Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/6c8e1d8b-4a67-3ad5-a544-0e3827256214.roa
File:                     6c8e1d8b-4a67-3ad5-a544-0e3827256214.roa (raw, json)
Hash identifier:          DHtj7Yl2rMZRz6IIStxtcK6/Lz9WZ9IBddTDTeXp1iY=
Subject key identifier:   B6:0E:3C:43:6A:31:16:22:C0:5D:4C:D1:90:91:33:8F:A6:58:3F:FC
Certificate issuer:       /CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807
Certificate serial:       010D0C9F4328584D4D5A792B640AA677D90B13C0
Authority key identifier: 6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/6c8e1d8b-4a67-3ad5-a544-0e3827256214.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     7253
IP address blocks:        96.46.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:79:2b:64:0a:a6:77:d9:0b:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=b665e29d-dd39-4115-b151-2015ac858273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:81:ea:7f:58:6b:0d:1a:3b:9e:10:93:aa:
                    8b:8e:f6:5d:5e:c3:85:36:ad:76:bc:ea:6a:ee:26:
                    5c:5c:77:08:f5:f2:7b:38:8a:ba:80:2b:11:bd:fb:
                    5f:34:c1:35:e2:c4:1c:c5:ac:25:7d:6e:2d:a7:0e:
                    cb:58:90:b2:4e:6f:f8:e2:e9:03:a1:03:af:b9:5a:
                    8a:7d:18:86:6e:81:9c:b1:fe:8a:d6:fd:ee:e6:e0:
                    df:d9:2a:44:f6:bc:ad:40:f6:e4:4b:ec:7b:39:34:
                    14:9f:a5:1b:ce:eb:5b:ac:9f:02:7f:50:86:0c:87:
                    06:32:03:a3:ad:7c:94:f4:cd:99:0f:aa:ee:1c:eb:
                    98:69:a6:fb:eb:55:d3:37:c3:99:2d:b9:cf:dd:10:
                    63:18:56:27:62:7b:27:36:a6:78:bb:7b:95:99:c9:
                    a7:dc:6a:74:04:4e:a9:b6:2d:69:3a:26:60:3d:0d:
                    14:65:d4:b7:2f:04:1f:06:dc:a1:c8:97:69:eb:9a:
                    ca:52:30:a7:ea:f6:af:1c:92:18:22:7d:2d:77:be:
                    cf:4d:e2:24:b9:fe:79:86:84:2e:59:86:b2:d5:7f:
                    c3:8e:c4:70:93:50:94:44:77:55:1a:44:e2:08:b5:
                    48:ef:6d:6e:d3:55:9e:d6:b4:7c:01:1a:47:81:77:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:3C:43:6A:31:16:22:C0:5D:4C:D1:90:91:33:8F:A6:58:3F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/6c8e1d8b-4a67-3ad5-a544-0e3827256214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0c:73:e8:ce:04:52:94:2a:ca:06:1f:38:86:25:44:77:74:
         9f:31:6f:a8:80:bb:2b:45:81:e3:6f:32:62:75:91:b1:ff:c7:
         0f:56:aa:64:59:cf:c8:39:19:19:9d:7c:96:0c:69:86:91:1e:
         9e:c5:8f:82:1c:75:a1:14:98:30:9c:70:64:b6:6d:56:7f:3e:
         6a:e7:6e:a6:81:45:7b:f8:50:4c:4a:00:a4:db:30:b6:f6:92:
         ea:0a:69:54:8e:4e:68:df:9d:38:25:12:a0:d1:01:8f:d4:cb:
         90:89:cc:65:7c:b7:ce:10:2b:b4:61:51:89:15:12:37:9d:91:
         d1:36:14:68:5c:8f:f3:7b:ae:3c:c4:ac:d8:7a:ec:eb:a9:eb:
         30:ae:dd:82:50:85:f4:86:c2:7e:35:a7:7f:21:02:29:ed:88:
         c7:12:82:a4:b0:7e:01:63:f3:08:ba:18:7f:f5:f3:67:3a:2e:
         a3:51:ed:67:29:64:36:71:4a:5e:3d:53:27:e2:82:02:b9:30:
         56:79:69:d4:62:03:bb:7e:85:53:9d:60:83:39:9a:64:5b:0e:
         10:c5:80:8e:b2:6f:32:c0:73:8f:3c:b4:ef:28:40:98:73:7d:
         c0:e5:da:34:01:f0:aa:bc:72:46:97:8c:75:cd:19:3b:82:eb:
         2e:89:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:02:58 2026 by rpki-client