Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/9f909801-1543-3c12-ac39-8fa51e349a2e.roa
File:                     9f909801-1543-3c12-ac39-8fa51e349a2e.roa (raw, json)
Hash identifier:          nZV3+4WvHlcP0fbeAXC/1Wbkg8XUY4Qo7oVGjG4nfOo=
Subject key identifier:   31:48:F0:F6:6C:0D:DB:88:25:32:44:D8:A2:2F:A2:01:55:B7:E1:E4
Certificate issuer:       /CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
Certificate serial:       010D0C9F4328584E3A2F266FA12D9E9B24FC1AC0
Authority key identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/9f909801-1543-3c12-ac39-8fa51e349a2e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        2620:31:8004::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:26:6f:a1:2d:9e:9b:24:fc:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=c0309538-f8c0-477e-b682-963c684f8c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:56:e1:7f:00:5e:77:4e:1d:5d:00:32:ad:
                    0b:c7:39:7c:ca:eb:0c:bb:66:17:e2:c0:de:fd:d2:
                    95:9a:05:69:b2:5c:99:34:51:45:95:64:38:53:c8:
                    c6:30:ed:e6:1c:67:2b:5d:73:5a:f3:75:38:1b:46:
                    93:9d:e7:76:13:38:f0:df:bc:97:59:6b:7b:cb:60:
                    5b:db:0f:a6:c3:8c:0d:16:d9:25:87:68:fd:6e:e6:
                    66:64:18:12:18:b7:c0:2b:88:4b:ee:86:36:53:79:
                    3a:4e:56:26:6d:96:03:d1:83:a4:99:97:64:89:7b:
                    e3:97:c8:16:e9:96:43:80:a8:f9:37:97:65:66:1d:
                    0b:73:11:de:d3:9d:24:95:7c:5f:45:f8:f1:36:ad:
                    f6:8d:c9:cb:0f:46:97:bb:b2:7d:e9:f8:1e:1d:ec:
                    be:ed:32:8b:c4:88:d4:88:21:b2:51:c3:d6:ef:f7:
                    73:19:56:8b:3e:9f:f0:e5:6a:6b:41:59:6d:28:0f:
                    e8:b5:76:6b:25:b8:5e:4c:7c:12:96:26:73:ae:d4:
                    84:4b:5a:e1:61:f2:39:29:02:d3:3d:67:27:84:0b:
                    7a:d2:d6:dd:bf:32:4d:ed:89:f3:38:e2:ed:ba:ed:
                    0d:7c:b4:3e:f4:cd:61:94:a2:b6:04:38:43:9e:29:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:48:F0:F6:6C:0D:DB:88:25:32:44:D8:A2:2F:A2:01:55:B7:E1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/9f909801-1543-3c12-ac39-8fa51e349a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl

            X509v3 Authority Key Identifier:
                keyid:7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:31:8004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3c:5e:c9:c4:1f:31:01:99:6f:9c:f2:cb:15:d7:a3:65:04:
         6b:d1:d1:c1:34:84:d6:c4:26:6f:d2:35:7c:e0:66:e3:50:bb:
         33:51:07:d6:43:d1:db:95:50:67:0b:26:27:df:27:2f:27:b9:
         28:68:e0:6c:41:4a:09:66:c3:c3:88:41:2b:e4:25:31:ca:49:
         c1:80:70:4c:90:36:d3:fa:9c:b7:c0:62:83:4d:5e:91:1a:66:
         11:c6:17:5b:a4:21:7b:49:a7:f4:c9:62:3a:40:5f:85:c6:24:
         da:d9:99:da:9d:80:03:7b:9b:6b:6a:5f:69:c0:c0:9b:5a:50:
         04:5f:68:73:85:00:aa:f7:8c:18:66:a0:9d:cf:6c:e4:e2:d6:
         1a:af:f3:85:ae:be:9c:c4:bf:54:e8:6f:32:11:df:0f:d8:ff:
         fd:a0:06:bd:ce:ce:77:0b:76:2f:bb:e5:88:0a:17:57:d7:dd:
         07:c3:88:1c:39:95:42:b3:69:6d:a3:56:18:bf:5a:9a:de:7b:
         56:4f:8b:65:a9:c5:3b:34:fd:9f:93:63:43:cb:53:7d:2d:65:
         27:18:1e:47:03:7d:95:6e:6d:00:9f:ea:5c:7a:be:03:c5:a5:
         0f:5c:55:5f:33:d0:ed:ad:97:e1:75:52:f3:3f:a8:c6:ca:ee:
         a9:40:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:53:45 2026 by rpki-client