Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/90427795-f7e4-3dd7-9e35-88f952c9aa09.roa
File:                     90427795-f7e4-3dd7-9e35-88f952c9aa09.roa (raw, json)
Hash identifier:          ed435DSemq+tZMXipkJNejcivd3bNoUf6Xh+1+PvoU0=
Subject key identifier:   6D:AC:1B:E7:85:C5:31:8E:5F:AC:17:E4:C8:46:11:F3:E6:A8:B4:ED
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584E0A6FF2E73FEFA2DBC1E07800
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/90427795-f7e4-3dd7-9e35-88f952c9aa09.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     10390
IP address blocks:        2620:10f:400f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f2:e7:3f:ef:a2:db:c1:e0:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=d7a6308e-3ffb-4189-9bb3-514dacafdafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:73:ef:a6:8c:8a:b1:32:5a:da:61:a0:f5:
                    9b:f4:d1:b2:42:4b:2c:40:f5:38:6e:f6:7a:4b:61:
                    3a:a4:a5:bd:9e:dd:58:d6:46:d5:12:e6:f6:cc:8f:
                    e3:84:fc:b7:3f:25:1d:c6:07:5c:63:64:7b:b1:18:
                    e8:20:95:32:3c:a0:bf:15:23:f2:1d:3c:02:85:7c:
                    bb:1f:73:d8:fa:6b:b3:f0:d7:aa:be:3b:f7:f6:ed:
                    22:81:de:1e:f9:2f:3b:7e:cc:2b:6b:02:e3:a2:12:
                    e4:57:9c:74:a6:33:15:6e:f8:05:b2:4b:49:1a:28:
                    07:68:76:5c:b5:3f:01:54:a1:1d:aa:1a:f9:15:71:
                    25:32:10:6d:20:a5:02:9d:c8:26:bf:25:20:f6:ba:
                    c0:c0:59:74:48:1f:f0:63:15:e6:92:40:19:fb:3b:
                    70:49:7f:1e:5a:aa:f7:63:ce:9c:ca:18:26:41:96:
                    de:f4:88:df:81:fe:5d:4d:14:53:93:f8:99:9b:bc:
                    a6:36:04:5c:71:28:06:cc:21:e8:d1:a8:0d:db:f8:
                    84:b7:9d:65:90:72:7a:28:cb:66:6f:73:ad:0d:f3:
                    29:df:84:4d:87:8e:a1:96:73:a8:c9:62:04:73:09:
                    b9:44:66:fc:1a:12:3e:60:9c:0a:42:92:09:3b:1a:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AC:1B:E7:85:C5:31:8E:5F:AC:17:E4:C8:46:11:F3:E6:A8:B4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/90427795-f7e4-3dd7-9e35-88f952c9aa09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:400f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:27:e9:27:5d:af:a8:23:71:7f:72:43:f7:3a:75:f9:89:
         16:5b:95:a4:a5:9b:7b:e9:f1:b1:d8:79:cf:2c:2e:b3:7f:65:
         7e:28:9c:0e:b3:aa:a6:42:a2:80:e5:e3:86:e7:9d:af:b2:27:
         45:22:45:40:82:d7:9c:ae:db:8d:8c:7b:63:5c:0c:74:1c:87:
         52:21:cd:6b:f3:91:e7:fd:d4:c1:e8:d8:7a:c4:74:59:4a:a3:
         74:2f:92:95:93:23:6b:09:e1:bf:d2:29:db:19:c8:b3:cf:a2:
         b8:2c:76:34:03:64:67:45:7e:0e:bd:84:4f:d6:ff:2a:53:01:
         70:29:b4:ae:3b:13:0d:76:7a:c5:25:3a:76:c6:d9:63:0b:15:
         21:ba:d6:d0:fa:82:2d:1c:c2:f1:a9:d1:ee:d8:51:2e:58:ad:
         f1:36:f8:36:a8:2f:ae:52:08:3b:8a:50:a4:9e:06:b4:a6:25:
         77:9a:79:8b:89:16:00:56:d4:98:c0:2f:d7:de:99:e8:76:d5:
         1e:a9:47:11:1c:6a:dd:e0:02:c8:3c:d6:b8:d0:3a:ff:e1:65:
         d6:78:23:10:51:19:28:3d:1e:4b:2d:8e:ce:02:8b:03:8c:69:
         c6:c3:ce:00:42:10:b6:a2:2c:a9:e8:51:a7:51:8a:29:2d:e2:
         8e:df:74:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Kb/LnP++i28HgeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
ZDdhNjMwOGUtM2ZmYi00MTg5LTliYjMtNTE0ZGFjYWZkYWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iVz76aMirEyWtphoPWb9NGyQkssQPU4bvZ6
S2E6pKW9nt1Y1kbVEub2zI/jhPy3PyUdxgdcY2R7sRjoIJUyPKC/FSPyHTwChXy7
H3PY+muz8Neqvjv39u0igd4e+S87fswrawLjohLkV5x0pjMVbvgFsktJGigHaHZc
tT8BVKEdqhr5FXElMhBtIKUCncgmvyUg9rrAwFl0SB/wYxXmkkAZ+ztwSX8eWqr3
Y86cyhgmQZbe9Ijfgf5dTRRTk/iZm7ymNgRccSgGzCHo0agN2/iEt51lkHJ6KMtm
b3OtDfMp34RNh46hlnOoyWIEcwm5RGb8GhI+YJwKQpIJOxp4EwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG2sG+eFxTGOX6wX5MhGEfPmqLTtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOTA0Mjc3OTUtZjdlNC0z
ZGQ3LTllMzUtODhmOTUyYzlhYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABD0AP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALOKJ+knXa+oI3F/ckP3OnX5iRZblaSlm3vp8bHYec8sLrN/ZX4o
nA6zqqZCooDl44bnna+yJ0UiRUCC15yu242Me2NcDHQch1IhzWvzkef91MHo2HrE
dFlKo3QvkpWTI2sJ4b/SKdsZyLPPorgsdjQDZGdFfg69hE/W/ypTAXAptK47Ew12
esUlOnbG2WMLFSG61tD6gi0cwvGp0e7YUS5YrfE2+DaoL65SCDuKUKSeBrSmJXea
eYuJFgBW1JjAL9femeh21R6pRxEcat3gAsg81rjQOv/hZdZ4IxBRGSg9Hkstjs4C
iwOMacbDzgBCELaiLKnoUadRiikt4o7fdOs=
-----END CERTIFICATE-----
Generated at Sat Jun 6 18:32:20 2026 by rpki-client