Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
File:                     1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa (raw, json)
Hash identifier:          7PhNyQFy2UHB6draLRYWduBru1SVVm8r+kDE9D0hMOM=
Subject key identifier:   25:D3:FA:F4:04:F2:36:43:E8:EA:2F:5F:6E:61:BC:64:4C:7F:78:12
Certificate issuer:       /CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
Certificate serial:       010D0C9F4328584F4975EF2FF5C7E25AB30A5D80
Authority key identifier: EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399224
IP address blocks:        2606:95c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:ef:2f:f5:c7:e2:5a:b3:0a:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9cf7fb37-8681-4962-a698-04bc14130502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:9f:33:25:18:34:d4:42:ba:69:ef:f9:0f:
                    19:ac:4a:0c:2a:27:b2:f8:1a:1e:7d:31:6b:49:01:
                    55:9b:d1:c1:02:fb:a7:b7:48:1b:9f:0b:8a:89:4f:
                    df:1b:cd:68:1b:9b:6f:f7:17:d5:53:4e:53:11:a5:
                    31:d3:92:e5:c0:3e:80:66:40:5c:f9:61:4e:e1:9c:
                    83:e9:82:bd:7c:8e:cd:8c:57:a3:1b:61:df:ed:43:
                    26:86:af:48:e6:e1:a6:a1:55:84:5e:3c:5a:27:8b:
                    4a:62:26:bd:1d:7b:7b:1c:88:10:74:74:9e:f8:2b:
                    c0:7a:86:47:68:9c:f7:8a:47:48:ae:07:5c:e0:d9:
                    a7:c1:23:4b:c8:f7:c3:53:0b:13:06:b9:1c:06:83:
                    6e:a6:64:25:2c:c5:41:8d:71:65:11:ae:ed:b2:e1:
                    bd:05:15:42:75:99:6d:81:d5:ef:db:18:95:c0:7c:
                    00:eb:c4:86:7b:13:6a:9f:e3:bb:ca:74:44:99:2d:
                    17:2e:34:df:6a:6a:74:1a:49:40:41:44:77:13:c9:
                    80:9d:2c:f1:2b:41:2b:70:7c:32:91:d2:d3:68:69:
                    57:26:c9:14:19:81:8a:23:66:6f:3f:a1:67:f6:99:
                    a3:d9:ee:8c:7f:92:44:be:0d:d4:5c:7a:58:ea:df:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:FA:F4:04:F2:36:43:E8:EA:2F:5F:6E:61:BC:64:4C:7F:78:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl

            X509v3 Authority Key Identifier:
                keyid:EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:95c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:8c:5b:c5:3f:ab:cb:32:5e:41:3e:b1:65:82:00:35:f1:
         e3:80:c3:e2:ac:8d:1e:3a:73:81:68:9c:d5:4b:df:50:ff:ea:
         0e:ae:0f:62:9b:9b:84:b8:0f:ed:ff:ad:83:e6:c2:f6:8c:bd:
         3e:d7:88:0a:39:9b:e2:5c:78:25:f0:34:22:bc:48:98:88:5c:
         0c:56:a0:3a:84:c2:14:a0:6a:38:0c:13:46:a7:23:f4:f3:00:
         5f:29:6f:36:ff:8c:96:ca:cc:7a:8c:88:4a:c4:fb:2a:29:d9:
         14:03:26:61:e4:a7:12:09:1e:eb:c4:33:be:c0:42:a1:20:e0:
         cc:bf:d8:4f:77:ef:0a:95:e8:5e:6a:20:df:78:48:41:29:a5:
         b1:5f:0f:86:13:7b:91:65:f1:fb:e5:b8:0b:bd:57:8c:ab:72:
         c0:8b:06:58:34:c1:88:60:8a:ab:cb:24:a6:c2:b1:7c:b0:1f:
         45:d9:ef:1a:71:db:27:8a:61:1d:75:7f:06:bc:f3:3d:a4:52:
         a4:c5:8a:ed:e2:28:1d:0f:1a:d1:10:73:72:f1:a5:fb:67:c1:
         20:8c:fa:14:7b:96:68:ef:19:6c:c1:c6:f9:25:5f:ce:96:40:
         ef:fe:98:5a:cc:29:d8:40:58:b0:3d:0d:0d:de:ed:6d:43:a0:
         f1:dc:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:08:02 2026 by rpki-client