Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
File:                     c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa (raw, json)
Hash identifier:          EHI63bjYz2DqX6vlAXEV7xYPOr9dsiSGbgDjWi9jPrM=
Subject key identifier:   04:6E:7E:07:FB:99:3E:E1:08:EA:F8:BC:E3:86:51:23:92:32:BE:F5
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584E131987338EE829D89D085700
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     3477
IP address blocks:        2607:9bc0:1010::/44 maxlen: 44
                          2607:9bc0:1020::/44 maxlen: 44
                          2607:9bc0:1030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:87:33:8e:e8:29:d8:9d:08:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=8061124e-cefc-4f6d-a338-c160a084974f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:23:56:7d:2c:bb:96:5e:19:36:50:ff:3d:
                    2e:9a:54:5d:2a:76:4f:76:f8:d6:3e:7b:0a:3f:a8:
                    45:78:fd:1d:f7:96:61:56:10:02:8e:b0:4f:6f:79:
                    79:a2:45:c3:34:f7:f7:f8:08:5a:40:ef:83:6a:da:
                    49:78:57:3b:b8:0b:40:50:16:3e:42:cd:0f:d3:03:
                    3f:14:13:5d:ca:fa:17:ce:45:eb:7b:2d:db:71:d4:
                    93:b3:d2:48:d6:a8:64:f4:1d:11:ff:fd:dd:da:98:
                    31:a7:62:c4:6b:b4:34:3d:b7:1a:23:86:be:3a:ee:
                    0a:43:ab:b1:e3:6e:2c:2d:e2:ef:f0:4a:2c:ab:73:
                    0b:fd:7f:01:2a:fd:14:8c:c9:30:97:7d:4e:20:38:
                    89:7c:a5:52:da:a8:7c:72:7c:7b:86:70:c7:f3:ef:
                    4a:11:90:19:29:e5:dd:34:b9:07:21:5c:1d:92:cf:
                    c0:e6:86:c8:1e:e7:c5:87:dc:22:bc:ac:7e:98:1e:
                    fc:b9:72:65:b7:62:8c:cd:0b:52:25:20:45:18:8e:
                    28:05:6d:71:c7:08:3f:68:0b:a2:a5:44:61:95:ff:
                    c1:61:67:8e:b1:c3:c5:d0:1a:7b:2e:91:25:60:a9:
                    f6:b4:41:b8:7c:88:60:b7:ba:54:b2:6a:d9:bd:14:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6E:7E:07:FB:99:3E:E1:08:EA:F8:BC:E3:86:51:23:92:32:BE:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1010::-2607:9bc0:103f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:1a:ac:82:65:ab:a4:2d:8f:97:4d:18:f4:e4:8c:b1:c4:
         73:96:d2:02:58:02:da:b7:57:f9:1a:2b:1f:c0:21:e2:69:34:
         1a:e2:04:49:6f:a1:73:f7:6b:6c:de:00:04:11:f9:9a:bb:b8:
         55:29:e2:df:97:7f:15:d1:ba:9b:40:1e:7c:a1:14:11:3f:fb:
         c6:64:ea:b9:e7:6f:f5:37:82:0c:28:5a:e5:30:f3:82:a2:a7:
         85:4d:11:db:52:07:9c:17:15:90:da:0b:a6:5c:ca:57:cb:c3:
         ed:b3:97:1a:ef:eb:60:df:c2:f7:31:41:a2:39:bf:97:d8:5f:
         2e:79:c3:20:74:b5:24:ff:3e:2e:41:79:b9:79:c2:81:0a:de:
         64:89:2d:aa:44:63:0c:53:1a:6d:f3:c7:22:51:d1:eb:02:5a:
         de:ce:ae:ce:4d:4b:f6:f5:9a:a6:d2:40:60:ce:91:83:46:d4:
         ea:2f:d0:35:4f:a8:be:b5:13:f6:65:47:90:fc:a4:56:8e:0d:
         fa:3d:fd:5d:fa:1e:0d:c8:33:14:02:32:d0:00:c5:44:10:0e:
         0f:a5:6a:12:11:76:04:87:26:66:14:20:2a:db:ee:d0:e4:73:
         6b:4a:38:4b:34:67:7d:d3:f3:6e:e3:a8:0c:b0:73:76:96:a3:
         2e:5e:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 07:12:46 2026 by rpki-client