Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa
File:                     aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa (raw, json)
Hash identifier:          mv9iM71GNPBSNC8Wz7olh0d22ouGbu4Q1h0yIDSWsnc=
Subject key identifier:   40:56:93:ED:73:EC:31:61:22:FE:2B:65:0B:38:B5:32:0E:76:CF:11
Certificate issuer:       /CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Certificate serial:       010D0C9F4328584EA788491D283E35A56C25B6C0
Authority key identifier: 80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2606:cd40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:49:1d:28:3e:35:a5:6c:25:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be8f23f-3a8c-4822-8996-e4131d203c13
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7d9ebce2-f506-4843-9a50-49dcd852444c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:87:5b:d9:74:b5:d3:02:2b:28:1d:92:4d:
                    22:58:96:46:ef:3b:79:5c:3d:a9:36:97:8e:f4:30:
                    f2:e0:54:b2:88:7c:dc:e6:aa:2a:c3:af:b9:f0:ee:
                    15:f1:cf:56:5c:22:ac:f7:85:05:90:80:6a:fb:a3:
                    2b:b9:c6:6b:94:9e:15:85:bd:9c:ed:6e:f1:4a:a1:
                    96:1d:7d:29:a3:3d:73:1b:f8:ba:0d:2d:da:22:f0:
                    9f:ca:6e:43:eb:d0:92:a5:d8:2a:b6:33:d2:66:87:
                    a7:eb:2c:32:8b:0f:fc:c7:e9:5e:54:0e:e5:1a:32:
                    af:35:f8:fe:1d:7b:51:2c:b2:9b:cc:16:e7:71:74:
                    bf:76:be:64:f1:63:ff:7b:2e:89:83:f5:0c:3b:b1:
                    86:a9:89:df:b4:65:bc:21:ee:f2:a2:17:4b:d2:2f:
                    d1:29:08:0d:8d:3c:bd:3f:b9:40:c9:fe:a1:5d:16:
                    da:54:d4:b5:41:0d:07:21:3b:b6:40:3d:ef:6c:cb:
                    e3:d6:21:4b:2f:fe:a6:2f:96:00:47:8b:28:fe:77:
                    94:a0:23:89:48:50:5c:17:d4:ab:16:7e:c3:ab:9c:
                    55:1b:06:9b:c5:75:ef:05:25:5c:b9:d2:1d:b9:8e:
                    c6:e7:b2:15:5f:d3:97:5f:2d:99:c4:cb:e5:1b:6c:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:93:ED:73:EC:31:61:22:FE:2B:65:0B:38:B5:32:0E:76:CF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl

            X509v3 Authority Key Identifier:
                keyid:80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:17:df:4f:f3:3f:ac:28:1d:0a:0e:22:73:d8:f1:a5:b0:29:
         2a:43:1e:d2:ff:07:83:03:15:af:cd:16:cf:77:53:af:0f:34:
         f8:c0:11:90:7b:f7:48:11:d8:62:01:5e:7e:77:97:88:32:f6:
         65:79:0e:d8:1d:3d:89:40:dc:cc:d3:d5:b9:57:33:97:ea:00:
         c7:cd:63:57:32:14:36:e8:7c:d1:20:f9:81:d2:98:3a:33:15:
         27:f7:5f:80:61:2e:85:a1:bf:44:10:d4:29:96:bc:f8:9e:6b:
         54:9c:cc:4c:6c:c3:db:50:41:8d:46:df:29:9e:31:8d:4c:bc:
         8c:57:29:de:c3:f4:b6:5a:cf:d9:ed:f5:04:4c:7f:50:35:04:
         75:43:ab:db:93:79:b8:98:d0:3d:73:b2:c7:cf:46:78:6f:29:
         6e:c7:ef:b4:70:31:3e:65:52:71:a7:30:22:6f:32:1f:54:15:
         e5:06:c2:09:c4:bf:10:6b:4d:bd:04:0a:2b:0e:51:79:9e:86:
         0a:b6:1d:f4:41:f0:37:7f:57:4a:9b:72:06:8b:8a:9e:7d:75:
         73:95:bf:07:74:83:bd:1e:44:0a:f1:36:22:80:ad:87:64:ee:
         21:93:6c:d7:57:08:55:b8:46:3c:dc:11:7f:c0:8d:1f:cf:b7:
         68:7e:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:28 2026 by rpki-client