Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
File:                     06117935-952b-3adf-88ac-10a942733ca0.roa (raw, json)
Hash identifier:          TC54HaqT+D0h1xyGiWqdUmkw1TRPfw2jhvIBP5W9Xrg=
Subject key identifier:   64:3B:7B:B2:D3:03:D5:2B:DD:DC:72:AE:AC:DF:48:4A:56:C5:70:DF
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584D0912601FC4CA484A74D0D2C0
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     36850
IP address blocks:        2606:f640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:60:1f:c4:ca:48:4a:74:d0:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=a5dc78fe-8a78-4bb5-a86d-af32ed943113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:82:5f:ed:d6:64:ef:40:ab:f3:44:b7:d1:
                    ff:a0:8f:d4:ca:10:a1:b3:61:b2:fc:dd:1c:ad:c0:
                    c1:a4:4d:aa:79:82:ee:7a:c7:c4:f5:23:ec:28:2a:
                    b6:63:b6:97:be:e3:58:d1:b6:51:fd:72:da:94:f6:
                    68:e7:4c:58:50:1e:e9:1a:0b:ee:a1:68:94:24:67:
                    2a:d6:88:2d:5e:de:ae:fd:89:5c:d0:c4:7d:f8:f8:
                    ba:aa:04:d3:5d:2b:3b:f7:e5:1f:25:f6:71:11:c5:
                    64:1d:66:43:ba:7c:ef:ff:74:1f:68:1f:6a:a3:77:
                    2c:2a:de:0a:58:47:ca:01:36:18:d3:40:eb:c3:f7:
                    f3:96:89:e6:af:d8:70:ce:08:4a:d6:8a:bb:68:ae:
                    e5:2d:d3:64:7c:d4:c8:a8:f7:05:46:3b:53:17:53:
                    0b:27:b7:9d:3b:25:05:b8:d5:ca:b8:74:44:4d:d7:
                    2f:65:b3:3f:f3:52:77:e2:db:9f:94:8f:c0:f9:94:
                    17:60:c5:c1:ed:41:14:51:15:28:f0:8b:c6:f3:12:
                    5b:af:29:97:1f:52:cb:f0:61:09:f0:7a:b8:fc:fc:
                    da:36:38:05:f1:8a:e6:84:5e:db:23:78:d8:a3:78:
                    8f:c1:a2:8f:7a:d6:fd:a8:a5:9e:05:8f:60:62:d2:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3B:7B:B2:D3:03:D5:2B:DD:DC:72:AE:AC:DF:48:4A:56:C5:70:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:26:ca:e1:01:6e:fa:10:74:66:26:3c:a0:c1:c6:72:7d:2e:
         ee:b0:57:1d:59:f0:a1:9a:79:2d:e1:2c:f5:88:fd:e8:df:75:
         59:91:0e:50:02:53:61:cb:39:e9:46:3c:a2:a9:df:28:e9:f5:
         eb:c2:46:4e:78:6f:f7:27:f6:a7:54:b2:2c:bd:92:ca:89:a7:
         f9:d3:c0:f2:cf:4f:99:33:7f:01:31:89:47:f6:52:3c:14:cc:
         80:f7:8c:d6:23:9b:0a:d5:87:56:af:16:fc:36:34:4c:cf:69:
         ef:b7:19:54:fb:07:6b:ac:b8:70:a9:df:cf:02:4b:90:ec:ec:
         35:dc:01:f1:cc:3c:d2:b8:5c:ec:d3:06:df:60:d1:78:84:1f:
         77:e7:cf:0b:52:ad:7f:30:1d:c5:32:81:2a:3b:5c:94:62:05:
         2a:0d:b4:de:ea:a4:c9:c4:66:b7:17:2f:59:e8:47:c5:9c:02:
         10:2c:4c:6a:81:4b:40:8e:50:fd:0c:7c:c7:d1:00:95:eb:a7:
         29:d3:b5:ae:91:4c:af:70:c5:4d:59:fc:ad:fc:71:1c:c6:1a:
         7b:2f:11:ec:2d:b5:e7:60:3d:e8:62:60:04:6b:0a:4c:ed:86:
         ca:8e:5d:e6:21:97:ad:36:7a:02:da:bb:c2:23:4b:6b:72:a8:
         9e:2c:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:06:17 2026 by rpki-client