Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa
File:                     8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa (raw, json)
Hash identifier:          T/u8qjFpsBDRlboMC/FYNTeecTVXFogbSwMN7zaA0D0=
Subject key identifier:   DE:64:AD:1A:33:89:97:8A:B5:30:9D:31:05:5D:28:5F:7C:E0:C4:77
Certificate issuer:       /CN=9b51b96b-674e-4350-82f7-7b884151238a
Certificate serial:       010D0C9F4328584E36017E32D994E12DB9128A80
Authority key identifier: 93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     394151
IP address blocks:        2602:fdb8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:7e:32:d9:94:e1:2d:b9:12:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b51b96b-674e-4350-82f7-7b884151238a
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f5c36f5a-ac0f-4662-9b32-f5aef5a91692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:23:1a:dd:69:19:aa:d8:d9:dd:a5:9c:8c:e8:
                    b2:b6:f0:e2:36:73:6f:3f:a7:aa:3d:5b:43:58:cd:
                    90:33:3a:3f:06:1b:17:c6:5a:25:81:c9:95:8f:60:
                    ac:ea:fa:0f:cf:1b:7a:b8:74:ae:a8:fa:b7:81:f1:
                    f5:90:11:ec:17:cb:10:ab:cd:05:ab:b4:a3:81:a6:
                    a0:a6:3d:d2:1d:98:53:14:1a:81:24:1b:f8:18:2e:
                    44:fa:9b:8c:50:cc:b1:f7:f2:8e:56:ba:d9:5c:18:
                    1d:a8:9a:ad:44:47:54:5d:58:76:ad:b6:b2:c2:ff:
                    5a:3a:85:a2:c2:15:a9:4c:9d:5b:5a:55:c0:7b:78:
                    ce:71:d8:fb:f0:29:6a:cb:04:a7:2f:cf:d0:d0:ba:
                    7a:e2:eb:7c:b6:2b:04:b3:52:80:b6:bd:0a:7e:40:
                    a0:27:60:39:d8:b3:63:93:6a:84:26:30:09:03:29:
                    04:d1:79:8d:d8:be:8b:fd:35:88:26:38:5e:ab:59:
                    a6:e3:c1:59:7c:5c:ca:76:c0:94:c2:4b:68:19:6c:
                    87:32:54:8e:78:7f:81:9b:07:92:c8:58:1a:64:5e:
                    a1:9a:01:f3:d2:fc:15:da:86:3c:4c:32:2b:9c:6a:
                    35:9e:f1:71:3b:8c:1e:8c:26:bf:3a:72:a9:16:ab:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:64:AD:1A:33:89:97:8A:B5:30:9D:31:05:5D:28:5F:7C:E0:C4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl

            X509v3 Authority Key Identifier:
                keyid:93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:89:eb:cb:f0:83:b4:d8:2b:d1:e3:5b:99:98:5d:99:56:22:
         01:6d:3b:8a:d9:00:d2:57:05:b4:94:d4:10:27:b4:59:42:1a:
         97:69:07:4b:df:a2:a1:64:fb:b9:4d:9a:cc:23:fa:6d:d1:65:
         4a:a2:77:75:68:29:b6:4f:a6:bf:70:49:37:83:1c:3d:00:31:
         e9:c3:cd:1c:ef:00:48:74:b4:48:00:a4:ec:d3:f9:64:2d:53:
         a4:4d:d8:09:21:60:49:5d:6e:2e:76:9c:df:b1:77:f9:66:ce:
         09:a8:41:e9:43:41:b0:b8:2c:fa:5f:c7:4f:df:c6:55:4a:d0:
         f3:21:98:9f:ca:de:17:4f:a3:cb:e9:f5:0d:ab:f6:59:8c:09:
         ad:07:ff:a7:a1:32:37:61:33:01:4a:cb:1b:10:78:3d:63:74:
         dd:18:7c:8a:e0:d9:f2:21:0e:9f:ad:b4:a2:9a:c1:62:6b:64:
         e7:16:32:d7:20:76:d1:b7:3b:83:f4:fe:89:90:ea:18:aa:c6:
         f0:e3:e0:24:87:38:2d:57:8c:9d:32:8e:0d:81:e2:f6:c7:ab:
         79:d7:23:98:3a:66:d4:2c:8c:d5:b2:dc:51:c3:65:c0:93:5a:
         ee:4f:18:67:5b:10:c0:7f:08:87:d9:9d:49:be:67:fc:cf:d8:
         b8:56:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:57:16 2026 by rpki-client