Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/6434d0d7-30b2-3e9c-b7cc-c1016e03428c.roa
File:                     6434d0d7-30b2-3e9c-b7cc-c1016e03428c.roa (raw, json)
Hash identifier:          33JqQh8D7CU5WbjZD/Ogrjm9dDrmC/NWcsyshDRI3Zg=
Subject key identifier:   4A:51:41:6E:DA:14:85:45:62:8A:E6:6F:0B:D5:BD:88:CC:56:2B:ED
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584D3DFF848C7B0E6286A0F13B80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/6434d0d7-30b2-3e9c-b7cc-c1016e03428c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     13213
IP address blocks:        2606:2e00:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:84:8c:7b:0e:62:86:a0:f1:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=e6eac74c-ee5a-401e-93be-8804f324ce4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:45:8c:6b:be:22:7d:d6:ea:f8:55:5f:d8:
                    ac:3d:72:9f:77:22:b0:c1:ed:63:61:38:90:52:dd:
                    50:74:e0:e4:f4:c8:13:8d:84:d8:85:f6:37:af:dc:
                    98:f6:df:6b:9c:03:79:0f:4c:b6:e0:d8:52:93:1d:
                    61:f9:82:28:35:41:32:5c:47:5e:ff:7e:43:0d:77:
                    e7:94:cd:75:79:1d:96:57:4c:7f:c0:6e:d5:7e:51:
                    90:2b:de:2e:fd:3e:ad:09:23:ac:25:90:e3:65:88:
                    da:57:dc:a0:cf:c4:ba:b3:20:a2:f8:fd:01:25:1a:
                    19:23:af:7f:fe:04:a4:c8:56:f7:6a:8c:ad:29:6e:
                    b0:fa:8b:9f:4c:83:25:70:6d:bb:e7:5b:36:3f:86:
                    db:05:67:ec:a9:dc:67:62:83:0f:08:76:b3:dd:b7:
                    ae:22:e5:33:57:58:b3:80:d1:99:eb:b0:10:5d:67:
                    e0:66:6e:06:c5:6d:21:d5:8e:f6:02:ec:e5:82:5a:
                    6a:94:a9:7c:a0:82:a4:d7:98:e0:04:bf:ba:6d:9e:
                    ab:d4:61:ce:5f:98:75:de:2a:ac:42:d1:c6:ed:99:
                    53:38:64:e0:16:82:4a:2a:7c:d0:ca:d1:a2:88:4b:
                    f5:da:95:e5:9b:03:8c:95:47:cc:bd:6c:e3:0f:14:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:51:41:6E:DA:14:85:45:62:8A:E6:6F:0B:D5:BD:88:CC:56:2B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/6434d0d7-30b2-3e9c-b7cc-c1016e03428c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2e00:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:42:24:b1:25:24:49:0b:63:ba:71:b2:3f:9d:32:8d:8c:
         f8:a4:2c:b3:a5:ad:eb:05:a8:e4:9c:49:84:9a:fb:3f:3a:2b:
         67:a6:1c:4f:a5:01:6c:e7:e0:86:4e:aa:fa:7c:0b:24:5f:ab:
         fd:54:fb:8f:fa:f2:56:b7:d3:ad:b7:b9:71:50:13:a3:f1:2f:
         37:79:78:f8:e7:88:41:c8:d9:3f:20:9c:77:9f:fa:b2:8e:8e:
         cc:a9:cc:67:0a:80:5c:e9:f1:ab:f1:1f:fc:bc:31:a1:58:0a:
         96:aa:0f:af:f1:31:7b:59:8d:21:9d:2e:f8:38:f0:47:1a:03:
         e7:42:1c:53:1a:7d:f9:8c:22:68:94:7d:bc:13:7e:8d:e8:d2:
         97:2f:92:4c:6b:e2:5a:c0:e5:ab:7a:9f:e1:95:7a:ec:37:e2:
         33:56:f9:3c:59:5b:d7:65:1f:0b:bf:86:13:68:6f:d4:7b:ee:
         97:b2:2d:8e:0f:04:f0:3a:60:71:b2:46:4c:6e:80:4e:62:76:
         ec:e5:05:ba:28:65:57:23:72:1e:bd:e1:5d:4b:a8:ac:1e:47:
         0c:59:3d:45:ac:93:77:f8:f3:82:6b:14:6f:b8:69:9c:75:af:
         40:08:e3:1b:98:e1:85:94:dd:3d:9f:97:4c:60:ce:60:79:ef:
         e3:62:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:48 2026 by rpki-client