Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/6706e303-f402-3a0d-9f68-6428e7384b95.roa
File:                     6706e303-f402-3a0d-9f68-6428e7384b95.roa (raw, json)
Hash identifier:          HxvzsrLWEJRsgy+Bl3Nbn/r8udpTc1FC5M60NGOdqng=
Subject key identifier:   9A:35:2D:90:9F:F1:EB:B1:F9:3B:C5:E1:03:7E:C9:4A:00:9D:77:0A
Certificate issuer:       /CN=60d79450-5cfd-43d5-b1eb-e5cb0158ee69
Certificate serial:       010D0C9F4328584E043631F27E58121C2C725D80
Authority key identifier: 56:E8:EC:33:1C:94:46:26:2A:D8:B5:F7:11:E0:A3:17:08:06:44:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/6706e303-f402-3a0d-9f68-6428e7384b95.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     402145
IP address blocks:        2602:ff46::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:31:f2:7e:58:12:1c:2c:72:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d79450-5cfd-43d5-b1eb-e5cb0158ee69
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=0857b7b6-60ee-4d70-8beb-9b7b8714ff6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:04:27:2e:79:62:4c:b5:85:5f:b3:c1:f4:
                    12:db:87:99:e9:d2:38:02:cd:37:5e:0b:e2:69:07:
                    0a:58:36:c6:18:69:5a:e2:85:91:c0:c5:55:e7:96:
                    1f:67:2a:b7:e1:bb:d8:dd:8d:15:9c:49:67:58:fa:
                    1b:7a:43:20:06:90:fc:e4:d8:22:a9:8d:fc:ea:d5:
                    f0:42:93:96:d3:ce:7b:a7:7f:31:e1:d4:dd:56:1c:
                    ff:89:7d:a6:96:62:e9:48:82:c8:a2:15:cc:af:7c:
                    6f:f9:af:a6:95:91:ec:8e:f5:2a:e1:08:8e:1d:ac:
                    08:b0:69:e0:b1:0a:29:ea:b8:d6:14:9b:17:f2:86:
                    6f:08:f5:2b:95:b8:28:3f:37:c0:17:ed:a8:b4:51:
                    1f:51:e0:b8:f4:cc:e9:87:48:96:5d:e1:f7:2d:2a:
                    5c:b2:32:6f:08:3c:42:a4:fc:c8:46:cd:32:bb:74:
                    00:c7:ca:f9:09:ae:ea:a9:ce:3d:c4:3b:08:62:ec:
                    33:3b:77:5f:42:2c:92:bc:1b:a1:13:b6:71:42:56:
                    f7:da:26:51:3f:60:fa:86:9e:1a:02:3b:61:ff:79:
                    fb:85:5c:81:a3:64:78:76:4c:59:cd:99:36:d6:0d:
                    b2:c7:35:fa:53:f3:66:a2:a9:54:a0:a7:31:bf:11:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:35:2D:90:9F:F1:EB:B1:F9:3B:C5:E1:03:7E:C9:4A:00:9D:77:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/6706e303-f402-3a0d-9f68-6428e7384b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.crl

            X509v3 Authority Key Identifier:
                keyid:56:E8:EC:33:1C:94:46:26:2A:D8:B5:F7:11:E0:A3:17:08:06:44:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff46::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:91:10:d6:5e:9d:d9:50:d4:74:e2:a6:a2:a3:85:3f:10:f3:
         72:cd:13:b3:f9:d7:4f:6c:1a:42:b9:00:27:34:90:33:81:05:
         fe:d3:34:a9:f1:26:ec:e3:53:ef:e6:91:b2:0e:e3:82:e6:4d:
         de:25:76:02:85:0f:62:d8:54:c2:07:ff:5a:8d:99:47:39:8e:
         77:63:9e:7f:f6:21:bc:a7:64:ce:13:28:83:fb:89:5e:89:17:
         b0:b7:e7:da:67:78:c1:35:8c:f7:59:03:d1:1b:e9:76:fa:0b:
         4b:fb:ca:60:f8:42:d6:37:fa:d3:f4:34:d9:53:bf:06:d5:ec:
         af:6a:29:89:1a:6f:03:c8:99:b1:b8:50:e2:9f:6b:b9:86:d9:
         a4:0e:f6:31:cf:2a:0b:a8:a3:8c:61:e2:b8:8d:d0:dd:ea:ab:
         24:d2:a9:ae:64:7f:96:f5:d9:82:87:a5:fb:2a:e9:64:60:f7:
         5c:95:45:e0:5d:7c:26:b2:88:2a:1d:d0:16:37:52:3d:0e:0f:
         04:51:ce:29:ee:5c:e1:e5:0c:64:21:eb:bf:e3:45:e9:a7:c8:
         83:44:36:d1:4c:66:84:45:1c:fb:5b:c1:ff:ec:a8:da:95:68:
         ce:6b:26:83:9b:b7:47:0e:d2:24:bb:bb:c9:fd:f0:98:55:5e:
         d7:e4:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:01:12 2026 by rpki-client