Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e/6faada88-9392-3dc2-a012-106642ec9f9f.roa
File:                     6faada88-9392-3dc2-a012-106642ec9f9f.roa (raw, json)
Hash identifier:          g87n83wkeaIRUNj4MYJ3stKIBcIHXGCkVgvT3z50OH0=
Subject key identifier:   7A:90:E3:93:C3:E8:20:B3:28:11:FD:FD:F1:AA:77:A3:F5:E6:57:38
Certificate issuer:       /CN=75006de4-4556-4171-baea-6de86b4d793e
Certificate serial:       010D0C9F4328584D6945014EAD50256DCE115C00
Authority key identifier: 5D:68:BE:19:C8:E9:C6:5A:B3:55:DD:39:F4:E1:12:16:5E:E6:6F:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e/6faada88-9392-3dc2-a012-106642ec9f9f.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     399264
IP address blocks:        2620:69:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e/75006de4-4556-4171-baea-6de86b4d793e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e/75006de4-4556-4171-baea-6de86b4d793e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:45:01:4e:ad:50:25:6d:ce:11:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75006de4-4556-4171-baea-6de86b4d793e
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=0e1e23d0-0d8a-430a-9d57-a1c9886670cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:72:78:aa:fb:93:b0:39:09:0f:1e:09:6f:
                    e0:b8:c2:09:8f:3a:8e:70:d7:1f:17:fe:c4:1d:83:
                    7e:f8:0e:9c:84:cc:c7:1b:bf:db:d9:c8:ee:2d:9d:
                    67:20:c9:71:36:4a:63:cb:18:8d:47:23:c8:42:7e:
                    8b:0f:15:fc:f7:1c:8d:51:b7:52:0b:35:ce:35:2b:
                    e8:05:e0:b0:a4:6c:01:e7:66:50:2c:e8:03:f9:e1:
                    16:69:8f:25:54:84:b4:de:53:0a:58:b6:7a:ef:45:
                    18:da:46:1b:d8:8b:c3:76:8b:db:5f:b5:40:a8:88:
                    7a:43:1e:09:08:6c:22:de:59:f2:f5:99:08:3c:2e:
                    54:21:2b:f3:a0:f3:12:23:99:37:76:fe:60:13:b8:
                    43:09:6c:e3:54:b9:d5:47:8f:9f:b9:9e:6f:af:40:
                    db:c2:44:d9:c6:47:cb:8f:41:06:d1:08:8a:7d:ce:
                    bf:4c:fb:03:38:62:07:aa:a4:ad:bb:26:e8:68:9e:
                    bd:40:4d:45:e4:75:8a:4b:cc:34:7a:c5:8b:82:eb:
                    55:0f:8e:f6:81:99:fc:ab:79:d1:5f:7f:40:a5:9e:
                    13:f3:7e:71:dc:30:46:8f:a6:73:fd:ab:7b:eb:06:
                    30:df:f2:05:da:30:ad:5e:4e:6a:37:99:e7:c7:fb:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:E3:93:C3:E8:20:B3:28:11:FD:FD:F1:AA:77:A3:F5:E6:57:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e/6faada88-9392-3dc2-a012-106642ec9f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e/75006de4-4556-4171-baea-6de86b4d793e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:68:BE:19:C8:E9:C6:5A:B3:55:DD:39:F4:E1:12:16:5E:E6:6F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75006de4-4556-4171-baea-6de86b4d793e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:69:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:c0:60:ce:84:04:eb:47:7a:fa:3f:8d:25:06:04:bf:c5:
         ec:19:a6:12:43:92:8f:8d:90:da:f8:71:0e:9e:92:88:62:7b:
         e7:8d:04:d5:9a:56:fb:26:87:80:d8:b3:91:a4:96:42:82:4a:
         e1:38:50:52:cf:ad:33:5b:76:9f:91:b2:de:c2:2a:6a:46:05:
         79:0c:f4:66:e6:f6:66:87:21:34:5d:10:18:e3:41:a2:7b:50:
         17:b7:a6:20:1c:c4:81:10:c7:11:9f:84:07:fd:5f:fc:1f:8c:
         57:5f:8c:00:17:93:23:cd:33:4a:d5:59:f5:b2:bf:3a:8c:82:
         3a:13:26:72:d6:c2:57:72:85:c8:79:66:41:0c:46:78:1b:c7:
         2f:a5:57:f6:38:e6:d8:65:9c:bb:f0:b3:66:a5:09:f1:cb:d4:
         50:8a:e7:e7:7c:c3:cf:f9:8a:7a:0c:d2:af:84:37:34:0c:c4:
         d2:fb:78:56:7c:88:42:2b:2a:e5:5b:24:6c:ff:57:5a:49:c1:
         1f:67:b5:96:bb:37:ae:49:70:1e:3f:60:07:0d:2b:48:dd:b8:
         80:6c:2f:f7:d3:ff:7d:54:e5:b9:86:a0:d0:77:37:d3:91:13:
         41:82:1f:c8:94:8d:99:b6:51:2d:cc:00:af:ca:3f:b7:2a:9c:
         7f:0f:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:15 2026 by rpki-client