Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/22171a35-e97f-3107-8643-2ebd8460405a.roa
File:                     22171a35-e97f-3107-8643-2ebd8460405a.roa (raw, json)
Hash identifier:          NDNzPXQ6VxRmnWrTfnYOTDmF4SnIZL4yPjdSP4/OaCQ=
Subject key identifier:   4B:B9:42:B0:81:13:0E:1D:A9:1F:1B:3E:18:21:10:F0:13:1F:5C:BC
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584E39A50633F4DE8AE336769280
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/22171a35-e97f-3107-8643-2ebd8460405a.roa
Signing time:             Fri 19 Jun 2026 16:22:05 +0000
ROA not before:           Fri 19 Jun 2026 16:22:05 +0000
ROA not after:            Thu 17 Sep 2026 13:01:35 +0000
asID:                     14618
IP address blocks:        2602:f775:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:39:a5:06:33:f4:de:8a:e3:36:76:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Jun 19 16:22:05 2026 GMT
            Not After : Sep 17 13:01:35 2026 GMT
        Subject: CN=9654e3da-e967-439a-ae4a-128511ec3364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:c5:29:bf:12:2d:4d:1e:85:b3:1e:ae:62:
                    62:5d:0d:48:53:85:36:83:84:75:16:13:7b:03:f4:
                    7f:31:d2:16:f7:db:3e:5b:55:ab:eb:1b:32:94:c3:
                    39:14:ad:10:68:90:a0:10:f6:d7:3a:7b:88:83:33:
                    34:1c:4e:15:39:86:bd:df:a2:ac:92:b7:f2:7d:9d:
                    b8:d9:10:1a:23:ad:34:8d:98:69:29:9c:63:44:8e:
                    59:5a:b7:97:8d:45:ef:c4:5e:1e:14:4b:d7:cc:b2:
                    30:9c:37:c1:65:41:ce:cf:82:be:8f:13:48:76:3a:
                    e1:d2:43:e0:3c:ed:9b:99:51:7a:93:d8:2e:ab:ae:
                    1e:e0:94:09:5b:5c:c3:ae:f3:af:97:f6:22:85:0c:
                    d3:7e:b8:87:d4:1a:12:03:16:99:5d:d3:89:2f:77:
                    74:14:58:65:40:ab:b2:e1:56:99:f0:42:89:b7:10:
                    89:47:fa:6d:6c:e8:92:1e:ab:60:22:00:6d:cc:c6:
                    f9:03:e6:ac:59:b7:dd:6b:62:71:28:f5:ef:30:ce:
                    6c:3e:4d:37:44:62:18:46:90:06:d8:17:61:9f:92:
                    49:04:16:7b:55:52:19:02:01:fe:40:68:e1:5d:dd:
                    5b:ff:fe:91:99:91:a6:62:a7:ed:19:b2:51:d8:5b:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B9:42:B0:81:13:0E:1D:A9:1F:1B:3E:18:21:10:F0:13:1F:5C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/22171a35-e97f-3107-8643-2ebd8460405a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:36:c4:55:b3:d9:a3:24:bf:64:ec:35:9b:31:89:3f:78:6b:
         68:b8:89:7f:e0:c5:94:f8:f3:34:7d:26:2d:90:34:f0:dd:52:
         7f:b5:af:02:e0:8b:1a:33:3c:3e:eb:fa:7e:98:49:c2:b6:93:
         dd:0e:d4:be:8a:1a:f5:b5:a6:28:2d:66:48:76:a9:1f:94:a1:
         72:b3:70:13:ad:6a:7a:ce:91:8b:6c:ba:ff:50:b4:65:19:98:
         97:bd:61:fc:91:ae:b1:24:c3:a2:37:3f:93:a7:5d:16:64:c1:
         eb:c5:ba:88:46:83:4a:de:23:3f:fc:25:92:fc:92:3e:26:9f:
         3c:04:7d:86:64:5d:96:16:af:d7:86:db:4d:3d:bd:ad:32:a7:
         9c:7d:42:10:85:3b:7c:74:6f:11:59:46:a1:ab:e0:fa:af:23:
         52:4f:27:0a:25:e6:6e:23:03:d6:84:eb:80:5f:74:ca:44:8d:
         8b:8a:c8:a0:66:27:42:ce:ec:e3:f3:2a:e8:8b:89:c5:96:cc:
         ff:96:53:dc:02:ae:9b:5a:99:ba:c9:16:75:98:9d:76:bd:ca:
         ef:02:43:42:fb:96:60:e6:8f:89:08:6c:9a:e5:f5:54:dc:36:
         28:f0:c6:03:8c:19:77:a5:4f:80:0d:bf:de:1d:ec:f5:de:2b:
         34:80:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:29:49 2026 by rpki-client