Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/6ac957aa-78bd-3f63-90fe-d558ac9bfdd3.roa
File:                     6ac957aa-78bd-3f63-90fe-d558ac9bfdd3.roa (raw, json)
Hash identifier:          qg26UQcNjMmRBA8zxauyA6EWwzRY9jQP9212E/vMZJ4=
Subject key identifier:   28:A3:E7:79:6C:A7:0A:F9:DD:53:F8:0A:E3:07:09:86:71:2B:65:95
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F4328584D95A30B80EDA832C5A3E87160
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/6ac957aa-78bd-3f63-90fe-d558ac9bfdd3.roa
Signing time:             Tue 21 Apr 2026 22:25:32 +0000
ROA not before:           Tue 21 Apr 2026 22:25:32 +0000
ROA not after:            Mon 20 Jul 2026 22:25:32 +0000
asID:                     64829
IP address blocks:        2602:fa21::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:a3:0b:80:ed:a8:32:c5:a3:e8:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Apr 21 22:25:32 2026 GMT
            Not After : Jul 20 22:25:32 2026 GMT
        Subject: CN=04739688-5400-4432-b30d-7b6ba6f7aded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:01:49:96:96:a8:f5:4a:d4:ce:38:81:7c:
                    28:05:16:61:0e:d5:41:45:02:cf:d2:a2:f5:14:c3:
                    93:2f:f8:1c:e9:0a:22:02:2a:8f:d6:9f:0a:c9:c1:
                    62:f6:07:f9:47:87:fd:84:45:7b:33:c2:ee:b2:59:
                    de:ca:41:99:2c:b2:b6:ab:c5:79:95:58:91:10:f3:
                    8e:ff:3d:d4:95:10:04:d5:ad:62:39:ed:e8:4a:04:
                    38:12:ee:d9:e9:d0:fd:58:40:0b:51:b8:25:ca:53:
                    fc:4b:94:f3:dc:95:e0:93:71:ac:56:3f:19:2e:66:
                    c8:d5:6b:e4:73:f0:83:0f:8a:97:fc:8b:97:e5:a6:
                    d0:f1:8f:8e:59:df:b2:32:f3:dd:b4:b7:a3:9f:e5:
                    d5:e6:e7:57:53:c6:96:6b:7d:4a:ef:43:30:34:66:
                    c7:fc:4f:91:0d:a1:5a:12:d2:83:0d:f8:85:a8:17:
                    c4:7e:45:59:b4:cd:ea:0d:35:c6:d4:34:66:1d:1d:
                    0e:48:4c:82:50:1e:04:77:69:44:bd:3f:48:06:2b:
                    cb:63:dc:f5:88:67:a4:77:b5:e8:8b:ce:b1:e9:a2:
                    94:12:af:5e:0a:3f:b5:ce:46:d1:06:9d:cb:7c:e1:
                    4e:89:ac:3c:b9:6a:61:2a:f4:69:0a:e9:4c:35:29:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:E7:79:6C:A7:0A:F9:DD:53:F8:0A:E3:07:09:86:71:2B:65:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/6ac957aa-78bd-3f63-90fe-d558ac9bfdd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa21::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:b4:ea:b1:59:ef:5b:5f:5d:f4:aa:87:68:dd:6e:89:9b:
         3a:1f:59:9e:ae:a3:a5:f1:93:87:ee:6e:d6:04:02:db:cb:60:
         49:ec:b3:0a:b3:04:10:48:68:78:43:00:2e:14:c4:bd:21:a3:
         ee:ae:65:88:a6:02:0c:10:9c:3e:72:2d:41:cd:02:9a:ae:ba:
         50:47:ba:7f:09:ae:2f:62:69:a8:4d:11:fe:d0:c5:fc:6b:85:
         bc:1f:4f:ba:97:b7:f6:fb:ca:f2:bb:90:c5:a7:33:37:0a:00:
         0e:f2:78:95:5a:cb:20:23:5b:8c:1c:1b:0a:89:3f:40:d5:52:
         29:06:14:12:62:4a:9f:57:98:a9:bd:e3:09:99:aa:25:08:ec:
         73:28:1b:15:50:5f:5d:0b:0f:fb:c7:d0:ae:de:9a:b4:c9:9e:
         7a:ca:52:62:63:44:04:61:0f:62:54:6f:de:b8:21:11:44:dc:
         66:b8:07:46:f8:aa:2d:51:f6:ac:44:ca:dc:44:34:77:ca:fa:
         96:b7:1e:fc:c4:60:dc:bf:34:4b:50:81:45:82:82:51:ed:17:
         bc:5a:ff:a8:2d:33:ef:e8:bf:b0:b4:76:86:e2:4d:b7:83:c1:
         4d:90:8d:3f:61:43:7b:90:59:b0:f9:fa:e8:56:ca:f4:25:76:
         31:7f:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:01:39 2026 by rpki-client