Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa
File:                     6aaad683-79f6-35a2-a574-00d76e7571ea.roa (raw, json)
Hash identifier:          KzZAF8tPI3xjmCo33gJgUHWifSxabB1Jh8pKz6QmOI0=
Subject key identifier:   BF:1E:5C:28:BD:C0:3F:1F:BD:6E:1C:F8:B2:F4:53:43:28:C4:33:D0
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E2D9F29080CA41F55CCA02B00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        2606:4280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:29:08:0c:a4:1f:55:cc:a0:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=d3f9403e-ba40-431e-84f2-7df14565fcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ce:18:d0:47:17:b1:17:ed:3c:a4:12:f6:b9:
                    42:f7:ca:5d:1b:61:39:01:76:74:d6:f7:58:40:c8:
                    ad:b7:d1:86:9a:77:ea:47:b1:0b:e8:0c:1d:cd:4f:
                    ee:cc:2c:be:0e:45:bc:11:60:de:1e:53:b7:20:9f:
                    1a:1f:33:68:87:16:a5:c9:72:b8:93:3d:a2:9c:87:
                    05:e7:61:98:03:c2:01:15:50:16:7e:22:29:f9:44:
                    8e:86:b3:37:37:ee:1c:24:ce:dc:35:ff:3d:7e:c8:
                    94:fe:1d:86:43:46:17:30:bc:29:81:f6:73:2c:44:
                    08:00:85:a4:9b:68:24:bf:8b:ce:9d:de:d7:09:05:
                    3f:5e:73:b8:e6:39:bb:3c:28:d5:0b:d6:e5:af:8f:
                    eb:0f:d6:f3:e3:c5:11:25:69:fe:89:34:d5:c3:58:
                    ed:83:50:95:da:80:fd:75:5b:ae:ae:02:5e:72:43:
                    c8:0d:6c:b1:60:59:09:07:e4:86:e5:03:ed:86:20:
                    af:75:d6:34:33:93:aa:af:ae:92:91:d5:01:1c:1a:
                    cd:8e:28:11:b7:e7:ae:91:00:52:63:ca:aa:37:d1:
                    50:62:b8:df:72:fb:20:8b:85:46:ba:ba:3c:32:9a:
                    33:a6:cb:44:b7:6b:b4:d5:ef:2d:59:2f:12:9f:90:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1E:5C:28:BD:C0:3F:1F:BD:6E:1C:F8:B2:F4:53:43:28:C4:33:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:42:1e:e5:cd:43:6a:b5:df:46:2e:3e:af:9a:fd:c5:7b:87:
         42:37:14:f1:f0:1e:b9:76:12:8a:c0:f1:88:06:68:af:8f:8f:
         2a:79:ee:64:41:03:7d:56:5f:2a:3e:98:b1:c7:f5:bf:e7:54:
         7c:ed:27:f3:b0:7d:98:6a:64:09:62:3f:89:33:a7:81:3d:25:
         06:00:64:1d:03:f7:aa:46:01:a5:69:bc:04:95:fc:d6:ab:0f:
         a5:6c:3a:a5:03:b0:ce:ad:98:a6:18:93:d6:26:5c:1f:4d:9c:
         e2:8c:9f:21:09:2a:8a:42:ae:72:27:db:1a:a3:f3:83:9c:18:
         e5:2f:bd:9c:b1:f4:6a:c3:7b:7c:72:19:a7:91:79:75:ab:5a:
         5f:dd:ae:6b:20:44:dc:35:24:00:e7:b8:29:13:82:41:e3:ab:
         35:b3:e8:de:32:f6:d2:c0:9a:c8:46:29:96:f6:16:b2:c0:9f:
         16:8d:30:b7:1a:90:a5:1b:b6:5a:92:b8:cf:8d:97:c8:23:34:
         79:9e:6b:a8:fd:a7:e8:21:4c:fe:a8:92:1b:bd:48:b5:48:66:
         9b:01:0d:9c:55:af:6c:8c:8a:41:bd:81:bb:a4:ad:3a:bd:1f:
         08:ab:e2:79:30:05:8b:fe:93:4d:73:bd:b9:aa:29:6c:0d:5b:
         74:b4:59:40
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4tnykIDKQfVcygKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
ZDNmOTQwM2UtYmE0MC00MzFlLTg0ZjItN2RmMTQ1NjVmY2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs4Y0EcXsRftPKQS9rlC98pdG2E5AXZ01vdY
QMitt9GGmnfqR7EL6AwdzU/uzCy+DkW8EWDeHlO3IJ8aHzNohxalyXK4kz2inIcF
52GYA8IBFVAWfiIp+USOhrM3N+4cJM7cNf89fsiU/h2GQ0YXMLwpgfZzLEQIAIWk
m2gkv4vOnd7XCQU/XnO45jm7PCjVC9blr4/rD9bz48URJWn+iTTVw1jtg1CV2oD9
dVuurgJeckPIDWyxYFkJB+SG5QPthiCvddY0M5Oqr66SkdUBHBrNjigRt+eukQBS
Y8qqN9FQYrjfcvsgi4VGuro8MpozpstEt2u01e8tWS8Sn5Dg6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL8eXCi9wD8fvW4c+LL0U0MoxDPQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNmFhYWQ2ODMtNzlmNi0z
NWEyLWE1NzQtMDBkNzZlNzU3MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZCgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBjQh7lzUNqtd9GLj6vmv3Fe4dCNxTx8B65dhKKwPGIBmivj48qee5k
QQN9Vl8qPpixx/W/51R87SfzsH2YamQJYj+JM6eBPSUGAGQdA/eqRgGlabwElfzW
qw+lbDqlA7DOrZimGJPWJlwfTZzijJ8hCSqKQq5yJ9sao/ODnBjlL72csfRqw3t8
chmnkXl1q1pf3a5rIETcNSQA57gpE4JB46s1s+jeMvbSwJrIRimW9haywJ8WjTC3
GpClG7ZakrjPjZfIIzR5nmuo/afoIUz+qJIbvUi1SGabAQ2cVa9sjIpBvYG7pK06
vR8Iq+J5MAWL/pNNc725qilsDVt0tFlA
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:22:59 2026 by rpki-client