Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66aa9eeb-467e-38cd-a767-a2df9061a025.roa
File:                     66aa9eeb-467e-38cd-a767-a2df9061a025.roa (raw, json)
Hash identifier:          ADfa1Q1K/chhuc5LUUdMHZaV1VQEZ36slQSFgvhASu4=
Subject key identifier:   2D:D3:EA:D0:59:03:3C:39:30:0C:72:C0:02:4D:7C:06:83:D5:23:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4559D6F2554C5FF013E25000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66aa9eeb-467e-38cd-a767-a2df9061a025.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:c031::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d6:f2:55:4c:5f:f0:13:e2:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=e68ca4dc-5585-47e6-a863-5789f3723d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:4b:b3:75:a0:c4:06:c4:6f:9e:d8:51:e2:
                    fd:10:c9:00:cd:c8:5e:b2:9c:56:7c:a7:c2:0d:c1:
                    db:65:6f:11:89:f0:92:c8:f5:23:56:47:27:d0:e7:
                    70:c7:71:ff:bd:9e:49:03:b9:2a:04:4a:80:5c:5d:
                    89:54:bd:0b:86:b4:98:be:ea:e9:17:0b:60:01:8d:
                    a6:47:d9:38:89:8a:9c:8e:f6:dc:3f:46:39:7c:6c:
                    9c:54:41:55:56:f8:8f:a7:9d:8c:c6:2d:6a:8b:d3:
                    76:2a:14:88:5a:27:12:c5:8f:f9:28:f8:05:d7:1f:
                    22:8a:a5:78:f8:20:59:20:13:21:fd:f7:50:93:cc:
                    35:43:0b:73:62:68:44:2d:b8:da:09:01:be:a0:07:
                    f3:cc:9f:f5:cd:c3:ef:d0:45:54:b3:73:00:22:62:
                    4c:95:6b:0d:07:eb:59:c7:f4:82:9d:d2:2b:49:d8:
                    a1:52:a7:c7:e5:e5:7b:8f:0e:29:3f:11:dc:49:5f:
                    76:7d:fa:72:d1:e4:19:09:37:7b:b7:45:11:18:56:
                    78:e9:a0:b3:85:98:ed:8c:34:67:f3:16:2c:d8:7c:
                    20:3b:b6:28:3d:98:a3:0e:0a:7b:f0:1f:0d:a4:45:
                    c6:ac:e6:5f:44:95:da:fc:f0:2b:5e:5d:12:b0:34:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:EA:D0:59:03:3C:39:30:0C:72:C0:02:4D:7C:06:83:D5:23:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66aa9eeb-467e-38cd-a767-a2df9061a025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c031::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:f4:b2:9a:56:e6:6d:f0:51:66:54:f8:5e:bc:8f:9d:c9:
         ac:cb:f7:b8:5b:a3:f4:ed:00:b6:c6:92:1d:0c:5c:8b:5c:8b:
         c5:72:95:2a:ba:c4:d4:f3:e6:75:e9:26:e1:a1:34:f6:37:0d:
         8d:e5:49:a5:5c:52:1d:5b:8a:29:cc:7d:3e:7e:03:16:b1:27:
         6c:12:84:49:9b:af:2e:57:52:ff:7a:e2:55:3b:58:e5:98:f0:
         c4:6d:e6:08:2e:d0:9d:9c:a4:39:9b:39:72:5c:70:84:1f:59:
         10:2b:bc:7f:2d:d2:de:ba:41:a7:8b:bb:c4:a9:de:9f:09:fe:
         30:f9:40:fe:05:27:05:2a:d8:26:43:d5:24:65:71:26:29:7b:
         fb:c7:ca:86:b3:7e:2b:b3:24:cb:af:ed:79:39:80:75:ca:7c:
         d7:78:31:87:45:bb:d5:23:f8:f0:3c:0c:e5:30:4d:03:ad:6c:
         62:80:6f:1b:9c:89:8a:a3:27:64:1a:ec:55:31:a0:69:98:45:
         04:3b:3d:08:81:dc:a2:a0:f8:de:89:03:00:f6:97:79:b9:7e:
         67:9a:14:c9:a9:61:6a:68:8a:27:4a:89:70:2b:4e:54:02:36:
         2f:1c:4f:8f:19:56:2e:6f:69:13:19:0c:85:70:fd:1c:8d:a6:
         e4:01:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:40:09 2026 by rpki-client