Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d61eccf-c7a8-36d9-8e21-284000bae3fb.roa
File:                     7d61eccf-c7a8-36d9-8e21-284000bae3fb.roa (raw, json)
Hash identifier:          P9DqGnMWlD4BIH6+7myTpCacxKvjeIzJdeyGRLI6H6w=
Subject key identifier:   34:FC:5D:3D:D1:2D:FD:80:77:B3:1A:DF:51:98:01:68:77:65:96:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBA3B04357DEF20A882C6A2A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d61eccf-c7a8-36d9-8e21-284000bae3fb.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     32787
IP address blocks:        2606:6c00:208::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:04:35:7d:ef:20:a8:82:c6:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d23fa8ea-4144-4b26-9956-70916ad375cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:82:56:15:8d:2a:f3:ec:89:67:62:3b:d5:
                    1b:95:07:17:d3:15:d0:32:37:c7:4d:1f:0e:bb:15:
                    f0:6d:99:c4:6e:fa:87:48:8d:55:0c:9e:d6:d8:ee:
                    0b:3d:05:f2:40:1f:0e:2b:a7:31:23:48:ac:15:44:
                    7f:c8:b7:8f:28:42:39:4c:6e:d7:48:91:f1:8f:8d:
                    06:9c:63:c5:59:0b:cc:68:14:95:00:dc:b1:e7:1d:
                    c9:72:26:cc:79:03:d6:b5:eb:ec:9d:28:f8:1e:84:
                    e6:41:6b:82:3f:75:ea:cb:e4:9c:e4:7e:2d:53:91:
                    54:a6:03:55:65:c9:21:2d:50:b8:30:4c:da:7f:d7:
                    b6:4c:7e:33:72:62:3e:c0:f3:ed:72:bc:4d:19:f1:
                    26:50:80:cb:f1:54:ec:e9:1b:f2:b7:a3:42:8a:77:
                    4d:0d:63:57:2c:b4:21:05:94:7d:67:7c:b5:f5:97:
                    14:eb:9e:b2:55:27:96:08:21:80:0c:f5:57:cb:d1:
                    c6:5a:88:50:d4:00:d4:e3:1f:80:e9:11:91:b5:34:
                    a6:d7:6d:82:89:eb:11:2b:8a:3a:8d:c5:97:ce:c5:
                    44:0c:22:30:79:ae:03:bd:41:70:59:9b:9b:14:df:
                    5c:d2:2c:d2:59:bd:a8:9a:b0:83:7a:d6:e3:6f:28:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FC:5D:3D:D1:2D:FD:80:77:B3:1A:DF:51:98:01:68:77:65:96:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d61eccf-c7a8-36d9-8e21-284000bae3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:208::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:5e:04:94:e6:91:ec:fa:e7:54:9d:f8:be:71:a9:c1:35:
         00:75:e0:ff:7b:e7:b9:8b:1a:2e:4b:7d:98:e1:ae:ed:f5:5e:
         78:9a:45:0d:06:e6:d5:88:ac:ac:80:0b:6c:ef:ac:0a:16:e7:
         25:62:a7:28:bf:e8:06:f7:95:ae:23:8e:46:0d:c6:9d:ff:83:
         fe:c6:fb:fe:47:88:70:b1:26:3c:a7:b9:e9:dd:c3:6d:ca:4c:
         e3:d6:bc:06:c8:25:74:b4:4a:7b:df:4f:1f:f6:dd:70:b6:61:
         7f:d6:0e:66:c8:e4:d4:ca:ec:3c:2a:11:2a:7d:62:b0:35:85:
         03:69:ff:6d:1b:10:80:96:48:d4:48:93:7e:2f:4c:71:33:20:
         4d:73:e9:e9:b9:99:37:8b:a5:72:20:89:26:5e:1b:3a:da:ab:
         48:ba:68:67:4d:27:5b:ac:05:28:fa:71:f2:bf:6d:13:9d:a8:
         ae:11:43:1d:22:c4:c1:4d:22:79:a2:2b:76:14:0f:ab:27:d7:
         db:8a:0e:61:ea:4a:75:cc:8d:7b:6f:7f:28:0a:33:a0:c1:d5:
         fb:79:c5:3e:c7:58:0c:d6:61:7f:4d:07:8a:b3:29:18:ef:dc:
         df:3d:95:94:42:92:35:25:f9:42:07:8f:71:f9:c7:a3:04:19:
         1c:74:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:51 2026 by rpki-client