Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/964912ed-3821-3ff3-a627-e5e6d20f0506.roa
File:                     964912ed-3821-3ff3-a627-e5e6d20f0506.roa (raw, json)
Hash identifier:          cQ4Q3HbcLRWYERo7i4Kcq9O8Q0/yPCB6U3GNDcxqwbE=
Subject key identifier:   11:6D:DD:6F:9B:1D:FB:91:25:8E:52:3C:B8:CB:8C:6E:C4:B4:A1:A4
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584D3DFFAD7F11ED2F1855A82C60
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/964912ed-3821-3ff3-a627-e5e6d20f0506.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        2601:9200::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ad:7f:11:ed:2f:18:55:a8:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=e57ad3b9-4489-4b45-abc2-6796c47108dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:50:b1:08:fb:d9:db:d5:5d:23:b1:c8:f9:
                    fb:17:07:15:5c:7c:0b:d1:71:ba:de:a9:9d:5a:99:
                    2a:d8:fa:60:60:9b:a8:79:1e:2e:61:d5:d3:6d:dc:
                    85:9c:99:99:88:74:37:90:c9:ac:66:3b:7c:75:e3:
                    e3:b3:ce:e0:bb:1f:34:a7:a4:65:79:e9:b5:16:d2:
                    b9:8e:5f:a2:5e:a3:72:8a:39:4e:9a:8e:9c:ad:e1:
                    c3:1b:de:37:5b:9e:03:d7:99:3b:c2:58:32:a8:d6:
                    f0:9e:fc:f8:96:e7:08:3d:c1:b9:e4:28:c5:9f:0d:
                    fe:c4:31:7a:4c:51:91:ac:12:02:ff:78:ea:2c:7f:
                    3f:24:fa:54:db:dc:94:88:86:9a:75:86:b3:43:38:
                    49:e8:43:44:28:dc:dd:16:8c:86:1c:69:aa:d0:6b:
                    fd:71:a8:2c:2e:2d:31:67:fd:89:38:1e:bd:93:09:
                    44:ff:ec:f9:75:5b:13:b7:e0:df:31:b7:60:77:f4:
                    dd:9c:2a:00:9e:cd:6b:b6:f5:9a:69:5f:0b:48:41:
                    57:e6:80:e1:6a:fc:a0:75:b9:93:40:e5:f2:75:71:
                    42:95:13:5b:16:cf:4d:a5:14:32:bb:20:53:25:19:
                    61:9b:33:bf:9c:87:54:68:60:2a:0e:7d:27:25:39:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6D:DD:6F:9B:1D:FB:91:25:8E:52:3C:B8:CB:8C:6E:C4:B4:A1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/964912ed-3821-3ff3-a627-e5e6d20f0506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:9f:f4:4d:19:8a:5c:3d:b6:b0:f4:98:cf:f8:2b:6f:96:
         8d:31:55:3e:63:f7:63:07:e6:96:35:f4:63:ba:bc:32:77:11:
         df:47:06:1a:6e:a7:d1:a6:8e:fa:c0:81:47:67:60:95:fd:83:
         bf:87:db:e3:ea:55:dd:fc:a2:9d:d6:1d:8a:b5:26:a6:48:18:
         a3:3b:7b:bb:16:b6:c0:29:14:ab:2c:e3:b5:99:af:90:96:8c:
         e6:f9:21:f3:1e:3d:66:77:0d:b5:e0:10:ca:46:20:54:d0:f7:
         69:cf:c5:1d:9e:0f:a7:b3:c2:3c:f3:cb:65:5f:eb:85:fa:80:
         20:be:1f:d1:31:b9:4d:26:11:92:6d:e4:54:73:cc:01:f7:2c:
         23:93:10:c7:aa:77:5b:fa:ec:44:26:a9:0b:6b:a3:09:c2:a1:
         3e:2b:48:05:e5:df:c7:f7:4e:2d:47:52:b6:70:f9:ff:3f:3d:
         d5:17:c0:f4:9b:7d:10:aa:3a:d0:8a:69:90:a1:84:e5:7e:07:
         a3:fb:e6:cb:18:e8:b7:89:d5:bd:0a:f4:23:fd:6b:ed:5d:a3:
         ba:94:a7:3b:9c:d5:e4:1a:55:7a:fd:5c:93:33:89:aa:ee:48:
         c7:50:33:52:2f:6b:66:e8:0f:05:ed:b7:19:2e:09:2b:ba:ee:
         fd:b7:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:42:09 2026 by rpki-client