Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa
File:                     6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa (raw, json)
Hash identifier:          d2X383nGHO99sY9OmLMVXz+xtortzITM/CfhfEXiBw4=
Subject key identifier:   65:2B:6A:EA:74:49:31:4A:95:D0:CB:7C:DB:61:27:59:59:76:24:C6
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584E9BE515B8BB38DD37DA0D8980
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     33211
IP address blocks:        2606:ca40:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:15:b8:bb:38:dd:37:da:0d:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=1c422f9b-70c1-4cdd-b46c-bbf61a8e8ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b7:37:4f:1f:0a:3f:04:bf:16:2d:a4:24:40:
                    96:13:76:cf:24:b9:76:22:b6:e0:7a:3d:b2:cd:1e:
                    65:c5:35:71:e0:a7:a2:68:42:09:95:42:17:19:7d:
                    4f:3d:8d:8f:6a:0f:3a:04:60:0c:ee:31:bd:6b:a8:
                    e0:e7:ec:fb:86:8f:62:bf:ba:69:a4:88:2a:92:03:
                    91:81:84:05:a2:87:39:0c:18:08:27:37:f7:17:c3:
                    fc:82:85:bf:fd:26:e9:be:6d:85:73:3a:b1:fb:13:
                    c6:80:99:5e:ca:6a:89:30:40:de:c3:83:5f:0c:f0:
                    c0:64:53:10:1e:2c:79:31:4c:77:03:f8:b1:4b:f6:
                    b0:4b:78:06:35:ea:7e:a7:51:c1:49:66:31:47:67:
                    73:fd:0e:c1:27:a8:64:8e:c5:72:35:17:14:f7:f7:
                    30:60:21:f9:1f:43:0e:2a:91:ee:cc:99:16:4d:d3:
                    e9:ea:b5:8e:52:23:b1:7f:2d:ef:1b:e7:31:52:da:
                    13:37:d0:9f:2f:37:61:05:c0:d2:8d:a9:8c:dd:83:
                    05:96:0f:6f:7f:a8:14:1c:23:ad:68:16:3a:68:ea:
                    90:e2:f9:d6:34:93:b5:8f:96:fd:1a:f7:51:68:b5:
                    c9:19:0c:a6:67:d8:df:d5:93:3f:87:65:c5:57:d7:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2B:6A:EA:74:49:31:4A:95:D0:CB:7C:DB:61:27:59:59:76:24:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ca40:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:99:78:5d:0a:9c:e4:27:dd:9c:d6:dd:f3:9b:bc:41:36:
         b1:75:83:f4:e0:16:43:b1:15:ae:fb:ac:56:a8:e2:d9:80:1c:
         14:96:fc:7a:d7:27:2b:dc:84:59:88:4f:79:96:ed:6b:78:77:
         2c:9d:27:02:0d:d2:dc:13:8b:07:8f:5c:cd:b3:34:c8:03:26:
         9c:26:43:f1:20:f6:ca:52:e8:c4:25:d8:c0:69:ff:c6:17:af:
         25:41:a2:d3:40:fb:d5:3d:a1:ee:d4:81:a0:27:0a:7d:61:b7:
         ae:c1:db:34:1e:05:bc:a6:39:43:e7:cb:65:3b:8f:fe:bb:7c:
         98:d3:4d:93:a0:3c:83:20:aa:96:1f:83:f1:08:91:16:96:f1:
         26:67:a8:be:19:7d:8e:df:b9:b6:a1:8b:89:f9:64:ed:f9:75:
         30:28:1e:87:e9:e9:1a:a8:c8:0f:db:9c:a4:a7:16:ea:f0:07:
         fc:c0:3f:50:ba:8c:ec:8d:af:19:04:c3:d1:51:aa:15:97:c6:
         e1:75:bb:8c:13:60:e7:98:7b:14:10:ad:9f:84:5b:3d:b4:93:
         8c:e7:90:25:14:b9:07:58:c5:b9:9d:81:7e:04:9c:5b:b7:0e:
         01:0e:6c:33:e3:43:f3:56:44:71:d5:bc:c2:ee:2a:40:86:1d:
         8d:48:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:06:03 2026 by rpki-client