Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/9fbf2e4f-7fd1-325c-9670-d60757fc27d9.roa
File:                     9fbf2e4f-7fd1-325c-9670-d60757fc27d9.roa (raw, json)
Hash identifier:          XGR0CRcsO/ut4h6txB/STtFoYEZJJO+uvVWeQS5GNwk=
Subject key identifier:   F8:EE:8E:2C:FA:7F:91:AB:9C:D9:D2:5D:47:56:5D:D7:92:34:72:7C
Certificate issuer:       /CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b
Certificate serial:       010D0C9F4328584DDD8B8750A968D00F5D218E00
Authority key identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/9fbf2e4f-7fd1-325c-9670-d60757fc27d9.roa
Signing time:             Sun 17 May 2026 16:36:21 +0000
ROA not before:           Sun 17 May 2026 16:36:21 +0000
ROA not after:            Sat 15 Aug 2026 16:36:21 +0000
asID:                     40838
IP address blocks:        2604:2460::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:8b:87:50:a9:68:d0:0f:5d:21:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b
        Validity
            Not Before: May 17 16:36:21 2026 GMT
            Not After : Aug 15 16:36:21 2026 GMT
        Subject: CN=8bb1d614-0f65-4d9a-8ab9-9a4fd66e607c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:db:9b:a9:22:e7:e3:7d:bc:e9:0b:e5:89:
                    7e:68:6d:da:a6:b4:fc:22:26:d3:82:91:fb:9e:48:
                    03:bf:e9:98:04:a3:46:44:d2:ae:fe:b1:6f:c3:c0:
                    60:25:b7:1c:b9:50:f5:2b:a1:f2:79:95:4d:f3:3c:
                    21:06:e6:80:48:54:1c:af:85:bc:df:45:21:38:33:
                    39:d9:88:f0:be:08:98:dc:4f:0f:be:39:41:ec:70:
                    22:15:9f:09:9d:65:81:05:d4:cc:c5:42:1a:99:b2:
                    64:70:4c:e4:c9:cd:b5:05:c4:ab:c8:0a:9f:84:18:
                    b7:30:d5:78:81:bd:e1:ce:85:3a:5f:71:c5:40:23:
                    ee:ac:4d:8b:1e:a2:07:b2:d7:cb:6b:a6:75:0d:d7:
                    96:ba:a4:b0:f9:2c:10:f4:cb:b2:c0:27:d0:0e:a0:
                    60:4a:75:77:a8:7f:3b:c7:b7:65:f0:35:1e:31:9a:
                    68:4a:20:58:20:5f:cf:9c:fa:85:e3:97:0c:0a:bb:
                    da:75:a8:ed:ae:35:97:25:cf:de:e5:8f:c1:61:6a:
                    70:29:74:cb:c6:92:bc:c7:58:f9:a6:69:69:89:01:
                    00:16:1b:e3:f5:a9:13:58:63:76:18:d6:96:ce:06:
                    1c:85:f4:92:28:5d:a2:5c:eb:e3:87:20:f7:53:92:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EE:8E:2C:FA:7F:91:AB:9C:D9:D2:5D:47:56:5D:D7:92:34:72:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/9fbf2e4f-7fd1-325c-9670-d60757fc27d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl

            X509v3 Authority Key Identifier:
                keyid:6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2460::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:1e:be:8b:04:6b:26:2a:a2:55:84:0c:81:60:aa:58:ed:
         58:c8:a4:bc:2c:e5:79:ea:cd:b6:12:d0:e6:fa:47:d6:59:38:
         47:05:c4:42:f0:0b:da:22:68:1a:b9:d1:59:66:e1:50:26:4f:
         94:19:43:84:8c:e5:93:70:02:be:80:b3:e6:ad:d1:4b:3c:17:
         4f:d7:3f:f5:c2:45:70:57:16:88:4d:50:05:9d:01:c8:3c:e4:
         18:ea:eb:9b:d9:99:1c:86:14:9a:e6:2e:b5:8b:1c:69:b7:09:
         5f:be:71:aa:64:a2:46:b7:f8:4d:a8:79:fa:10:4a:9f:3b:54:
         5b:3f:a2:6a:c9:2c:ea:bf:d4:38:5c:6c:47:57:be:b9:ac:e9:
         10:d0:fc:18:bb:d5:df:19:f0:ec:3f:52:ab:85:36:20:47:e7:
         36:a8:67:7f:a4:df:ab:0d:b0:50:38:f7:1c:8a:ec:e9:ab:8f:
         13:16:f4:90:e8:48:ae:9b:88:c4:2d:e4:6e:2d:23:30:f6:27:
         8a:44:56:b6:e7:76:85:0f:01:77:52:58:dc:11:5d:12:7f:42:
         49:26:1f:a6:6c:37:77:06:7f:86:d2:83:6f:b6:af:bf:7b:75:
         f6:3b:4d:99:8c:d4:61:dd:5e:b4:15:85:c8:d4:1e:aa:5a:e8:
         8a:52:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 16:15:08 2026 by rpki-client