Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
File:                     06117935-952b-3adf-88ac-10a942733ca0.roa (raw, json)
Hash identifier:          EsZOylMg62ID88Gi+VpwkUtHU5Kc4Q2bgXKnFyGgl+Q=
Subject key identifier:   97:00:DC:63:81:E9:B2:B8:00:81:02:8C:D2:C9:CF:71:E3:A4:F5:EA
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584F4973F5154453E3DC4B120B80
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36850
IP address blocks:        2606:f640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f5:15:44:53:e3:dc:4b:12:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8d74f960-c8a6-48ab-9506-0ff702530f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:d2:bc:6b:70:03:20:6f:f2:57:eb:a4:a4:
                    06:5f:c0:48:5c:05:58:b8:80:8a:6a:0b:e5:00:2e:
                    c9:6e:76:0a:4e:15:33:b7:ec:5e:8d:b9:ec:11:9b:
                    ef:f7:69:9b:54:56:ac:59:75:e0:0c:aa:0c:af:92:
                    68:37:dd:e1:5a:20:4f:71:73:ce:89:db:c3:02:ec:
                    ae:91:82:21:bb:72:c8:c9:9f:c8:1d:90:e8:a0:98:
                    3c:c0:9c:04:d4:b6:98:36:71:08:9d:e2:6c:c9:d1:
                    e4:63:a7:e1:30:e2:59:cc:51:02:44:6d:0c:b3:1e:
                    7f:ff:8a:00:c7:7d:c7:93:50:4a:74:e6:11:92:f5:
                    a4:bb:fd:37:79:34:54:4d:ec:63:82:d2:1d:4c:34:
                    c8:17:45:24:d8:00:58:21:7e:25:24:89:e6:b3:9b:
                    1f:c8:1f:d3:46:4c:ff:5b:47:97:8a:36:80:19:33:
                    84:d3:c3:29:30:fa:98:91:16:e5:08:09:e4:79:0d:
                    f6:73:32:f0:ca:9f:3b:80:b4:2c:a3:54:05:53:4f:
                    0c:fe:7d:20:81:da:05:14:a5:84:ab:d0:5f:cc:aa:
                    3d:99:04:80:ed:1c:75:b7:39:b5:fa:8a:5a:0f:20:
                    c7:44:dd:5d:8c:63:8c:d0:16:25:e5:5d:dc:00:a5:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:00:DC:63:81:E9:B2:B8:00:81:02:8C:D2:C9:CF:71:E3:A4:F5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b9:95:3a:a3:3f:ed:6d:7f:c6:8b:86:d2:d2:86:54:b0:fa:
         43:4a:a6:57:ea:3e:c1:98:5d:c5:45:4d:d3:a0:71:10:25:f9:
         3c:5f:38:a4:6a:2d:b8:47:2b:15:ca:c7:1a:17:a6:00:bd:f9:
         33:bb:85:60:6f:88:fe:f2:b8:4c:19:a0:73:3b:e6:2a:0a:d5:
         81:1c:9a:b5:09:0a:90:27:4e:73:66:93:a9:1c:c6:96:4e:39:
         0f:74:ad:88:4e:17:c0:49:70:4b:9a:91:fe:40:eb:6d:82:1a:
         f3:d7:aa:3f:0b:e2:c7:6e:af:69:64:f4:36:06:80:dd:f7:df:
         01:5b:53:53:90:d6:12:1d:2f:0a:76:68:48:64:1c:d8:4f:84:
         e8:f2:62:9f:4b:84:b5:be:45:14:ce:03:22:7e:90:55:8c:4a:
         de:f1:bc:21:cb:db:1e:70:f4:3e:bf:28:93:11:f5:ab:41:cd:
         d5:50:a4:b3:35:1b:d1:24:6d:56:0f:63:87:4d:a3:87:17:f8:
         83:9b:bd:69:52:c9:ca:a4:55:9d:93:4a:3e:db:78:f2:08:71:
         5c:29:8b:f3:f8:b5:a8:7e:8b:73:94:27:cc:ca:bc:f5:9b:14:
         92:4a:4a:24:6a:d1:d8:7e:67:23:1c:72:37:39:71:6f:ed:47:
         64:01:f1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:42:52 2026 by rpki-client