Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
File:                     f52b129b-55ba-354b-9c3a-00936112d94e.roa (raw, json)
Hash identifier:          ZEa6udUBhHgGC5Yy9Yg90of/JwtYhj5nIvQunsRdulU=
Subject key identifier:   A2:C0:33:F4:E1:9C:02:99:06:F0:FD:78:CD:74:E3:B7:DD:2C:80:F7
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584E37647353EAC815B753D3E200
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     32482
IP address blocks:        2605:7840:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:73:53:ea:c8:15:b7:53:d3:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=e75ef6fa-df94-4563-873d-5ef628651a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:27:2b:3e:a5:74:45:0b:27:ba:a2:1e:d6:76:
                    23:b7:d0:08:bf:4d:38:33:a4:f4:4f:b8:be:7c:14:
                    c7:cd:9f:aa:8e:8b:a6:a3:d7:3b:e4:07:e9:af:ce:
                    8e:23:75:40:77:72:02:11:7a:d1:9d:2b:24:9e:c0:
                    c9:47:af:87:1b:12:02:71:3b:05:bd:26:27:ff:1c:
                    2b:cc:8e:59:8a:e2:5a:67:8e:fe:7d:19:20:7a:d7:
                    c3:2a:af:7d:d7:cc:78:41:5f:9a:be:e5:15:f3:3c:
                    ad:a9:3c:36:0f:ab:fc:e3:2c:95:e1:d8:94:7e:33:
                    66:83:11:31:b7:1a:51:6d:b3:da:23:bb:58:0f:bd:
                    e4:db:cc:fa:16:d0:c1:67:87:a2:e4:7d:4d:c6:70:
                    c5:02:0d:48:dd:fe:1c:1c:de:18:bc:61:ea:d4:d0:
                    32:1a:c3:92:5d:cb:b2:91:9c:67:37:9b:65:bf:2e:
                    8f:ad:ba:dc:69:e4:ee:50:ce:7a:df:5b:10:e8:98:
                    83:df:b1:e6:a9:e2:e5:14:f5:e8:48:f2:90:dd:a2:
                    68:54:7d:2f:56:b7:87:f8:2f:dc:83:09:bf:a3:f0:
                    75:93:7c:44:fb:80:67:f1:ae:16:3a:f8:bc:56:df:
                    57:fe:fc:29:cf:1c:9a:9d:54:44:d7:f6:1f:92:d2:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C0:33:F4:E1:9C:02:99:06:F0:FD:78:CD:74:E3:B7:DD:2C:80:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7840:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:61:70:e4:dc:9a:b4:50:91:93:38:53:22:0a:9e:dc:b6:35:
         be:eb:49:51:03:8f:52:53:38:14:99:c9:89:eb:ad:4a:4e:62:
         12:11:68:1b:7d:e0:9a:da:21:a8:69:d5:a6:fe:05:58:29:cc:
         5e:53:5c:56:33:0c:b4:58:2e:65:40:01:dc:fd:23:4f:63:73:
         0b:0b:86:77:d5:7b:34:cf:1e:1a:44:0f:c6:43:3e:13:fd:b1:
         b2:39:f4:75:5f:0a:81:27:77:b4:5b:f2:2a:cc:a7:bd:30:e5:
         55:38:6c:87:6d:d4:5b:46:bc:bd:59:89:df:59:e4:c0:2e:f8:
         8c:06:ef:87:28:af:fc:0e:42:d1:3a:a7:40:0b:7c:77:fe:1b:
         86:2c:df:73:a3:10:11:f9:a5:fa:4e:12:c1:95:1a:0f:58:db:
         f3:2e:43:4d:e1:9b:e5:41:cd:92:a5:a0:36:db:fd:f4:08:8f:
         2f:ac:bf:68:4f:f5:ea:47:ef:39:78:05:22:2f:1a:86:7e:78:
         c8:9f:3f:2f:52:7b:16:99:4a:57:5b:a2:25:b9:64:7c:3a:aa:
         29:69:03:98:ae:6f:e8:98:0d:3b:96:57:57:a4:0d:47:29:e3:
         97:95:6d:3c:68:8e:4f:1b:14:82:91:73:1f:57:6e:32:4a:34:
         da:9c:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 21:10:15 2026 by rpki-client