Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa
File:                     868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa (raw, json)
Hash identifier:          6E1AlbPAjw0YWRAy7kS8l4zIKTizf3RCsb2jph3Iqpw=
Subject key identifier:   CA:0B:4B:9B:29:80:21:15:1E:2C:20:FD:7D:D1:93:63:B3:CD:CB:9E
Certificate issuer:       /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Certificate serial:       010D0C9F4328584D4A8F9F7DD38A418C2EF1DEC0
Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     18451
IP address blocks:        2605:e200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:9f:7d:d3:8a:41:8c:2e:f1:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=a65f2015-9770-4162-aeca-ab73a5d585ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:e3:62:8a:eb:0e:7b:eb:37:a1:21:75:18:
                    71:f7:4d:44:02:34:85:50:2e:99:c1:8d:8f:e2:ab:
                    8c:fb:5b:de:0f:2c:dd:58:cf:cd:dc:db:04:89:6b:
                    ba:c4:68:b8:77:8d:2c:a9:23:5b:55:36:30:58:9d:
                    af:f3:9c:5d:59:64:0c:ad:58:3b:49:86:39:45:24:
                    ba:03:7d:dc:df:38:cd:8f:7c:e4:f2:e3:85:12:80:
                    f9:71:01:61:3b:c4:5f:62:a6:37:00:96:ca:8f:1f:
                    0b:33:3d:38:91:70:d5:db:63:39:90:eb:4f:a4:e5:
                    9d:ea:0b:6d:23:f8:fc:e3:31:71:94:b4:54:1a:c1:
                    23:95:b0:b9:84:a6:21:a8:1b:22:90:b3:7b:0c:d1:
                    82:2c:ef:9d:c5:00:ad:4f:2f:26:23:12:ce:5a:71:
                    f4:19:7d:74:f4:cd:f7:49:03:07:c9:30:73:38:67:
                    c8:65:ef:39:b7:29:de:77:6f:7a:b7:13:de:23:12:
                    23:16:e6:76:07:83:53:10:b3:ec:91:09:49:76:84:
                    9a:3b:ca:84:6a:6c:55:d8:b4:91:d7:99:0d:4e:80:
                    57:98:e4:75:68:a3:bd:a6:bc:57:4a:58:54:c3:32:
                    ce:63:26:eb:93:f9:51:6e:a1:1e:d3:fb:49:e1:6f:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0B:4B:9B:29:80:21:15:1E:2C:20:FD:7D:D1:93:63:B3:CD:CB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl

            X509v3 Authority Key Identifier:
                keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:60:74:ca:e5:64:15:ab:0e:37:73:04:15:ba:67:77:2e:
         ce:fb:1c:08:6b:e6:17:89:85:ae:11:9f:74:2c:31:58:58:45:
         55:0f:1e:d6:ce:b6:05:23:55:a8:73:79:d9:23:a2:b1:de:01:
         b8:4d:e9:0a:7a:81:25:2d:2c:cc:f1:fb:95:92:5e:84:17:df:
         f1:8a:26:f0:17:d0:91:be:41:c2:37:62:26:68:a4:d3:cf:64:
         78:6c:e5:77:d2:39:4b:f3:af:fd:60:8e:b6:1e:04:66:fe:57:
         2c:82:86:6b:53:7e:6d:31:42:d0:b1:ac:cd:07:a3:c7:e6:ac:
         86:01:f6:63:14:3e:41:69:c3:94:e1:89:0b:5a:aa:96:ec:d1:
         57:80:df:a6:57:d6:4a:bf:9f:6e:b2:46:8c:3f:1f:65:e2:c5:
         25:f3:39:aa:c4:d0:34:22:a8:37:be:e0:5a:6b:da:ee:9d:51:
         fd:89:53:65:a6:96:c0:7f:75:57:00:ee:95:7e:0b:fc:bc:10:
         1e:a7:c2:d2:ee:a4:01:d9:7c:29:f1:2d:66:57:7e:b0:8e:ca:
         f4:f6:b9:06:9f:8e:79:00:05:ae:79:26:71:f6:c3:02:33:02:
         49:c7:f6:51:0a:78:af:bc:d3:a2:d8:0a:0d:1d:63:90:0a:27:
         0c:b6:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:55 2026 by rpki-client