Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/211aac00-3bd6-3945-8742-da1b83483cb1.roa
File:                     211aac00-3bd6-3945-8742-da1b83483cb1.roa (raw, json)
Hash identifier:          Qqm4ZqM8yjGfMjVJZWPRHqR3BKiQhbiJLl7ykNNYxBs=
Subject key identifier:   76:BA:49:4D:6F:89:D0:97:3A:C5:89:EC:8D:02:64:0A:4D:8D:47:78
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584D3DFFAD72A2E36FB1EB2FF380
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/211aac00-3bd6-3945-8742-da1b83483cb1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     8987
IP address blocks:        2601:9200:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ad:72:a2:e3:6f:b1:eb:2f:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=09bc1253-1b31-497f-9663-6301373f3066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:6d:05:63:4d:b7:df:9b:d0:ab:23:25:21:
                    f0:7d:3d:37:2f:b4:6c:9a:2d:2f:8b:4d:51:e8:eb:
                    b3:0d:b8:4e:63:b5:67:29:92:ac:8d:25:4b:59:c4:
                    16:e5:2c:a1:6d:cb:49:3c:9a:2c:a8:bc:a9:2e:d0:
                    64:7b:b4:b0:88:65:71:ae:85:ec:c2:9b:2a:f2:fe:
                    6e:0b:31:dc:c3:29:80:35:d2:a2:84:2e:91:70:8c:
                    cb:ef:d7:89:7e:60:4b:1c:c7:eb:bf:a3:d0:a2:98:
                    9c:e0:0b:6f:36:37:ac:0f:32:a6:12:bb:b4:6b:fb:
                    7e:fa:07:de:35:c3:91:0d:45:9f:06:47:ae:78:a0:
                    d6:b4:60:25:59:f8:3e:f4:1c:76:ce:64:72:11:7a:
                    b9:97:75:8f:b1:61:8e:02:31:a6:7e:42:9f:87:76:
                    f9:e6:79:75:be:e1:0b:43:54:e3:7c:cc:c5:18:2f:
                    2f:90:ad:32:26:70:7d:e0:b0:be:90:25:cf:19:c7:
                    39:40:8a:48:69:c9:c4:b8:10:e9:ac:f1:1a:6f:f8:
                    27:be:a6:e0:d3:e9:58:ee:04:17:75:b2:a7:35:4f:
                    a5:67:8f:bc:f0:34:c2:7e:55:a1:ad:42:c2:ad:64:
                    70:d2:3a:39:7f:7b:c4:e7:bf:52:18:83:0b:43:9c:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BA:49:4D:6F:89:D0:97:3A:C5:89:EC:8D:02:64:0A:4D:8D:47:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/211aac00-3bd6-3945-8742-da1b83483cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:43:af:8f:5b:3d:29:56:e1:1d:d1:bb:40:30:ad:6d:4d:f0:
         47:48:90:74:5f:85:b8:e2:1d:fb:7c:b1:ac:f6:e2:ef:9e:34:
         08:e3:9e:eb:61:61:b0:0d:cc:7a:52:91:06:7c:5e:95:9c:ea:
         c0:7a:f5:f5:60:2e:d2:96:28:ce:18:7c:8b:25:4c:aa:3c:cd:
         e2:a6:42:b1:c1:52:55:36:ff:e3:99:25:57:f7:55:eb:fb:c4:
         d4:22:0a:58:78:46:df:f3:2e:0f:c8:15:c2:87:7b:0b:98:97:
         65:e0:5c:7b:95:28:e5:d7:a4:e4:2f:80:37:02:28:74:b4:21:
         da:e3:92:02:5f:fb:3d:59:19:47:e0:a6:70:bf:b5:22:2a:22:
         b4:db:a8:ea:b7:49:40:88:6c:a9:85:98:18:f4:d7:6e:15:38:
         7b:29:85:92:e6:36:42:33:52:64:f1:e1:19:6d:22:e7:c1:b1:
         35:ae:d0:a5:76:2e:46:ed:15:71:5b:af:94:98:8c:fc:0f:b8:
         5b:c7:d8:51:f8:db:6a:32:64:81:a0:f6:21:69:a2:d9:b9:92:
         f8:26:f9:33:d4:96:71:af:64:3e:a8:50:4d:6f:3a:b0:cd:42:
         41:23:88:ce:73:90:67:e4:51:db:eb:b2:d0:75:be:5d:a9:25:
         b1:a6:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:38 2026 by rpki-client