Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/aa429435-eab7-396a-818d-0bedecd7bdca.roa
File:                     aa429435-eab7-396a-818d-0bedecd7bdca.roa (raw, json)
Hash identifier:          YIls+dmBj76hCgEDq7zRuNxWCqalyTNp+7YZBBstFSc=
Subject key identifier:   1E:C7:81:A4:49:A7:F8:E6:0D:0C:C5:C8:DB:2B:01:CC:5C:82:6A:AF
Certificate issuer:       /CN=e0ecb861-4965-455e-940d-6f0ce189326b
Certificate serial:       010D0C9F4328584E3E5F27713BE3DC3713F14400
Authority key identifier: 8A:F3:5C:81:0B:85:D5:C3:71:88:E4:59:01:36:B3:06:75:45:29:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/aa429435-eab7-396a-818d-0bedecd7bdca.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     17350
IP address blocks:        2602:806:d000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/e0ecb861-4965-455e-940d-6f0ce189326b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/e0ecb861-4965-455e-940d-6f0ce189326b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:27:71:3b:e3:dc:37:13:f1:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ecb861-4965-455e-940d-6f0ce189326b
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=981d4a39-e6c7-4a4f-baea-8f18efc78878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cd:3d:f9:56:0c:44:a2:f8:7b:e6:fb:be:4e:
                    b5:e5:0f:48:fb:28:03:9f:38:a7:9a:0d:7a:40:40:
                    13:10:82:e4:60:1f:e1:d1:59:6a:6d:68:a9:fa:9c:
                    d9:0c:90:5d:bc:49:16:91:4d:f5:3e:4d:f5:36:bf:
                    ba:4e:9b:8c:20:8a:8e:a1:de:3e:16:d5:ba:35:4a:
                    36:5c:9d:2e:e0:3c:ae:37:fd:d4:7b:6d:5b:96:7c:
                    a7:98:f5:79:62:9f:62:42:a0:ba:e1:14:63:ed:de:
                    32:4d:fa:fc:e0:46:9e:f1:68:1c:70:21:91:4a:19:
                    67:65:99:a5:d6:ca:21:c6:a6:ec:d2:87:3c:94:97:
                    68:6a:dc:66:03:e4:c0:b9:4c:26:f3:cf:53:6e:e1:
                    26:b7:5c:63:49:14:52:34:bf:40:c3:37:e4:09:f2:
                    ff:fb:11:45:93:2f:14:64:bc:20:4a:2f:c9:ea:53:
                    db:1e:42:8c:d3:b8:07:21:9b:37:c0:c5:61:40:b4:
                    c8:7c:ca:d9:e4:d8:5c:4c:67:7c:31:cc:56:06:83:
                    73:83:96:56:75:be:37:4a:d4:35:37:f1:11:dd:92:
                    09:6d:28:0b:ef:0d:85:c4:8b:f5:0a:01:d1:02:e9:
                    8d:26:36:0d:05:b1:16:f3:10:b1:f5:76:c1:de:f2:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:81:A4:49:A7:F8:E6:0D:0C:C5:C8:DB:2B:01:CC:5C:82:6A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/aa429435-eab7-396a-818d-0bedecd7bdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/e0ecb861-4965-455e-940d-6f0ce189326b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:F3:5C:81:0B:85:D5:C3:71:88:E4:59:01:36:B3:06:75:45:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:806:d000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ed:26:a9:21:9f:bc:37:cf:7c:22:08:dc:d4:1e:4d:72:82:
         0b:f7:62:19:d2:30:0b:ef:1b:b9:f1:33:ba:3d:5e:ec:7c:7d:
         59:f9:9c:19:27:40:4e:14:83:1b:ac:b4:bf:61:45:bd:68:b0:
         13:55:80:45:14:b1:3c:2c:29:0b:64:f9:09:27:74:f6:3f:a3:
         b7:97:53:ed:62:c6:3b:08:f3:be:c8:4c:be:76:d4:96:23:fa:
         e4:9e:17:de:d9:d7:75:aa:5f:89:31:06:60:45:64:55:88:d1:
         cc:0b:f2:59:43:a7:b5:db:54:63:b5:ca:2a:1c:6d:c4:e8:90:
         6c:10:30:c3:7f:77:1a:c0:7d:c2:c5:d4:f1:70:4d:4c:b5:6f:
         ce:dd:aa:f5:02:51:1e:3d:72:99:73:4f:b2:92:ea:14:d7:9a:
         ba:cf:fb:22:2c:05:1f:67:1e:d1:77:ca:68:1a:39:ad:de:aa:
         af:84:7c:6a:77:f5:6f:bb:84:3f:c7:8e:fe:d2:77:92:ee:4d:
         08:21:3b:82:6b:5b:65:4a:0d:8d:9e:be:da:7c:9d:47:26:98:
         10:1d:d8:22:5a:f3:71:1d:ef:1d:c3:6e:dd:f7:51:88:f8:96:
         de:05:80:03:b3:ed:1c:ae:4f:85:ba:be:33:12:7f:93:76:bd:
         fe:0f:66:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:46 2026 by rpki-client