Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/e3271df3-e4db-3a8f-990f-9b55a011bef4.roa
File:                     e3271df3-e4db-3a8f-990f-9b55a011bef4.roa (raw, json)
Hash identifier:          GUFRcfay/aFELOjwuTznNydgk1HUYNP87HF+ydKyetk=
Subject key identifier:   64:DF:92:4C:98:02:BD:25:60:D8:CB:73:1E:D3:23:44:3E:28:EF:5A
Certificate issuer:       /CN=ad859ed3-4b48-4f7f-8433-13233c0a7571
Certificate serial:       010D0C9F4328584E35FF0D4992D7BC2FE5E97200
Authority key identifier: 15:93:DE:6A:9B:08:2E:56:BD:BC:18:B3:BF:CE:A1:4C:AD:CD:CB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/e3271df3-e4db-3a8f-990f-9b55a011bef4.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     22915
IP address blocks:        2620:fe:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/ad859ed3-4b48-4f7f-8433-13233c0a7571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/ad859ed3-4b48-4f7f-8433-13233c0a7571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:0d:49:92:d7:bc:2f:e5:e9:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad859ed3-4b48-4f7f-8433-13233c0a7571
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=3ab054d2-ca0d-4b22-aa3f-d4c6a4258b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:33:0d:a9:3b:61:f0:71:82:e3:4f:06:9d:
                    c4:32:fa:a6:de:93:b7:6f:58:c3:a7:35:85:5a:2c:
                    02:1f:14:77:57:89:24:42:e8:15:76:79:0d:3a:89:
                    db:ce:f2:03:e7:b8:d4:5b:36:48:91:9d:38:81:90:
                    1f:d3:6d:39:69:ef:37:9a:21:9c:b0:6c:96:1e:5a:
                    b3:d2:c7:29:0c:e1:5a:c5:f3:5d:32:96:56:a5:f7:
                    e3:3b:14:fd:45:62:0f:ee:5d:16:18:24:8f:44:bc:
                    88:99:9c:3f:ed:67:c4:59:65:7f:5a:c0:78:74:33:
                    73:3f:23:c5:23:f6:52:79:c6:67:87:d0:b4:0f:ad:
                    4e:96:60:cd:ba:61:9c:0a:f6:52:10:15:d8:5e:4e:
                    26:17:b8:5c:f5:0e:bf:58:ea:06:4e:bb:df:ea:6c:
                    13:1b:57:69:87:2c:c7:39:db:8e:08:ec:79:cc:b1:
                    aa:d4:33:4d:16:09:16:0e:d2:a6:da:4a:81:8d:17:
                    cd:9b:ca:53:dd:42:7f:f9:6f:2f:dd:12:28:d6:e2:
                    15:61:14:23:22:31:57:48:09:a1:77:96:a4:32:07:
                    a7:b7:3e:bc:57:d2:95:40:f5:d7:2c:82:65:d6:5e:
                    9e:0e:dd:03:e4:f5:a7:85:13:b4:74:c5:3c:fb:6e:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:92:4C:98:02:BD:25:60:D8:CB:73:1E:D3:23:44:3E:28:EF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/e3271df3-e4db-3a8f-990f-9b55a011bef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/ad859ed3-4b48-4f7f-8433-13233c0a7571.crl

            X509v3 Authority Key Identifier:
                keyid:15:93:DE:6A:9B:08:2E:56:BD:BC:18:B3:BF:CE:A1:4C:AD:CD:CB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fe:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:49:ea:42:f2:65:30:38:2f:95:90:f4:29:f8:63:0d:ea:
         33:a2:87:39:df:f9:76:28:67:05:49:a4:29:ac:8d:91:e7:b2:
         b2:4a:22:a9:1a:81:3b:02:e3:1e:64:db:d5:12:53:4e:43:ec:
         d1:1c:73:03:9b:c1:6d:f1:ad:cc:c8:b6:27:5c:f3:c3:ca:c2:
         5b:96:3e:41:eb:f0:dc:28:f5:89:2e:43:8b:dc:a3:61:40:74:
         6d:5f:f1:6b:5a:14:3a:80:a9:ea:f9:ae:ed:fc:87:5d:b7:4f:
         7a:a6:f0:9f:34:69:30:85:dc:20:86:80:e7:34:30:65:6f:be:
         38:b3:63:04:20:ac:8c:cb:9e:46:19:20:c2:81:28:02:ee:ae:
         9e:25:a5:17:f7:af:17:e0:24:b2:bb:64:f2:b6:5d:bf:3c:b5:
         e9:55:21:61:6d:06:d8:40:9e:46:b4:60:14:12:45:47:e9:a7:
         a6:e6:f1:a2:b1:2b:81:57:6a:ad:f8:fd:8d:68:25:6b:08:32:
         bc:c2:1c:9d:cc:cb:0d:bb:74:f9:06:3b:ad:41:96:d6:1f:1b:
         b8:22:b0:06:18:54:01:25:7f:9e:8a:de:5d:d7:49:fa:b4:da:
         1b:3b:3f:79:d5:0b:98:69:eb:f3:6f:61:ed:bf:43:0a:a7:a8:
         ea:e4:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 01:18:13 2026 by rpki-client