Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/65ca4f6d-a95c-313f-bd12-eb1267892b67.roa
File:                     65ca4f6d-a95c-313f-bd12-eb1267892b67.roa (raw, json)
Hash identifier:          sGZIvoMj/alKPtVhH4Aa7wyd9Sz2H+2Y0Kn8LjoPJGk=
Subject key identifier:   18:6A:0C:60:07:74:40:30:33:C2:57:D6:E0:BA:EE:6D:79:B0:08:88
Certificate issuer:       /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Certificate serial:       010D0C9F4328584DF0AB3217A07AA175C869E0E0
Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/65ca4f6d-a95c-313f-bd12-eb1267892b67.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        2602:f73c:60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:32:17:a0:7a:a1:75:c8:69:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=b4cbfe5e-8d67-4555-a875-923f71259aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:f2:7b:97:e0:ca:d4:f2:f0:04:6f:77:75:
                    e6:62:6b:17:eb:10:1a:d3:88:74:e2:5a:ac:d8:7b:
                    8b:25:9c:f9:98:69:08:8b:4c:50:4d:5b:87:b4:cf:
                    9c:56:14:2c:8d:35:f4:2f:da:ff:6e:03:ed:3e:53:
                    fc:6c:2f:a8:3a:f7:81:ae:83:d2:bf:a6:da:c3:e8:
                    75:fb:8b:2b:bf:63:a0:a5:ab:9c:d9:52:5b:68:48:
                    86:d9:50:37:8e:90:f4:f0:ca:07:bf:84:33:cd:58:
                    3e:18:d1:f3:b7:b1:b4:cd:2f:4b:59:b8:24:bc:d1:
                    7c:21:b2:98:30:7d:07:a3:ec:38:08:a1:49:31:4d:
                    9b:11:77:4b:2a:12:77:24:02:0d:b8:79:53:4f:8c:
                    a6:88:85:f9:85:01:90:77:9d:ae:c4:6e:a2:15:64:
                    c8:5b:6b:55:c3:b1:4a:f2:5f:03:00:16:7d:fd:d5:
                    3f:bf:3e:09:ed:b8:a8:5d:e6:6f:de:4b:73:51:a4:
                    3b:83:1d:e4:84:17:2a:43:6d:0e:c2:af:4d:c2:f9:
                    1b:03:83:26:5c:97:df:32:be:9c:d0:3b:bd:86:76:
                    44:f3:16:86:33:46:a9:57:35:95:7e:6e:29:34:2d:
                    fc:cc:d9:82:b7:b3:bb:b2:e7:e9:b7:89:95:fb:4d:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6A:0C:60:07:74:40:30:33:C2:57:D6:E0:BA:EE:6D:79:B0:08:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/65ca4f6d-a95c-313f-bd12-eb1267892b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl

            X509v3 Authority Key Identifier:
                keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f73c:60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:29:dc:5b:cf:de:56:1d:91:b5:fd:7a:67:1f:9c:d5:1e:56:
         84:50:a9:f5:9f:48:99:42:b2:63:64:bc:26:2b:46:48:ff:82:
         d7:81:b2:9b:d3:70:b8:08:5e:ba:14:7b:ee:7f:6a:d0:e9:b1:
         bb:a8:c9:15:2a:ed:ab:bd:79:fe:ab:3a:1e:8d:6a:60:7d:75:
         bf:ff:e1:ba:f4:fa:3c:9d:f4:f4:6a:0c:d6:de:9c:71:31:3f:
         60:f8:10:d3:a5:f7:ae:94:86:a0:13:32:0f:dd:a2:9c:6d:78:
         4b:f2:51:38:3d:2c:7d:a2:ee:1c:bc:a2:4d:ff:75:68:8f:6e:
         5a:d9:bb:a9:b4:56:40:d7:23:27:91:b5:02:09:64:ea:71:d8:
         9b:5e:ee:cc:39:b2:c2:a4:43:de:79:8f:48:99:f6:bf:e6:cc:
         46:5b:c7:35:3b:b4:e4:00:3e:69:10:c2:0f:12:a1:c2:84:0b:
         84:e5:a0:3a:61:d2:2c:cf:4b:05:db:0d:08:89:ac:ed:8a:e1:
         da:b2:c2:1c:c7:7a:aa:dd:6d:fc:ed:a8:eb:1d:ab:d6:0b:10:
         39:0d:d0:bc:a4:cd:8a:90:2f:09:d0:0f:62:0d:64:97:a5:e1:
         cc:b9:ee:dd:d0:e6:89:6b:d5:29:f7:da:86:dc:e2:22:b5:4c:
         8f:5d:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 13:42:51 2026 by rpki-client