Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa
File:                     bfc793ce-a993-3340-a83b-f59fc42e0a54.roa (raw, json)
Hash identifier:          +eLgO10kNwd3zR7H+HA6IpDSptQhaCHCUehFF793wd8=
Subject key identifier:   71:DA:38:4A:58:A0:15:27:BB:46:6E:1A:F7:6B:D2:CF:93:4E:25:B0
Certificate issuer:       /CN=206b65c6-b880-42a7-b728-a37b15fc236d
Certificate serial:       010D0C9F4328584E2D9F0F58E356813433805C80
Authority key identifier: 29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     35889
IP address blocks:        2604:8ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0f:58:e3:56:81:34:33:80:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206b65c6-b880-42a7-b728-a37b15fc236d
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=42c6c6f3-566d-434c-a0ed-74202c1b602e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:75:6b:c4:a5:fd:63:de:10:bc:4c:52:10:
                    41:bc:47:3c:28:a9:e7:0f:1e:ea:c1:ba:86:57:25:
                    6f:c0:d6:95:1f:0f:3e:08:66:6f:7c:7f:10:89:b3:
                    3d:01:52:19:c1:dc:40:16:5d:bf:08:5e:64:1e:8f:
                    b5:b1:eb:8d:34:bf:bf:39:e6:c9:71:0a:eb:32:b9:
                    e1:c7:0a:e1:e0:bb:f5:ea:37:ad:41:10:65:41:0c:
                    08:00:cc:92:cd:e0:7f:de:6e:11:41:72:e2:c9:de:
                    9e:b2:ed:e3:f7:a3:3e:62:43:d2:33:a5:4f:c9:ca:
                    2d:41:7a:65:f2:a4:4b:2f:fe:5a:20:d5:14:bb:d3:
                    ec:c3:ba:80:10:ad:17:0b:c7:5c:b2:1e:4e:bd:2f:
                    e6:25:c0:fd:d5:2b:23:ac:f4:a5:fc:a4:fd:e3:09:
                    60:0a:e5:dc:b4:e1:55:b2:a4:35:bf:2e:ed:03:66:
                    f2:2d:8e:31:ba:b7:af:7c:66:91:c7:27:b3:f4:80:
                    28:a4:1b:24:19:71:6c:22:c8:2e:b1:29:68:eb:bd:
                    11:ab:23:8c:2d:64:9c:0f:7d:ba:fb:62:f3:85:b9:
                    5c:d1:61:1e:7e:6e:0c:3d:a1:57:83:d7:fe:81:b8:
                    bf:15:72:bd:e9:21:41:ad:ba:41:42:1b:27:2d:40:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DA:38:4A:58:A0:15:27:BB:46:6E:1A:F7:6B:D2:CF:93:4E:25:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl

            X509v3 Authority Key Identifier:
                keyid:29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:00:c6:2b:4e:b8:39:5d:05:ab:d5:33:4b:7e:3a:46:d1:8f:
         98:ef:30:48:7c:c9:de:4b:e2:b1:99:10:c9:35:bc:51:40:a7:
         5e:52:e6:15:06:69:0e:a2:a4:f6:15:73:95:72:4d:1e:da:cb:
         cd:e9:3c:5d:73:16:76:1e:30:49:14:52:0d:96:6d:ad:be:64:
         e3:d8:8b:a6:06:29:b0:ad:43:61:a1:e0:b9:07:eb:9c:88:29:
         ea:54:5f:cf:50:2a:60:55:ab:50:ce:54:d6:92:c6:36:f3:53:
         06:fc:f5:d2:e6:c0:f6:e0:80:98:4c:d3:e0:51:2c:55:de:58:
         26:e3:69:63:d7:e3:78:46:67:0d:f2:fa:a7:ae:cd:e1:35:c0:
         0d:df:4a:34:0c:2b:2a:07:23:d0:0a:a4:aa:fe:e5:a0:bf:cc:
         86:61:cb:cc:e4:2e:31:55:fd:62:57:60:32:38:1c:b2:5e:50:
         85:dd:80:75:0e:72:59:12:89:8e:c5:c4:a2:22:bc:f9:96:23:
         51:c1:a2:a2:c9:f0:8b:34:96:60:9a:68:14:52:3f:cf:03:30:
         a6:9c:10:51:bf:9e:ab:b4:e3:37:41:7c:00:9d:7d:c7:72:ca:
         b2:ae:a1:90:cd:8e:35:e9:78:df:a1:3b:8e:52:46:47:b3:50:
         8b:a5:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:48 2026 by rpki-client