Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa
File:                     14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa (raw, json)
Hash identifier:          REy4DmJjtZEsMB360rMl0TOntxZYAD4enhOeKtxOiWU=
Subject key identifier:   8A:4F:5D:89:CB:65:29:44:33:06:B3:84:BE:A5:6E:48:6C:73:70:F5
Certificate issuer:       /CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0
Certificate serial:       010D0C9F4328584E4129DA3ED76C0F3F6615A480
Authority key identifier: C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     62902
IP address blocks:        2607:2540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:da:3e:d7:6c:0f:3f:66:15:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=59d4592e-f44f-48eb-b2a9-d0f42a54ccec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:6f:b4:d9:be:61:dd:56:8b:3b:0d:d0:bd:
                    c8:d3:f7:63:84:1e:ac:bd:e4:b3:88:bf:aa:b5:7a:
                    bc:38:41:b8:8a:c3:bb:7a:1e:57:ab:80:d2:cd:5d:
                    b6:2d:5a:c3:3e:76:4a:03:bc:24:bd:54:96:bd:bc:
                    24:54:f7:67:32:5b:8d:d1:23:f0:54:c4:d5:4e:f7:
                    23:46:31:06:7b:db:db:79:4a:6c:45:e5:da:d4:83:
                    9c:aa:56:1d:19:b5:fc:22:1e:58:d4:a1:04:f5:e1:
                    0e:13:54:f7:be:a2:62:eb:15:78:2b:e3:86:83:98:
                    fa:0a:cb:1d:25:cc:4c:2c:54:f5:ac:5f:c8:bb:40:
                    30:c7:39:5a:6a:d5:a9:22:f3:7e:09:fc:0f:38:72:
                    c2:97:2d:26:6e:f1:dc:b7:09:7a:58:1c:25:27:9e:
                    a3:fb:c8:c2:c3:ca:0f:c1:c1:52:1c:2f:a9:85:e7:
                    d5:3d:84:ca:96:8a:71:a2:6f:ae:30:4c:05:fd:46:
                    94:c2:0f:70:20:25:ee:b7:62:1e:70:09:52:18:53:
                    ff:7c:83:ef:d0:e6:1b:9c:05:79:80:db:a8:14:56:
                    34:f7:56:15:5e:3c:01:4f:5a:d7:ad:88:0e:43:f1:
                    0c:c2:ea:d6:74:13:17:c9:0a:0e:8a:e0:fb:ee:36:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:5D:89:CB:65:29:44:33:06:B3:84:BE:A5:6E:48:6C:73:70:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.crl

            X509v3 Authority Key Identifier:
                keyid:C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:2d:d8:7b:5d:79:7b:1b:31:75:a6:2e:64:63:d2:d2:63:
         ef:0d:7a:09:8b:0b:43:57:2a:90:3a:89:3a:90:e9:19:af:cc:
         7c:03:0d:53:84:a2:c7:c9:dd:d6:f8:e0:db:3f:e5:a2:9b:c1:
         79:58:b8:af:09:40:d6:67:00:fe:e0:69:21:8b:18:99:a3:d9:
         cf:47:72:46:56:79:c0:9a:c9:e5:d1:cb:e5:a4:46:88:31:e2:
         06:1e:e3:25:49:58:6c:72:df:59:ba:03:fb:b8:cc:0c:d8:e1:
         63:11:55:5d:82:60:bf:32:76:0a:fe:c0:b6:ce:7c:cb:7e:7f:
         13:29:20:30:ab:8c:1c:fb:46:6b:b6:b3:d0:e2:f6:1a:a0:57:
         3c:5d:8e:f3:82:78:71:4e:62:d4:78:47:d4:88:5e:fb:11:33:
         64:41:a5:b3:0e:72:7e:3b:1b:ca:66:b7:7c:0b:51:8f:82:04:
         b7:1c:5c:db:c0:d0:d2:98:d8:c2:d8:3d:3d:ad:54:9e:ac:38:
         4b:27:a1:7c:4b:ff:49:0b:3b:3c:04:87:91:00:f6:25:98:81:
         5c:53:d3:be:5e:af:4d:ed:fe:3c:6d:f3:bd:50:74:4f:8d:73:
         4e:9d:89:7d:2e:4f:c8:a4:07:2a:5a:1a:85:a7:86:e2:e9:f2:
         ec:74:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:41:54 2026 by rpki-client