Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/9a6e5ea9-001d-3051-ab27-be001bbea162.roa
File:                     9a6e5ea9-001d-3051-ab27-be001bbea162.roa (raw, json)
Hash identifier:          75yhaImnRaBFIs4jRnqnfVicgDmqCBoQhceuXu8VbyI=
Subject key identifier:   C1:52:33:DA:4D:C9:12:B2:D0:60:8B:6F:34:66:0A:CD:9E:DF:8C:B6
Certificate issuer:       /CN=3d03670e-6ce7-48e2-b935-4bb50a95122c
Certificate serial:       010D0C9F4328584E4129C355541F58753DD19540
Authority key identifier: C2:B1:FA:F9:F7:9A:6F:F1:22:30:D1:40:E5:B4:EF:6C:6D:54:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/9a6e5ea9-001d-3051-ab27-be001bbea162.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     402347
IP address blocks:        2605:af40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c3:55:54:1f:58:75:3d:d1:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d03670e-6ce7-48e2-b935-4bb50a95122c
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=a9284001-bbd8-493a-a97f-791cc3fc6c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:d6:c0:70:91:8b:d5:d2:9a:95:a0:53:f1:
                    b1:66:ce:05:73:52:18:81:3d:dd:08:af:61:7d:92:
                    64:05:22:84:9e:f3:80:c4:a3:fa:8c:45:db:5a:a4:
                    08:72:51:f5:6e:b1:9f:70:f9:8e:9b:9d:fd:7e:2d:
                    ae:64:6a:fc:cd:20:fa:b0:5d:4e:59:5c:50:8b:1d:
                    25:ef:f0:34:85:0d:bc:83:23:3a:96:9f:89:aa:9f:
                    40:be:97:97:f3:93:b0:a2:8b:fd:36:93:1c:4d:3a:
                    64:0b:78:4d:8d:e6:75:33:86:32:ce:a5:9f:d9:03:
                    ed:2b:ff:15:89:bd:40:07:75:42:17:4b:0c:a3:b6:
                    ff:a9:3d:f6:05:7b:2a:66:25:ec:41:90:70:6f:8b:
                    87:15:29:8e:98:7a:b7:60:e5:53:0a:47:cb:e8:a4:
                    7e:7d:98:69:83:e6:be:b2:07:97:57:f5:1f:6f:9d:
                    c8:a2:95:98:f1:61:4e:08:ca:bf:ed:62:b7:74:89:
                    be:29:ab:28:10:4e:30:9b:03:7a:fc:67:f4:17:d3:
                    75:cb:2d:6d:b6:81:76:ca:7b:99:75:06:ba:66:7a:
                    0f:ba:6e:60:9a:7e:d9:3f:f5:83:a8:bf:09:99:dd:
                    86:36:9f:25:52:bb:e5:5e:61:90:e9:5c:83:7d:fe:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:52:33:DA:4D:C9:12:B2:D0:60:8B:6F:34:66:0A:CD:9E:DF:8C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/9a6e5ea9-001d-3051-ab27-be001bbea162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B1:FA:F9:F7:9A:6F:F1:22:30:D1:40:E5:B4:EF:6C:6D:54:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:af40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:6a:57:55:cc:e8:d1:ce:f2:9d:fd:9d:77:d9:57:ae:4c:
         dc:5f:f2:bf:a5:8a:dc:26:cf:a2:42:e3:eb:eb:14:26:6b:ed:
         df:9d:76:1b:a8:a8:de:c9:50:e5:61:c3:54:ed:dd:e2:0e:4d:
         f7:ec:fa:ef:3e:6b:91:69:e7:41:d8:40:e8:6d:6f:48:82:4c:
         d8:bb:7b:3d:b7:f8:98:20:46:99:51:0c:90:b3:0f:4b:26:e8:
         9d:8a:cd:39:ee:2a:ba:bc:17:7b:9b:e0:82:b3:80:93:fe:cf:
         2c:11:65:7b:a6:10:35:2f:2d:27:14:3b:2c:11:a6:1a:e1:b7:
         6a:21:45:7e:dc:d4:75:36:f6:79:78:cd:7c:ef:b4:78:74:be:
         eb:76:27:37:3f:13:b6:3e:d1:fc:58:d2:4a:f3:4c:4a:87:f4:
         ac:91:87:e9:df:1b:b4:ee:1e:6a:87:14:3b:4e:02:e9:d5:12:
         fc:5a:94:2e:e7:d3:8c:3f:52:72:f9:61:75:ac:ed:a4:f0:45:
         9d:41:35:46:b1:d7:fb:38:88:e4:86:ee:88:12:3c:2d:8b:8a:
         0f:05:ee:b8:8e:a3:54:89:17:cc:38:0d:f2:38:23:88:0d:e0:
         4c:46:fb:0b:e9:3d:87:ab:41:9f:83:e9:4f:0d:20:f7:77:3d:
         88:a6:c4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:27 2026 by rpki-client