Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
File:                     d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa (raw, json)
Hash identifier:          o0X+ZDa7UOlIWC4G/6oQTwt6sM6ViSV/puHx8EEe2vE=
Subject key identifier:   83:9C:8E:68:B0:FD:40:75:26:04:D7:EB:66:D8:F8:F6:FA:83:FA:F9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E31CF1CAD7C175D9929385AC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a40c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:1c:ad:7c:17:5d:99:29:38:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=18a0d700-2488-4da4-a34b-9596881751fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:6f:c0:40:81:be:9a:25:d9:74:65:c7:19:
                    00:d2:c6:97:9f:56:9c:2e:d6:87:43:dd:42:79:ea:
                    e3:82:87:8c:e0:76:b1:7e:f1:6d:5c:80:1a:f8:f8:
                    25:df:fe:37:cb:ad:8d:d0:b0:21:65:aa:14:d3:86:
                    89:fd:14:fb:ce:9c:8d:4f:04:d4:ef:72:95:ed:07:
                    f1:92:56:c3:0b:4f:7c:ad:e2:fa:77:db:e0:b5:81:
                    8c:06:10:10:65:bf:7a:13:fd:f9:8d:09:3a:a2:f8:
                    21:24:92:97:bb:e2:26:03:30:cb:da:3c:2d:cd:cd:
                    bb:de:e9:ae:11:f4:96:a3:3e:f6:5b:30:48:bc:ed:
                    8e:c6:a6:8f:f2:f0:84:e1:20:e5:77:cd:d6:43:2d:
                    ba:7b:1c:ca:7c:b6:ec:b5:35:ee:fe:b8:a6:b8:a2:
                    ab:8f:32:dd:b1:c0:85:93:0a:57:4c:f4:ec:ba:f0:
                    5b:90:6c:c9:ed:d0:1f:43:a6:77:25:fa:c4:bf:3a:
                    29:f8:ee:eb:70:45:38:14:62:6b:6a:6a:32:dc:a8:
                    d8:0f:09:65:fd:aa:48:1c:86:47:22:71:97:85:26:
                    eb:dd:a3:8a:28:ea:d6:e1:29:14:b6:5f:08:51:58:
                    21:21:34:c4:d0:9d:f7:56:ad:58:23:44:c3:cd:2b:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9C:8E:68:B0:FD:40:75:26:04:D7:EB:66:D8:F8:F6:FA:83:FA:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3a:c1:c6:19:80:68:84:89:d6:7a:7c:50:61:3b:fd:36:ee:
         94:e4:12:60:88:53:dc:be:ea:23:f7:2e:32:29:3d:f1:78:c9:
         66:89:c1:62:0c:75:27:b1:6c:8d:d6:c2:9d:66:48:d3:19:0e:
         18:01:6b:cf:06:36:c4:33:e9:58:86:94:0d:16:c4:50:fd:8b:
         bd:73:68:86:c4:06:b7:9f:50:01:e2:97:2c:09:a4:16:e1:0b:
         78:57:38:a3:53:c8:ec:03:c2:c0:83:60:e2:0d:db:a3:f6:db:
         42:eb:d8:f1:28:20:17:e2:b9:0d:c9:e2:42:f9:19:cd:3a:64:
         a4:f5:f6:5a:6c:eb:70:fe:98:53:38:a5:23:e0:61:1e:5c:9a:
         f3:5f:f8:a4:e0:10:e9:87:7a:9d:35:c0:3b:7d:64:9c:d6:5b:
         d0:aa:c1:1c:fa:a5:ea:0e:50:68:a3:f5:5f:28:75:9c:8d:b1:
         dd:c1:2f:9a:d8:e7:38:79:43:33:0d:fd:13:5c:ca:99:97:c4:
         69:e3:54:20:90:49:7e:83:38:b0:84:59:7b:a6:8e:e6:3e:82:
         4f:87:9f:a3:28:cc:3a:5a:9a:8c:1d:e9:28:a3:23:a3:e5:cd:
         89:2d:0c:7a:6d:cc:ed:56:a7:c6:85:a6:22:63:a1:b7:e1:33:
         30:05:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:19:36 2026 by rpki-client