Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa
File:                     952bc161-991d-39ce-9362-1f60a57f0877.roa (raw, json)
Hash identifier:          7v63DzFwJ8Vkl2O/bTmACDBPSMIqszaTF90J+a6QvmE=
Subject key identifier:   66:7A:0F:CD:6F:75:8E:90:77:C4:BA:E8:98:62:24:A7:3C:CF:CC:75
Certificate issuer:       /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
Certificate serial:       010D0C9F4328584ED001E22555DD404356AA1E60
Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     11525
IP address blocks:        2606:5d00::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e2:25:55:dd:40:43:56:aa:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=a3379308-d986-4efa-bba0-0da5922c6de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:30:60:1a:63:ff:47:4d:e2:97:4a:62:db:
                    4d:57:0f:76:a8:1a:fc:7f:66:7f:b4:37:08:e6:eb:
                    18:71:46:74:e0:da:4a:ad:0f:3c:16:19:26:31:82:
                    d8:e2:b9:0b:b6:3e:bf:27:f5:a0:93:94:05:10:27:
                    95:d4:ac:97:33:88:b7:f4:d2:a1:30:b8:25:14:17:
                    01:53:1b:d2:c6:ff:3b:5c:0c:b9:10:dd:5e:8a:e6:
                    6f:d8:8c:85:df:af:f6:f0:54:c6:a6:f3:08:98:e4:
                    03:8d:70:85:d6:94:b0:e1:9c:8b:3a:37:01:37:b0:
                    ab:0a:6d:a2:03:ec:22:e3:e4:25:9b:8f:0d:e9:ee:
                    7f:37:60:8f:44:7f:50:5a:c2:a3:24:97:03:bc:bb:
                    a9:43:fe:96:00:6f:01:08:8a:5a:bb:03:97:3e:59:
                    48:2a:7e:cd:30:a3:c2:f9:23:43:12:cf:e8:89:49:
                    d4:f9:10:16:3e:0f:fc:0d:e6:30:b5:b6:7c:98:16:
                    5c:58:6a:2d:28:83:8f:48:67:06:e1:92:8c:07:76:
                    1c:63:72:a1:e6:4c:93:01:9d:29:66:df:19:1c:7e:
                    3b:4d:b1:6d:83:77:35:4c:04:40:92:d0:26:e1:9f:
                    ab:79:c9:6e:01:72:1a:88:51:ed:f9:7e:36:81:bd:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:0F:CD:6F:75:8E:90:77:C4:BA:E8:98:62:24:A7:3C:CF:CC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl

            X509v3 Authority Key Identifier:
                keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:c8:9b:29:32:29:77:d2:e3:4e:75:3b:a8:20:ee:64:08:
         b9:c3:2e:d9:63:f3:38:d1:55:e6:0b:b8:4f:0c:d5:38:f6:e5:
         1b:e4:7d:23:86:72:c5:f6:1f:7e:85:5e:0a:82:de:b7:e1:51:
         7b:9a:9e:26:6a:e0:f5:ed:c7:c9:63:2f:27:c6:5e:36:2d:c2:
         02:db:a4:46:a3:4c:53:92:24:0d:75:60:81:cb:a1:ac:6c:dc:
         03:e8:13:f1:77:d3:41:6c:4e:de:f2:e8:01:d1:1d:70:9f:ca:
         2f:03:95:9c:38:00:0e:d0:f7:c3:80:e9:cf:15:c3:f0:ad:45:
         ba:18:12:9d:5e:7b:fd:e8:ed:15:28:7d:eb:05:63:1c:4a:a5:
         8d:ca:16:42:14:da:ae:41:83:ac:ff:cb:fd:74:d9:9b:e6:7d:
         dc:8c:8d:b3:83:c2:48:2e:bd:78:f7:d6:38:c3:77:95:89:a8:
         42:6e:3e:a0:3a:31:e7:b9:35:18:a5:4b:19:32:b7:0e:52:3c:
         2e:e5:e7:c5:08:6e:4a:3f:78:67:40:93:1e:24:6d:ca:cd:9b:
         ab:a2:7e:fe:9b:11:cd:9e:b2:9c:b6:ed:66:b0:7d:42:b6:64:
         a6:c6:4f:53:b5:ac:d8:8b:25:f1:81:0d:38:6c:70:f3:eb:66:
         6c:00:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:13:23 2026 by rpki-client