Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa
File:                     359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa (raw, json)
Hash identifier:          j0kiROPa2NoWi6oTDtggCuRQPCwetXja1YYOlca3BgA=
Subject key identifier:   6A:26:C0:16:31:84:B6:A6:A4:94:09:29:CB:01:A8:BB:79:AE:4D:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3E5F2550F744F7CB9A77DF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:4321::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:25:50:f7:44:f7:cb:9a:77:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=c3517ead-b06a-46fa-b640-22657edc9675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:7b:94:26:c1:cf:08:f1:b8:c1:53:32:5b:
                    61:7a:7c:27:84:7d:3b:0a:92:99:b8:28:fe:73:2d:
                    69:f6:2e:7a:8e:a0:8c:74:ca:3f:b3:41:0b:5b:f4:
                    1c:28:d1:f7:46:65:a1:38:96:9b:42:26:85:55:66:
                    e1:cf:6d:a4:c6:bf:fd:3f:ce:16:75:17:87:68:2a:
                    ed:13:5a:55:4c:07:a5:65:98:dc:50:47:6f:81:64:
                    a8:b5:ac:36:3a:01:a8:38:66:44:78:d6:48:39:dd:
                    96:aa:a5:c3:9e:e1:e0:16:7f:50:af:b0:32:81:e2:
                    20:7a:e8:15:9d:28:bc:81:b0:b9:09:81:fa:46:7f:
                    d8:4f:70:20:f5:98:6b:b0:8b:52:10:e1:9d:bf:ef:
                    f1:b9:af:63:4a:b7:42:2f:db:25:55:c7:11:bb:5a:
                    74:40:27:d6:ea:c8:21:20:37:56:4a:d7:0b:36:a8:
                    b4:07:e0:17:0a:01:83:9e:7b:69:86:2b:fb:64:9b:
                    f1:c1:d3:c0:62:c6:a3:23:ca:2f:1f:31:0a:5f:4e:
                    d7:02:98:07:60:49:ea:a3:b3:e1:eb:22:7d:d8:38:
                    66:c4:50:9a:1d:59:08:d7:80:42:a7:4c:cc:f2:8d:
                    f7:ac:d2:3b:88:45:82:dc:5f:b4:cc:6f:2c:ef:50:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:26:C0:16:31:84:B6:A6:A4:94:09:29:CB:01:A8:BB:79:AE:4D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4321::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4c:da:bd:54:cf:a8:c8:3e:b5:ad:9e:26:67:82:fa:07:aa:
         f5:3d:fb:6d:ee:f8:d7:6a:36:60:8d:9a:02:a7:d8:e8:02:c9:
         3c:81:37:58:aa:7e:f7:6c:9b:52:fe:b3:12:ad:e3:ec:ac:57:
         3c:9a:57:37:6b:1c:e7:bb:00:6e:e1:f0:52:4b:35:1e:b6:d8:
         8b:33:79:51:f4:de:5c:08:01:2d:6a:6f:86:3f:57:69:aa:c4:
         39:2f:63:39:92:d1:a4:02:fb:c9:7b:1f:01:85:fb:92:26:cc:
         1b:d1:53:cb:13:74:98:bf:d9:8e:28:ab:a1:24:bb:7f:5f:0c:
         e9:72:b6:3d:8c:68:3a:e8:9c:ab:3c:b0:98:e6:e7:95:88:b8:
         a0:8a:54:f3:71:d9:24:99:62:63:6f:77:40:5e:f7:e9:10:fa:
         aa:9c:c1:70:d2:de:57:26:2c:5a:de:7f:f2:54:55:1a:a4:fa:
         ca:25:4f:f3:57:23:d7:05:94:b1:04:b6:18:41:34:b3:6b:fc:
         bc:d7:8b:40:68:86:06:d4:1a:ff:78:e7:f3:4b:f9:1e:dd:6f:
         e8:3e:26:a2:a2:95:90:18:2e:9e:dd:b3:9e:76:19:0e:f4:97:
         73:77:bb:58:d1:a0:7c:5b:b3:52:b6:90:36:3e:7b:7b:e6:4e:
         12:59:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:35:32 2026 by rpki-client