Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa
File:                     f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa (raw, json)
Hash identifier:          W963W8R1ufb39mEWv/8fGDCwIYLkIhXD4Y6KIzrQ0kc=
Subject key identifier:   83:8B:9C:77:57:E6:86:76:EA:BB:76:1A:92:9B:82:DC:52:9D:89:A6
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584EC0A727C5FD2544E6E96455C0
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     8070
IP address blocks:        2601:9200:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:27:c5:fd:25:44:e6:e9:64:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=fe6c8789-dc9e-4021-a679-4c4773917f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:fe:d6:be:3e:41:72:40:db:49:03:4e:fd:
                    e8:a6:f0:f7:71:a3:34:94:a4:45:ed:ad:4c:6b:43:
                    c7:5d:ca:e0:ce:d5:e9:68:88:d4:87:3b:14:ce:46:
                    14:3b:e2:c4:84:3c:40:57:31:1f:95:e2:82:48:74:
                    3a:d4:93:f3:a5:7f:09:fd:9d:7d:07:27:28:fc:ac:
                    49:10:af:6b:61:a0:a5:79:5c:10:44:da:77:75:4e:
                    5c:85:98:3c:65:8a:9e:03:83:1f:14:24:89:6a:2e:
                    46:9a:01:8f:11:1d:8a:07:71:cf:53:ad:33:6d:6c:
                    2f:b0:13:24:52:3b:29:af:74:3c:38:af:4b:80:f4:
                    8d:5e:b4:38:2b:0e:ac:1d:a7:7d:07:cb:eb:2c:66:
                    87:8b:0e:c8:d3:26:2f:be:f0:72:83:d8:67:30:40:
                    33:ca:30:f0:47:7c:e2:e6:e8:66:87:b3:44:58:71:
                    ba:5a:a6:6e:55:f2:10:86:01:13:28:f5:2c:d3:d7:
                    8c:ee:40:2e:3c:df:75:ec:af:72:c4:ed:14:ab:bb:
                    3c:2c:60:55:e2:16:ae:ae:18:78:98:37:1a:65:93:
                    4e:57:24:e1:4a:6f:36:c4:6a:78:ad:c2:9c:77:f6:
                    e6:a1:52:e6:1e:18:82:9c:70:6b:43:5e:e7:77:1b:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:9C:77:57:E6:86:76:EA:BB:76:1A:92:9B:82:DC:52:9D:89:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:58:89:0d:7a:b3:99:3b:97:f9:86:36:29:79:94:a3:3f:d0:
         f0:d6:fb:94:c8:c2:75:64:df:af:c0:38:ed:9d:cd:6f:e4:e6:
         10:45:07:ce:91:da:5e:a4:72:29:9c:46:94:c9:ac:bd:e1:fa:
         39:93:db:71:60:60:1c:c4:d9:fb:bf:aa:a6:90:10:a0:fd:cd:
         b2:25:d3:83:7e:ab:39:11:a4:af:40:9e:5b:27:42:71:58:2c:
         cc:de:ef:b5:53:f1:c9:c4:7b:29:de:60:09:5c:d1:f3:02:aa:
         7c:f1:1e:ed:e5:73:17:b0:3b:49:0f:a7:25:de:6c:26:ac:51:
         b3:19:98:2d:da:80:0d:27:0d:ab:df:0e:09:4f:ff:49:61:f0:
         09:39:61:b4:a8:78:e1:00:4e:83:48:da:9c:eb:7e:23:c9:73:
         f5:5a:3c:49:df:94:23:3e:85:2b:e2:e1:7a:f5:81:ea:81:b3:
         4d:ee:41:80:a9:06:8a:a8:11:b6:38:c7:1c:d9:d0:a1:22:52:
         96:7e:b2:85:57:82:b3:63:9f:39:44:25:ab:2e:41:69:41:1e:
         e4:c6:88:b9:f7:ef:ac:d6:28:42:d2:1c:e7:09:43:fb:15:68:
         aa:9d:09:ca:d2:74:ae:76:d3:0f:fa:04:78:43:7a:e5:a7:4e:
         6b:30:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:59:11 2026 by rpki-client