7:f0:56:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FE:31:41:31:04:56:3F:1A:9E:52:D6:5F:C4:E2:F6:A4:7E:97:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d2ea3170-78ff-3994-b47f-a2a885311798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e03d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:90:ac:67:01:50:63:18:41:9b:35:1a:69:0c:1b:65:9a:
         ef:88:05:60:aa:fe:db:57:bb:5d:37:e8:77:29:64:6f:ff:37:
         be:ce:61:9b:8f:6e:4c:a9:5a:a7:a2:3d:38:e0:b3:00:66:65:
         a3:fc:c4:c3:d5:5e:bb:d3:5a:7f:68:9a:00:b6:eb:84:b9:d4:
         50:a5:c1:f9:43:9c:25:b2:42:cb:ab:05:aa:db:15:53:0a:42:
         9f:74:29:63:14:e2:9a:0b:18:48:47:73:d6:5e:b9:93:f5:ae:
         8a:e4:52:00:a2:c5:be:74:59:a0:06:9e:c2:c5:b0:13:27:0a:
         40:21:98:b3:c5:37:2e:9b:97:6b:aa:28:eb:30:a7:87:4b:2e:
         ac:63:d5:99:24:9b:80:d0:4e:44:26:3e:54:13:7e:ef:61:34:
         38:1f:d7:44:35:fd:53:48:c9:eb:c2:d7:d6:6a:9d:f0:dd:b5:
         46:cd:91:40:a6:60:af:01:c9:d5:08:33:e2:76:48:b3:c2:d6:
         01:b9:c8:47:fd:f5:e3:b1:e6:d6:f1:5f:94:cf:a2:bc:cc:fc:
         bb:ac:2c:67:09:af:2c:69:0e:84:00:82:14:a3:51:21:c9:8c:
         7f:f9:65:a3:39:68:5a:3a:b4:12:26:5d:87:1e:78:c1:85:c4:
         b5:d3:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:59:03 2026 by rpki-client