Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa
File:                     7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa (raw, json)
Hash identifier:          RibA09mve84Rm+6Fp/SFAEGERV2Mt46GGuH9xeqNaU0=
Subject key identifier:   34:C2:BF:F4:75:00:D0:10:8C:A6:FF:7C:6C:9E:5E:8D:FC:BF:92:92
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584D3F64DC004B8B94D6D1490200
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     394497
IP address blocks:        2606:8e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:dc:00:4b:8b:94:d6:d1:49:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=b77cfe2b-b595-460a-a867-56812bc698e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:3e:2c:af:16:cc:fb:21:49:b1:a0:77:f5:
                    b9:27:ac:da:38:13:cc:62:7c:d9:ae:09:28:04:21:
                    da:8a:db:cc:ba:4c:ab:e3:b3:b3:c8:bf:5c:aa:6a:
                    44:de:f9:15:64:fd:cf:dd:5d:50:09:59:79:8d:fb:
                    84:18:53:2e:d1:1b:dc:f0:b8:1b:df:3a:a7:64:7d:
                    d7:0e:0c:68:4e:7c:e0:b5:35:ae:92:9b:3b:8c:2c:
                    61:56:3c:be:03:2c:a4:3c:47:79:a1:ff:7a:8c:ee:
                    c4:f4:76:8d:5b:07:e1:c4:28:6d:4a:76:6b:98:3b:
                    5a:4f:a9:1d:0c:56:e4:fd:b8:0f:09:5e:7f:20:a9:
                    2e:73:73:2f:cd:e2:df:25:8d:5b:26:55:f2:a8:b9:
                    22:d1:71:b5:78:a0:55:5b:8f:0b:cd:34:2b:de:15:
                    ce:5c:40:bb:d4:64:1d:46:dc:49:4f:2b:ff:a9:3f:
                    49:40:6d:8f:bd:55:ef:09:49:bb:c6:83:d2:a7:42:
                    c7:18:80:59:bd:53:f7:ba:e1:cd:01:38:18:d3:bb:
                    78:9c:9c:26:c9:ba:fb:77:85:45:f3:2c:41:6b:5f:
                    3c:35:24:82:73:40:9d:68:d6:13:1c:fd:5a:61:c5:
                    29:3f:01:d7:7b:0a:af:d7:93:60:2f:01:a1:26:cd:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C2:BF:F4:75:00:D0:10:8C:A6:FF:7C:6C:9E:5E:8D:FC:BF:92:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:03:32:fb:6f:18:39:a9:aa:db:2a:c6:6b:0e:76:fd:ff:32:
         82:9e:58:27:55:ee:de:e2:14:31:d2:f0:ad:ce:4c:1f:95:c0:
         ef:79:81:d2:1a:11:84:74:6f:19:6b:04:25:bd:8d:2f:42:39:
         f6:9b:e5:fd:92:7a:55:9d:9c:f9:3f:47:42:47:a4:cd:f8:3d:
         eb:92:3d:b9:ef:22:62:fe:be:25:e4:8e:9d:83:da:4f:2d:06:
         b7:19:54:96:47:c4:f3:cf:cf:d0:c7:d4:0d:7f:56:4f:37:53:
         fe:22:66:b3:5f:15:2a:dc:b3:19:c9:c4:1c:c2:3b:58:a4:87:
         62:83:df:45:39:e5:9e:a3:46:c3:a7:4d:70:c2:ad:90:7b:3f:
         f9:86:0f:4a:39:26:33:f4:ec:9b:97:2e:da:4f:1f:1e:b9:f6:
         bd:0f:51:ca:8f:eb:18:68:79:fa:43:34:e0:ac:5f:4c:b6:ef:
         58:4a:80:1b:b6:73:7f:0f:a4:4a:f2:26:ad:6b:61:a0:6b:a3:
         28:09:49:47:aa:ac:36:e6:9a:15:bb:e9:a5:82:2c:b4:5b:71:
         16:b8:01:e9:08:89:8e:37:22:01:2e:03:a1:23:72:0b:8c:4f:
         b1:9f:45:b4:a5:0a:95:63:05:c0:53:0e:bb:c9:ff:da:48:5c:
         d7:48:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:38 2026 by rpki-client