Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa
File:                     4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa (raw, json)
Hash identifier:          S2VDjGcNxBchFyJbHedXY85Da7rglr2qb+UbJ9uw2s8=
Subject key identifier:   9B:62:F4:C9:A5:68:BF:A9:E9:16:F7:21:8D:AF:E9:38:66:6B:18:F2
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584D1B1A1B0AA8634B9A80D08200
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     18771
IP address blocks:        2606:3300::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:1b:0a:a8:63:4b:9a:80:d0:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=e9875c0e-d330-4a7f-a734-9239a4f20993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:7a:63:42:dc:d2:8d:9b:bd:2d:34:97:69:
                    59:6d:ab:85:27:b1:c8:09:09:f9:f4:d6:45:0c:1c:
                    bd:0b:ce:f0:d6:ed:c3:43:10:4b:bc:6c:eb:d2:ee:
                    91:a4:34:41:de:cf:fe:94:27:aa:e9:34:33:b1:60:
                    82:5b:b5:da:7a:f6:da:f8:7a:1b:06:74:a0:0f:b2:
                    73:bf:d3:a5:75:8a:41:d8:31:ca:7f:8a:f1:44:63:
                    f7:be:ad:71:ee:cd:ab:78:78:91:7c:10:78:44:a9:
                    95:5b:2a:00:d6:a1:80:19:49:cf:48:50:e6:91:9c:
                    e7:4d:ad:54:5d:e3:0b:a2:d5:e5:53:2f:5c:fe:55:
                    1a:d9:36:f7:b4:42:e9:28:11:ef:9a:b3:94:24:3b:
                    ef:72:2d:9d:47:85:f7:da:bc:0a:5f:13:ff:9b:58:
                    df:ff:64:49:9a:55:73:6f:55:07:fd:7e:2f:2a:06:
                    21:d7:ec:c3:09:53:96:50:b9:7e:a6:bb:30:7b:82:
                    5d:6a:4d:3e:b9:80:3d:67:73:a9:b5:24:0f:1e:d8:
                    4c:c3:7d:19:07:79:a1:f0:64:37:a3:7f:71:10:29:
                    e0:86:02:8d:72:66:a0:9d:6e:ed:d9:99:32:bc:98:
                    00:c2:81:c5:88:69:9c:f2:42:8e:03:f9:9b:0a:15:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:F4:C9:A5:68:BF:A9:E9:16:F7:21:8D:AF:E9:38:66:6B:18:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:3c:a6:0c:b1:aa:4d:f4:94:58:3b:e6:3e:4c:de:06:1b:
         01:eb:a1:85:2d:ca:4b:aa:b1:d1:d0:54:19:dd:10:1d:88:53:
         08:cb:d4:e0:7f:c4:bf:0b:d3:b4:45:95:c5:e5:31:df:3b:6d:
         46:1b:30:8d:4a:b4:74:f8:cf:61:d6:13:47:23:28:61:fd:d3:
         1d:73:09:ac:3e:77:14:f1:bc:d4:32:4d:e3:de:1a:d6:f4:c8:
         a8:0c:9e:c2:99:2c:fa:10:90:ec:ea:8a:3e:53:69:b8:ba:36:
         7a:a9:08:d4:28:e3:c8:59:bb:8f:82:38:97:dc:67:e9:50:23:
         e1:7a:2e:a0:25:6d:38:80:37:67:21:c0:69:43:f2:a5:ed:69:
         ae:93:bf:07:4a:23:10:d6:ef:fd:8a:9d:63:8b:58:9f:32:9e:
         4b:48:7f:f4:f5:ba:ff:04:4c:9b:4a:26:29:d2:44:cc:c3:83:
         9f:74:25:3f:68:3a:87:14:af:ee:fd:5d:e5:bb:2e:90:fd:10:
         36:75:7a:bd:bb:2a:e5:9e:cb:fd:78:f7:98:c3:f5:3e:b6:92:
         4e:90:56:88:84:73:f0:20:a6:a5:6a:49:e7:73:4b:0a:e2:c8:
         11:a7:7b:b4:ef:3b:6f:53:1e:a9:09:0b:d5:a6:26:37:36:56:
         01:21:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:16 2026 by rpki-client