Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa
File:                     025f189b-ca85-3020-8e51-403bd292c2d6.roa (raw, json)
Hash identifier:          uRDYjeDr5ARtnJ2eoeYyYmO3SmJjkVh27eQWf0OG7G8=
Subject key identifier:   14:08:59:DC:EC:7A:A3:5A:5E:B8:96:28:47:9D:2B:60:8B:F9:32:3C
Certificate issuer:       /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Certificate serial:       010D0C9F4328584DE150773DCA152472D1CA4880
Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     11131
IP address blocks:        2620:0:5300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:77:3d:ca:15:24:72:d1:ca:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=4899fcb6-182a-44db-818b-67ebad16e517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:24:36:fa:a0:d5:9c:5e:b7:1c:ee:0e:5a:
                    c2:95:60:21:9a:a8:54:28:77:1d:14:35:12:e3:4f:
                    d1:9d:25:48:42:6f:b0:ab:50:e9:94:d4:ad:89:5b:
                    a0:d2:77:e0:d9:8e:59:7c:3c:67:3b:8b:86:57:58:
                    80:80:66:46:93:e4:4f:17:d9:2b:b5:87:46:4c:79:
                    e1:b6:eb:1d:38:14:40:1a:c5:fd:09:48:dc:de:42:
                    3f:fe:13:99:de:da:8d:b7:8a:cb:3e:44:f0:ab:50:
                    b8:30:d8:4c:26:65:24:5d:de:8d:7a:38:54:24:24:
                    4a:b9:77:f8:29:f3:0f:3d:d0:2c:9f:ae:be:81:d5:
                    8e:13:e5:e3:e4:0e:8f:3d:63:05:21:6b:85:39:57:
                    d8:96:31:71:f0:f4:bb:1e:4d:e9:4d:09:61:57:62:
                    c5:7a:02:fb:41:d6:e4:f9:f7:a0:23:36:54:1b:d6:
                    a8:23:54:70:21:e8:6a:e7:98:22:03:d3:b0:ec:85:
                    5f:d5:9e:01:9b:e4:85:d9:6a:11:8e:99:49:e7:c5:
                    55:8d:8d:f5:d3:15:16:5e:ac:03:70:ab:9a:b6:10:
                    98:7b:c0:d2:68:c3:25:49:a7:63:60:00:78:58:4f:
                    9e:92:20:04:d9:83:62:fa:bb:99:87:aa:14:bc:e6:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:08:59:DC:EC:7A:A3:5A:5E:B8:96:28:47:9D:2B:60:8B:F9:32:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl

            X509v3 Authority Key Identifier:
                keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:38:04:5f:91:37:c5:29:bf:05:60:16:49:1b:df:6c:5f:b7:
         70:0f:2f:aa:93:5f:c6:93:1b:c7:82:45:e9:1a:51:71:4d:31:
         c7:74:85:36:bc:35:56:9f:3a:98:9c:1a:4c:b2:54:6d:da:39:
         c3:d8:70:08:bd:ca:83:3d:28:f0:70:e9:53:96:78:c2:72:7f:
         14:f2:59:53:5f:83:75:88:ed:93:f6:17:eb:4b:3b:05:d0:34:
         0b:f9:08:bf:72:90:59:20:d2:a6:89:9d:51:21:91:9e:ac:32:
         82:83:39:93:fc:0f:b1:be:a9:18:6b:48:c2:f2:6a:56:bd:ef:
         3f:98:2e:35:8c:7e:7f:f0:1e:07:ae:4c:cb:2a:ea:a1:50:17:
         26:0d:89:21:49:a0:c1:36:cd:6f:75:78:13:65:91:70:84:40:
         e3:3a:8b:ba:93:a4:39:12:80:8f:44:0f:04:59:43:75:53:ea:
         7b:55:52:95:0f:c9:60:cf:61:e0:69:0d:d8:78:a4:8a:9c:33:
         c9:bf:f2:4a:02:ec:b5:5b:02:6f:5b:d8:f8:37:fc:8c:d2:70:
         0b:fc:cf:3d:3e:41:8f:41:a4:dd:99:af:26:06:34:e6:6b:e1:
         10:48:cf:ff:24:4b:fe:7c:fa:b0:5d:b2:58:12:e1:e1:1b:a0:
         f4:55:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 21:35:06 2026 by rpki-client