Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c/c1a17d81-da7d-3d33-a435-888710a3657d.roa
File:                     c1a17d81-da7d-3d33-a435-888710a3657d.roa (raw, json)
Hash identifier:          PymZUgZZwBlgV1rOneMnN0KchxusbQjBynZL0SO402c=
Subject key identifier:   1E:C8:8E:72:D7:E8:D5:A9:95:34:C0:76:76:0D:A3:D0:70:21:F1:44
Certificate issuer:       /CN=006bd881-e946-46ba-98bb-6862937c3a6c
Certificate serial:       010D0C9F4328584EB57C4348E413F8CD49441040
Authority key identifier: ED:C9:36:2F:E7:82:FE:14:4A:48:8F:03:83:02:E2:06:7B:9C:D0:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c/c1a17d81-da7d-3d33-a435-888710a3657d.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     402600
IP address blocks:        2620:32:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c/006bd881-e946-46ba-98bb-6862937c3a6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c/006bd881-e946-46ba-98bb-6862937c3a6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:43:48:e4:13:f8:cd:49:44:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006bd881-e946-46ba-98bb-6862937c3a6c
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=d4476517-3f8d-4264-8b08-0ae33ed1af04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:e1:69:d8:19:82:d8:19:30:9e:19:1c:f4:
                    d2:4f:32:f1:4f:97:c4:a8:1a:b6:00:ed:01:b4:43:
                    67:a0:da:1f:e5:dc:87:fc:53:27:35:2b:7a:1a:f6:
                    61:e1:1b:54:d8:0d:42:74:7a:0b:9d:3e:07:a1:57:
                    2c:01:b1:b5:f3:ff:b2:5a:33:5f:20:28:87:5c:85:
                    15:4d:e2:0d:27:72:80:d6:04:56:95:a3:61:63:49:
                    b8:3f:ff:1a:89:1a:15:c6:2f:fb:54:03:f5:07:6c:
                    1d:73:cd:fa:8b:23:68:07:64:0d:82:6f:6d:a0:54:
                    97:c2:76:b6:e4:64:58:c4:86:82:d4:56:60:d0:64:
                    88:12:21:b2:2f:99:81:42:2c:13:5a:73:0c:7d:c3:
                    f0:20:a4:ef:68:08:be:dc:c6:c8:1c:e8:96:f5:95:
                    73:5a:76:9d:d9:1f:12:29:50:2a:2f:c9:ca:b5:22:
                    69:30:f5:35:01:d3:94:bf:39:2e:fe:93:29:ba:22:
                    dc:df:1e:dc:eb:dd:6a:a2:e0:f0:ed:7d:ce:f1:ee:
                    99:46:9a:09:df:b5:f7:9d:10:34:09:97:4e:dc:79:
                    59:26:1e:19:5e:7f:29:a5:63:b3:08:46:df:92:92:
                    a5:c8:72:a2:a5:c7:9d:46:54:5e:86:62:b7:4f:c5:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C8:8E:72:D7:E8:D5:A9:95:34:C0:76:76:0D:A3:D0:70:21:F1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c/c1a17d81-da7d-3d33-a435-888710a3657d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c/006bd881-e946-46ba-98bb-6862937c3a6c.crl

            X509v3 Authority Key Identifier:
                keyid:ED:C9:36:2F:E7:82:FE:14:4A:48:8F:03:83:02:E2:06:7B:9C:D0:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/006bd881-e946-46ba-98bb-6862937c3a6c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:32:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:e1:28:fe:cb:d5:84:6b:15:69:87:e5:79:66:54:ea:68:
         02:6c:4c:c5:fe:86:ab:2e:69:a8:cf:eb:db:b2:30:2e:9f:40:
         c0:ea:f9:8d:f2:29:cf:82:74:e0:97:c0:be:e4:98:a2:b2:80:
         d6:8b:9c:b7:68:b8:82:55:0b:64:fe:cd:0c:23:f3:0a:e0:cf:
         cd:66:1b:c0:0e:92:90:ce:ad:62:fc:0b:76:13:db:0f:d6:df:
         49:10:98:58:a2:28:2e:7a:fe:f8:db:d8:ce:89:7c:7a:c5:05:
         72:33:31:9e:d6:5f:06:20:ff:55:95:0c:8e:26:47:ee:f4:04:
         62:d0:03:60:89:d8:c6:3d:c8:a5:ad:ab:d2:75:43:e1:32:96:
         71:98:51:00:fb:9b:15:02:4e:9a:20:c2:0d:c7:96:a1:33:68:
         8c:ca:f1:08:07:68:d7:9f:8f:72:8a:68:e5:77:f8:16:76:5c:
         86:e3:92:78:08:12:3b:72:0c:72:46:04:ad:a3:f8:29:0e:2d:
         4e:6a:1e:24:3e:cc:92:7b:0e:2e:ae:52:b3:3e:78:b7:21:97:
         08:5c:df:8a:4a:8d:ac:fa:48:e5:8d:38:2b:2c:be:73:6c:28:
         21:f9:70:e1:b1:db:0c:cd:35:9b:89:0a:d0:5f:a6:9e:03:89:
         2e:ea:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:43:45 2026 by rpki-client