Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa
File:                     0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa (raw, json)
Hash identifier:          IooeQPfXs6/VaOOw0XN7lN6IS4lzgMqFpXoYLLv+QNY=
Subject key identifier:   2B:B3:CC:49:DF:10:5D:68:8E:55:1B:70:AC:85:11:B0:E4:31:2F:53
Certificate issuer:       /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6
Certificate serial:       010D0C9F4328584E3A2F22D94D4A1B49B73A2C80
Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     14585
IP address blocks:        2604:65c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:22:d9:4d:4a:1b:49:b7:3a:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=95535f1e-56ac-4de9-8a9d-413e090c75c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:8c:a5:2c:c0:48:42:9f:ac:82:fe:f2:6c:
                    9b:2c:1b:6a:ac:0a:bb:78:b9:80:11:01:6f:36:f3:
                    e5:b6:8a:f9:97:22:91:22:f2:de:16:81:54:84:b5:
                    99:ad:30:26:d7:e5:36:a3:d5:cf:2d:4c:5d:74:78:
                    53:6e:51:1b:83:2e:e3:0c:28:ac:81:37:0e:d7:de:
                    de:ef:dd:d2:75:e6:97:8f:4e:c0:0f:06:12:9c:44:
                    fc:63:89:11:62:3a:fc:ea:2f:1f:7f:d0:5c:97:97:
                    5c:b1:72:c4:ff:ec:0c:8e:4f:a7:9b:d9:f8:cf:d6:
                    b9:65:e9:02:5f:95:3d:28:8f:8c:e4:5d:78:fa:c4:
                    05:9b:0d:7c:ad:d7:3a:a1:62:7c:f9:7c:b5:6c:e2:
                    0b:a1:21:88:2f:23:5f:c0:0d:7f:89:f7:be:98:94:
                    24:b6:36:d1:19:12:84:10:03:46:5c:00:77:33:70:
                    32:af:a5:5b:55:80:bb:15:eb:5f:67:3c:77:a8:11:
                    28:7e:af:b7:16:2d:58:2d:6c:41:63:21:ef:1d:e9:
                    7c:67:14:7b:db:bf:b8:f3:af:d8:10:ac:84:5a:60:
                    3e:da:0d:ed:86:d1:1f:7a:17:86:dd:cf:af:13:83:
                    ef:b5:77:4e:7c:08:68:93:fa:2c:be:44:c2:28:1e:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B3:CC:49:DF:10:5D:68:8E:55:1B:70:AC:85:11:B0:E4:31:2F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl

            X509v3 Authority Key Identifier:
                keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:65c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:0b:99:5b:a9:53:31:4e:d9:c8:51:87:7e:2b:1a:4e:cd:
         db:cd:fc:fb:14:42:68:20:83:d0:8c:68:2b:7b:56:eb:98:25:
         3c:80:94:73:1e:7a:0f:a0:e8:8b:dd:be:9a:58:e3:6c:5d:18:
         f1:74:3f:68:38:aa:ab:14:aa:3c:1b:5f:84:fd:a2:dd:ec:0c:
         eb:88:bf:9d:e2:46:4e:a3:21:43:29:20:2f:a2:8c:44:ba:c1:
         de:f3:28:1d:1e:39:c4:18:01:27:e6:e4:7b:e3:12:65:ff:bf:
         65:70:d9:0a:de:35:6d:09:09:c2:53:cb:52:91:2c:0b:7d:f2:
         af:db:6f:72:5c:bf:b7:b0:79:52:d0:c2:f1:dd:4c:24:ce:ec:
         ae:79:eb:e3:6e:ce:06:c4:c2:21:bc:ac:2a:78:f6:d0:d9:6c:
         c8:f7:07:c4:39:d8:d3:a0:38:c0:1f:49:49:93:e2:8e:7b:42:
         87:4c:a9:c0:cc:9f:64:0c:57:3b:d6:19:cb:0d:6b:08:d6:28:
         80:23:63:ad:9b:0b:bf:23:a6:e8:27:b7:a3:86:82:35:57:f3:
         cd:ad:fb:b7:bb:c5:66:ea:47:dc:c1:3e:a3:46:68:93:96:42:
         f8:f5:f1:fa:a1:f7:01:5c:23:43:13:4b:49:6d:36:9f:32:f4:
         dd:06:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:10:07 2026 by rpki-client