Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/16febd85-1078-3b32-9b95-c4e634d036cb.roa
File:                     16febd85-1078-3b32-9b95-c4e634d036cb.roa (raw, json)
Hash identifier:          yzU8LvzHwxCVyOQ6uSIbgctgcvhA2tFqsKFpEd/6ZF0=
Subject key identifier:   0B:8E:A5:A5:CE:2D:6C:05:44:17:E6:73:6B:8C:D5:46:F8:9A:DE:5E
Certificate issuer:       /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Certificate serial:       010D0C9F4328584E2AD45A46192D1F069B1F3440
Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/16febd85-1078-3b32-9b95-c4e634d036cb.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     6082
IP address blocks:        2606:4c00::/33 maxlen: 48
                          2620:121:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5a:46:19:2d:1f:06:9b:1f:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=5b452650-bafd-4871-99c1-35e4f573bfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:64:62:c3:a0:03:21:ba:f2:80:4e:a1:ff:
                    53:b0:6a:80:d4:47:b5:68:54:1a:85:2e:e9:30:40:
                    f8:61:75:5e:ef:ca:73:70:90:0e:82:0e:2b:c7:81:
                    75:74:8a:7b:a9:f0:75:3e:66:49:c5:a9:b1:a3:78:
                    eb:86:de:b0:ef:fe:76:e7:37:d6:f2:b0:ec:3f:e7:
                    60:48:05:5d:1d:c2:fd:cd:d2:f5:d9:81:8a:21:e1:
                    f6:fb:f7:56:d3:7c:a3:61:20:94:0e:0a:a0:54:f5:
                    5e:f7:13:36:e7:a0:b8:f2:51:b4:59:3d:7d:f9:91:
                    45:a3:b7:17:ad:98:b2:3a:2c:61:1f:81:5d:30:02:
                    f5:49:6b:91:12:57:c2:6b:9d:5a:c7:66:ba:fc:44:
                    06:fc:c2:98:49:62:4c:55:4a:a9:59:b8:b2:cd:d4:
                    19:d2:67:06:9b:05:56:ad:6e:d7:b3:f9:48:ec:e5:
                    b6:2b:7f:3b:44:38:8e:15:16:f6:e4:e6:c9:27:79:
                    78:cf:58:2c:97:4f:0e:6c:47:c9:70:db:22:60:94:
                    05:97:8c:03:31:fc:df:cb:ef:69:9f:33:47:d2:e3:
                    63:c6:97:e0:52:ef:f7:32:85:5f:02:ae:70:af:e1:
                    3b:ed:64:a1:74:d8:75:7a:1b:7d:9a:20:70:38:cf:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:A5:A5:CE:2D:6C:05:44:17:E6:73:6B:8C:D5:46:F8:9A:DE:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/16febd85-1078-3b32-9b95-c4e634d036cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl

            X509v3 Authority Key Identifier:
                keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4c00::/33
                  2620:121:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:c8:b6:89:f5:62:c3:79:0e:22:c7:b8:0f:f0:1c:3c:e7:
         80:3b:ea:dc:9f:85:0b:85:84:c6:0e:3c:22:1a:28:51:49:62:
         4b:c3:24:1e:62:4b:75:61:aa:85:38:a5:60:1b:c8:89:2e:de:
         14:64:56:88:5e:ff:b9:c5:2b:72:ab:dd:d6:cf:57:35:d2:f0:
         73:b5:06:57:b5:74:f0:50:be:70:8e:12:28:94:94:9f:3f:d6:
         a6:53:82:89:3b:42:6e:bd:ab:c5:60:2e:61:88:3f:02:dc:87:
         76:3e:7b:30:5a:d3:f2:93:1d:57:8f:5f:18:63:99:38:65:35:
         b7:b0:44:84:87:5d:2a:56:0b:af:88:7a:50:fb:81:5d:b7:90:
         08:da:d4:14:66:70:ce:41:7a:fe:b9:30:78:21:3f:cf:7f:59:
         e7:fd:63:de:31:19:f5:af:f7:71:5e:49:b3:0d:c5:6e:8b:2f:
         94:36:76:a7:ef:01:5f:8c:7b:81:7f:ba:c6:22:06:2d:d7:0d:
         e9:32:46:da:7f:3d:47:bf:46:94:7e:82:9b:a1:60:22:d7:c7:
         b1:c8:9b:27:b7:02:95:d7:4d:c6:70:aa:c9:b0:d1:96:fb:4a:
         76:22:04:2e:ee:a1:5b:57:17:87:d2:f2:86:4b:36:bd:61:29:
         24:5e:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:48 2026 by rpki-client