Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
File:                     401bafbe-03cc-3cac-9a44-36c27387a392.roa (raw, json)
Hash identifier:          2Uzyx5AAH6ZWQeQTPXtN1gnZKALg8ZBKVRrehZLHGus=
Subject key identifier:   89:53:C2:02:F6:C2:03:F9:8F:A2:BB:28:DE:0B:96:32:14:84:4D:6A
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584E4559D9E1AD056C369CD631E0
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     3384
IP address blocks:        2001:4830:c0c0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d9:e1:ad:05:6c:36:9c:d6:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=e69a740f-054b-422f-9740-34a20e327cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:72:57:b1:e3:d1:5c:dc:0a:55:a7:b3:e7:
                    28:7d:b9:d9:8d:94:dc:15:e3:f3:ad:43:b9:88:e8:
                    ea:c2:d6:8d:2c:cb:cf:5c:5c:01:54:89:df:e5:fd:
                    32:88:90:85:68:64:9e:20:53:ef:1f:8d:89:f9:b4:
                    7a:ca:d7:b1:3b:e7:af:a7:c2:6b:c6:7a:e7:c9:61:
                    2d:01:32:79:4f:a2:21:a3:10:49:3c:b1:dc:da:1d:
                    cb:0e:ba:51:31:17:c0:fe:63:f0:23:6b:26:66:3c:
                    41:72:5a:32:2c:9c:42:5e:14:d3:f5:68:06:65:d4:
                    97:9a:c9:96:6b:d3:9d:87:41:db:04:0c:51:78:f4:
                    4a:64:45:b1:1b:4c:e3:c0:bb:06:8f:aa:0d:ad:a7:
                    9b:8b:ff:ca:01:cd:8e:c4:c7:e7:ab:17:86:78:77:
                    0c:57:81:4c:ab:2c:d2:22:b5:0d:93:cd:7b:80:98:
                    8c:a6:d0:8b:e7:81:6e:f8:02:aa:5d:6f:88:1b:71:
                    9d:7f:42:b1:75:23:a1:a5:e4:fa:08:ac:32:1c:97:
                    75:97:37:ed:27:b8:e6:93:ad:0c:de:97:70:1c:d0:
                    5a:dd:9e:37:75:11:a3:2f:3f:7b:72:e0:5f:d1:e8:
                    8f:53:74:87:65:0f:5e:39:b0:00:e2:d3:81:bb:e7:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:53:C2:02:F6:C2:03:F9:8F:A2:BB:28:DE:0B:96:32:14:84:4D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:5a:51:b8:61:0f:b1:b4:bf:99:1f:69:b1:0b:96:58:ae:
         ae:b0:5b:1c:c1:c7:6b:a1:aa:d4:91:a4:9a:4b:83:37:0f:03:
         e4:d3:3f:ba:dd:2c:2d:a1:5e:ee:f8:eb:2b:91:a4:81:76:aa:
         9c:70:ad:7f:54:3a:e5:6e:87:46:29:36:e7:75:0a:dc:0e:a0:
         aa:48:3d:91:30:cd:39:b3:c8:1e:43:cd:7d:33:5e:03:d9:22:
         6a:4f:d5:b4:9b:01:8d:1b:9a:ab:ca:af:c1:13:e3:ce:fb:a9:
         f4:5c:5b:b9:b6:74:98:5c:aa:5a:a1:f3:5b:e2:d3:3f:ec:75:
         fb:d3:cd:33:d4:51:9b:c0:fa:6c:99:ba:6e:da:01:9b:3c:bf:
         c3:ba:b8:03:24:93:8b:df:38:15:79:77:b0:0c:97:37:22:94:
         21:98:41:23:13:04:99:fd:19:08:b1:49:36:a0:6b:ec:d0:38:
         9b:ef:94:c2:89:a3:f4:36:04:5b:1a:15:ee:c9:c4:be:70:cd:
         09:f1:7c:47:8c:00:b3:bc:60:6c:7f:d6:c4:63:f4:a5:e4:29:
         c2:27:89:86:c7:ac:8d:ed:32:f7:0d:8e:8f:b3:78:92:ff:d9:
         89:c5:a3:c1:0c:0f:e2:69:0c:87:3f:79:f1:e4:9b:da:ad:78:
         49:a2:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 00:49:13 2026 by rpki-client