Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa
File:                     7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa (raw, json)
Hash identifier:          zNyhB/RnXll5QLsbtDVy2U8yUP134jQR5VbSYDGzQro=
Subject key identifier:   A1:1F:98:14:02:40:5E:A1:DF:41:67:20:3F:4B:CD:E9:FD:80:84:B6
Certificate issuer:       /CN=09e8ec9f-45c9-4103-ba8f-29090f373418
Certificate serial:       010D0C9F4328584EA795C74DBCC20E7838A546E0
Authority key identifier: E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6461
IP address blocks:        2606:ea80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c7:4d:bc:c2:0e:78:38:a5:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e8ec9f-45c9-4103-ba8f-29090f373418
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d37f306e-8f09-429d-8cae-519360f254bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:f8:13:80:94:2c:92:38:1c:2d:d8:5d:48:
                    19:01:bd:57:59:7f:d7:d4:42:be:5b:a8:62:07:ac:
                    10:33:37:32:ee:4a:7d:ba:1c:93:a2:84:42:e7:48:
                    ca:12:1a:c9:a8:64:a2:03:9b:45:3b:81:e1:05:15:
                    37:59:72:c5:ff:46:80:7f:07:f9:3b:a4:39:de:d1:
                    85:9b:e0:c6:a0:54:38:9f:5e:b0:33:32:c2:ec:c1:
                    07:d1:49:3e:ea:91:74:62:cb:86:97:1c:c3:17:ad:
                    a1:a4:f2:12:9c:f4:0a:2a:56:25:de:f7:4e:6c:ce:
                    da:88:92:10:8b:0d:19:cd:c8:28:b2:8b:8d:f8:ea:
                    93:22:ab:fa:2a:a4:29:32:7b:cc:07:5a:cd:17:f5:
                    7f:ca:bd:19:04:70:dc:c8:62:f1:44:d6:fe:6e:e4:
                    10:74:ed:e6:01:bc:51:fa:5d:1c:db:fa:d4:53:7b:
                    d6:1c:4f:08:43:e2:a2:78:e9:17:1d:3e:02:02:be:
                    46:3c:d8:fe:df:35:9b:8c:23:6d:05:5a:c2:21:7f:
                    c2:8c:19:da:22:b4:3b:47:52:db:aa:24:06:59:9f:
                    b5:af:9a:61:6e:34:cc:75:b0:c9:80:b8:eb:ef:71:
                    2e:7b:7b:f6:6c:0a:5f:f9:15:4b:bb:2d:4a:7e:2a:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:98:14:02:40:5E:A1:DF:41:67:20:3F:4B:CD:E9:FD:80:84:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl

            X509v3 Authority Key Identifier:
                keyid:E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ea80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8a:d8:fd:04:0c:bd:5c:51:59:38:6c:d1:db:c7:3d:85:2b:
         4a:66:1b:7d:2d:bb:47:03:6d:0f:fa:b3:5c:b4:71:29:31:1e:
         25:ce:c5:82:41:ed:a9:11:8d:5f:65:a9:2e:6e:9b:f0:13:f0:
         9f:fd:d1:be:02:fd:81:cd:06:ad:3d:12:af:d5:52:4b:06:a0:
         6b:57:be:1a:d5:6c:c1:fd:5c:82:82:42:92:9b:6d:b1:0b:84:
         59:cf:77:d1:a8:58:e9:28:90:a4:b5:e3:7a:18:5d:4e:3b:cf:
         be:7f:20:55:64:58:de:d6:64:c7:d9:0e:30:cf:e9:70:8c:0c:
         b5:76:d3:58:94:6c:66:34:19:02:5b:a5:78:54:3e:d7:cd:d3:
         fc:e1:39:78:17:22:b7:85:c4:51:39:97:2c:4a:bb:6a:15:23:
         a3:0d:a7:45:74:ff:a7:de:7e:d4:6c:e1:a8:38:4d:43:63:60:
         2e:b7:59:9e:51:cd:81:ba:dc:8b:16:b8:20:ea:eb:94:8a:6e:
         cc:aa:a0:e3:f4:5d:6a:bd:07:dc:0b:85:1a:bc:9e:25:54:90:
         33:9a:95:2d:ef:46:08:2f:e8:c4:e9:56:55:42:24:be:59:93:
         a4:76:96:8b:7e:b1:7d:eb:f3:e6:86:b0:38:9f:4a:f4:8a:8b:
         c7:42:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:23:34 2026 by rpki-client