Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
File:                     d32ad531-224a-3d26-aaf7-f82478922d6e.roa (raw, json)
Hash identifier:          o/qW+yGASfWpn9l1fzUfEPhqaoeLlLTGcLZ3L4l5xJg=
Subject key identifier:   86:F5:DE:6C:66:FC:27:4E:97:86:44:E4:C3:F9:BF:DA:DC:88:CA:52
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584E3A2F3377B7AE9547AEE04DE0
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     54613
IP address blocks:        2602:fd9a:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:33:77:b7:ae:95:47:ae:e0:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=6e8b9a88-aa58-42e7-9d1b-09a00b24af9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3e:15:17:31:89:49:17:39:90:47:0c:3a:8d:
                    59:33:64:4c:38:e9:2d:12:6f:31:84:94:d9:b0:28:
                    3a:3a:e3:c4:a7:e4:45:f8:2e:88:f6:81:ea:51:32:
                    69:df:85:18:e0:a2:89:f9:63:88:7f:42:76:06:60:
                    83:39:c2:6f:d7:ab:e3:bc:03:28:c6:06:85:1b:a6:
                    5a:92:a5:b0:1e:d7:c3:6d:6f:d0:80:b0:11:b9:12:
                    ea:88:fc:8f:9c:dd:ee:69:40:5d:78:3c:20:ed:ce:
                    37:42:cb:54:2e:eb:6a:1f:a9:25:dd:d2:dc:2e:84:
                    2a:b3:be:d7:4a:fc:b7:56:6d:37:0f:5f:5b:77:a9:
                    cd:f6:d0:95:24:c9:f2:d8:0f:a2:82:d3:12:cc:64:
                    6a:95:5e:f6:b8:a9:2b:f4:b8:af:b3:ca:38:b3:c1:
                    87:48:d8:b4:d0:13:1b:b1:aa:a6:7c:f7:f8:30:b7:
                    ca:4d:52:cc:74:c6:95:bd:8f:3e:df:17:5b:94:d1:
                    ec:bc:be:77:af:e7:e6:89:ae:07:b2:e9:b1:73:c3:
                    be:a6:c2:05:9e:37:8f:63:7a:44:07:da:42:34:9f:
                    58:37:79:ed:86:53:ce:de:2a:c1:81:0d:f7:79:f2:
                    c4:a0:71:c4:d7:7c:3e:23:9f:fc:6b:de:7d:a8:47:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F5:DE:6C:66:FC:27:4E:97:86:44:E4:C3:F9:BF:DA:DC:88:CA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:37:c7:a5:25:4c:84:4b:64:87:a7:2f:8a:a4:01:33:c7:
         c4:47:b7:2d:d1:9e:9c:46:c5:fb:1f:56:d5:f6:2d:01:31:ad:
         b0:95:0f:97:e3:af:51:09:47:57:62:4a:6f:b9:ee:47:e0:0c:
         06:26:f6:17:ea:a6:0d:ee:4c:7e:55:99:bf:57:b4:e3:2f:22:
         53:36:e5:95:c4:d6:67:e7:84:da:0d:f2:f6:ae:09:fa:ea:a0:
         e4:b6:97:b4:4c:0a:cc:a0:b3:54:b3:62:b8:d1:53:c9:b2:3b:
         83:c6:f1:c2:48:a3:9d:52:c9:6c:23:05:c5:48:b0:4e:0f:07:
         a0:04:e0:8e:70:5f:f9:c0:bc:8d:bd:e2:83:a6:cf:6b:93:ca:
         26:cb:30:a8:be:1f:0d:b0:73:d5:b9:d2:97:df:b2:29:b1:19:
         c9:e0:8b:24:bc:ee:1f:38:fd:03:73:60:a5:6d:e5:e8:24:df:
         d2:d6:a7:54:22:72:d6:9e:12:e9:7b:4f:0e:2c:cc:2b:26:32:
         85:99:eb:2e:8b:ec:2b:02:64:c6:0e:c3:1f:84:94:43:84:94:
         3e:a1:4c:89:d5:bb:f2:c2:89:74:e7:cb:03:e2:7b:37:12:9b:
         78:07:a1:6e:ef:78:de:ca:29:49:a0:54:d9:76:fd:e2:3d:4a:
         1e:7e:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:20 2026 by rpki-client