Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa
File:                     609125ed-e585-3015-abe8-fd5aca64650c.roa (raw, json)
Hash identifier:          GZ/OfBKll1aFQX8beHhsaa4mUDqU6ybjJySMnIOIopY=
Subject key identifier:   C6:65:59:7F:C9:8A:E0:1B:BD:4C:04:02:64:34:A1:40:AA:8E:79:78
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584E4559ED87D46BD6103CA953B0
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        2620:113:80a0::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ed:87:d4:6b:d6:10:3c:a9:53:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=087b2f10-ba29-486d-8da7-86788a28c352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:58:2d:4f:5e:af:1d:9c:ea:ef:dd:8b:cb:
                    db:06:e7:a4:e8:b6:6b:cc:f5:3f:9a:33:7e:07:92:
                    7d:fd:42:75:a6:4a:8a:5d:19:ba:07:44:ef:94:3a:
                    d6:03:fd:df:39:2a:6e:51:5a:69:03:60:24:22:34:
                    b3:de:0f:f7:49:d6:a9:3c:bd:52:cb:96:9e:0e:ce:
                    1b:1b:52:df:56:ec:f5:1c:53:e4:94:48:4a:db:1c:
                    ed:3c:36:37:4c:c1:59:5a:ad:0e:09:99:f7:3f:b0:
                    cc:4b:3b:05:1a:3f:ba:04:70:10:29:82:5a:38:7d:
                    b7:41:51:6f:d0:01:ff:38:07:88:d0:ed:85:60:a3:
                    1c:f6:6c:53:f2:b3:2c:54:41:c1:f9:c2:e4:36:fc:
                    5b:1c:ad:9b:ab:b7:1b:f3:df:b6:32:dc:81:ce:82:
                    61:2a:1c:c6:6a:5c:9b:a6:02:e6:24:e5:35:fb:9a:
                    ec:15:2f:ce:d6:d3:ee:cd:9d:59:23:e4:a7:43:d2:
                    95:ba:e6:6c:e5:33:c9:45:b2:2f:16:8d:6f:ab:90:
                    68:f6:07:27:f7:b3:7e:32:0d:d0:07:b1:a9:90:9e:
                    9d:e5:f5:88:b6:2a:a5:48:c1:75:c0:08:2d:b8:6b:
                    66:93:fc:f1:02:06:f9:3e:82:c5:fa:f7:16:8b:46:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:65:59:7F:C9:8A:E0:1B:BD:4C:04:02:64:34:A1:40:AA:8E:79:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:80a0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:44:c2:a1:f5:f6:3e:81:f3:22:cb:dc:89:b5:ee:41:f6:ce:
         ea:fe:50:70:7c:c5:8e:cd:34:44:13:3f:5c:b7:9e:54:74:a0:
         84:9f:43:ef:e4:5a:cc:5b:52:b2:72:18:6d:b7:96:81:6a:67:
         f6:8d:0d:a3:9f:ea:b0:01:98:e7:fa:c9:8c:0c:a5:58:cd:01:
         fa:b7:63:98:7f:96:9f:3d:a0:86:d5:2d:b4:82:2b:b1:a1:5e:
         61:aa:a5:a5:6c:5b:26:d7:79:f8:0f:81:9d:43:21:a3:3b:e3:
         51:e2:0c:2b:ce:17:e4:3a:2d:4e:84:4c:d3:04:65:41:34:d8:
         66:99:b5:cf:71:8f:71:c1:cd:59:6b:86:76:33:47:37:87:f5:
         80:59:49:da:dc:1e:eb:0a:42:00:48:c9:0b:db:72:c6:06:35:
         32:2c:41:1c:be:6e:17:23:3e:06:50:a3:4b:b1:20:9b:bb:4f:
         20:53:5f:94:1c:c8:5c:2a:bf:d0:5f:99:13:83:ed:20:38:2a:
         1c:22:ca:c8:9f:04:eb:67:67:2c:43:e7:92:87:d6:54:06:a6:
         dd:45:3a:7e:a4:84:6e:d1:aa:9e:0d:d7:25:61:df:b2:88:ed:
         23:a8:6e:d6:4f:12:e2:5c:65:7d:ba:1c:24:10:a5:27:31:1e:
         7a:e5:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:55:38 2026 by rpki-client