Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/6f24f9f0-24bb-3f8a-8803-6f3c7b77480b.roa
File:                     6f24f9f0-24bb-3f8a-8803-6f3c7b77480b.roa (raw, json)
Hash identifier:          KkRveAmjoADmEaoANpJAcyXmTXA8tsMP9D9fw6wStGg=
Subject key identifier:   6B:F9:39:FF:30:6C:FA:2A:61:89:52:53:47:B2:5D:0A:5A:38:34:54
Certificate issuer:       /CN=f932ac50-ee05-43cb-83a6-384d4d3614d2
Certificate serial:       010D0C9F4328584E779A33298BA4F841069A12E8
Authority key identifier: 49:41:33:DE:19:60:7B:4F:06:EF:6A:18:BB:BA:88:2B:E9:FB:3D:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/6f24f9f0-24bb-3f8a-8803-6f3c7b77480b.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     402414
IP address blocks:        2606:1500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:33:29:8b:a4:f8:41:06:9a:12:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f932ac50-ee05-43cb-83a6-384d4d3614d2
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=e0d52f8d-3227-4cca-b508-7bc90e31f4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:78:08:a5:d8:e6:81:35:d7:d5:69:12:dd:
                    d8:ad:db:f9:c4:0b:40:f2:e8:7c:32:33:2c:26:8d:
                    c2:48:29:6a:e4:ce:84:7f:65:5c:33:cf:09:22:c1:
                    51:57:ec:b5:05:be:34:08:f4:c1:20:8a:fb:0a:9d:
                    6d:09:8e:9e:35:42:54:78:2d:ca:49:45:54:6a:ae:
                    e1:1f:84:44:6e:7d:49:34:ce:01:fb:66:60:59:c6:
                    e4:76:7e:c1:a0:0b:fa:49:5c:92:5c:ff:aa:e4:e2:
                    f0:be:2b:e8:b3:d1:a4:38:37:89:57:79:2a:84:22:
                    f7:ac:52:01:f8:2d:22:6b:b2:3e:30:21:7a:83:e0:
                    45:a0:29:78:de:f3:7a:19:f7:1c:6a:fc:e6:49:94:
                    83:49:1b:fb:c8:13:5c:8e:85:69:52:2e:64:cd:72:
                    26:d9:77:4a:4c:d4:f1:15:7d:7e:53:fe:65:23:81:
                    25:ea:11:90:d5:df:6e:cd:bf:24:0a:7c:b1:03:22:
                    a8:dd:27:9e:8a:7f:88:45:7b:43:99:b7:19:b8:40:
                    48:b7:b3:26:e7:94:86:59:d6:99:33:90:a9:e2:fa:
                    1a:38:37:47:77:4b:d7:10:a9:53:e7:4d:ac:c3:e2:
                    e3:ed:99:64:c2:30:1c:dc:df:42:51:6f:d4:81:05:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:39:FF:30:6C:FA:2A:61:89:52:53:47:B2:5D:0A:5A:38:34:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/6f24f9f0-24bb-3f8a-8803-6f3c7b77480b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.crl

            X509v3 Authority Key Identifier:
                keyid:49:41:33:DE:19:60:7B:4F:06:EF:6A:18:BB:BA:88:2B:E9:FB:3D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:44:fb:c7:99:f7:0e:f0:54:e0:ee:57:0f:55:59:80:f8:5e:
         8b:b8:56:89:41:98:eb:5c:94:db:c1:ff:da:28:57:a6:e5:0f:
         55:14:48:8c:d8:9c:1c:e2:90:e4:bd:d5:ac:48:90:1f:09:8b:
         fd:0e:72:a5:29:2a:c0:13:68:9e:38:e1:ae:21:81:ce:fe:62:
         82:4a:3b:68:62:fa:69:ee:97:2e:cd:7b:37:ae:49:5c:3e:c6:
         1c:99:4b:35:af:05:8c:2d:29:40:c0:d6:69:bc:c9:46:de:1d:
         63:e9:15:bf:9e:74:cd:34:47:6b:a5:82:32:7c:d7:2f:83:82:
         72:7a:ff:24:54:b1:3f:fb:db:a9:cc:b5:49:8b:97:28:fc:96:
         5a:2b:b9:e1:ad:80:88:c3:f3:2e:15:82:99:a7:e8:9b:5c:8c:
         4d:af:27:6f:38:7b:8a:22:ca:bc:5f:f6:83:0b:8b:97:fc:5f:
         35:c4:81:e2:a6:93:71:ca:79:47:8e:31:59:81:ff:cf:45:00:
         1b:46:a5:e9:3b:e7:38:25:0f:0b:e5:68:b4:01:68:03:e0:85:
         6a:77:94:b2:cd:68:93:2b:cc:ab:28:f7:47:c5:c8:50:7e:32:
         f5:9c:67:b8:c9:29:75:0c:e3:f7:ed:50:38:5c:bd:ad:6b:ba:
         b0:f3:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:21:26 2026 by rpki-client