Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/a5c331cf-dd93-309e-8876-1675b03e3ca1.roa
File:                     a5c331cf-dd93-309e-8876-1675b03e3ca1.roa (raw, json)
Hash identifier:          43BXoEloPkCim2AnlOGIwwyoVOPB0zUUQnqiYeZzuFY=
Subject key identifier:   D9:12:2C:E7:5E:3D:7A:9E:62:AD:DC:4F:8C:40:E1:5D:AB:19:8F:1F
Certificate issuer:       /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Certificate serial:       010D0C9F4328584E2D9F24973A0B18632A1B0700
Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/a5c331cf-dd93-309e-8876-1675b03e3ca1.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2602:2df::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:24:97:3a:0b:18:63:2a:1b:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=69c49f1d-ebe6-43d9-9c37-01f740c14abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:59:d3:13:53:e6:18:88:b8:20:d2:b4:4e:83:
                    7e:01:0b:96:30:b9:e2:5d:d9:fc:d8:d8:c1:dd:ea:
                    e4:a0:46:5a:c8:dc:d3:55:e1:7e:36:7b:94:fd:15:
                    f4:ce:1a:17:5d:b5:14:50:5c:36:ef:bd:67:72:9f:
                    b9:40:49:96:e5:2b:77:63:45:4a:70:1c:5f:7c:c8:
                    25:3b:c0:74:c9:98:f3:93:c8:87:4c:07:ea:80:eb:
                    07:41:7e:3a:eb:79:96:92:1f:87:ca:0b:17:69:7e:
                    9a:9c:bc:ac:37:00:28:9f:e7:66:d3:1e:e7:51:3a:
                    cf:fe:0b:c8:0f:9e:9c:27:23:c3:7c:9d:59:68:55:
                    de:1b:1c:ea:f1:b0:de:59:af:c3:c4:b0:97:77:ab:
                    cd:38:df:d0:23:0f:83:cd:00:11:c7:c9:f7:e9:af:
                    e9:d6:4a:77:14:d9:7e:bb:99:db:cd:98:eb:d1:3e:
                    85:ff:19:1a:23:b6:6f:b2:ef:43:f4:ec:8a:6c:87:
                    42:21:f8:47:3f:12:81:27:4e:b6:35:0e:bd:b8:56:
                    ce:b6:07:6b:5c:45:04:a2:a8:cd:05:63:d0:36:cb:
                    c7:41:c6:56:77:f4:0f:ea:13:8c:9e:58:e4:fa:40:
                    a9:04:29:91:97:a6:61:94:ce:f0:46:05:e3:c6:e6:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:12:2C:E7:5E:3D:7A:9E:62:AD:DC:4F:8C:40:E1:5D:AB:19:8F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/a5c331cf-dd93-309e-8876-1675b03e3ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl

            X509v3 Authority Key Identifier:
                keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:d5:03:22:82:08:6b:17:78:a0:5d:9c:a6:89:bb:88:f4:
         d6:10:7b:df:d5:80:8e:73:19:0f:fc:44:f5:34:92:be:1b:5b:
         d0:1c:70:b6:62:87:a0:d2:ce:aa:bf:ec:0a:b5:00:e1:fd:c5:
         96:ed:8e:78:6e:94:e8:a5:01:29:8d:14:9a:b4:ff:ce:46:d5:
         f9:e2:86:8c:ce:67:9b:d3:c3:b1:a9:93:a6:63:55:da:80:4f:
         41:75:bf:c1:37:2a:bd:d3:2e:80:68:a4:a4:21:15:c1:f9:e5:
         0c:09:d6:e2:13:7f:52:c0:b5:e8:a1:35:90:67:0d:bd:c5:4b:
         ac:a8:6a:18:a2:d3:5a:37:cf:51:f6:e8:b9:af:8d:48:3b:c6:
         2d:64:b6:58:88:a5:10:cb:53:aa:da:7a:27:ec:22:5c:94:2c:
         08:d0:6b:24:9b:84:d8:89:a5:cd:72:83:68:24:48:c8:b8:a6:
         ad:56:bd:82:53:e7:d4:95:2e:bd:95:a0:66:31:4b:84:4f:b3:
         ad:24:3d:99:b9:0e:e2:d5:87:14:d6:15:2c:fc:28:95:2e:6e:
         48:af:26:88:b6:18:a4:6a:3c:c5:5b:3b:11:b2:ee:34:58:68:
         e5:39:b5:9b:d5:67:8e:d0:33:6c:4d:46:96:54:0c:89:64:92:
         58:74:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:33:44 2026 by rpki-client