Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6bae1bed-0308-3bdf-b24b-02e8e5d013d9.roa
File:                     6bae1bed-0308-3bdf-b24b-02e8e5d013d9.roa (raw, json)
Hash identifier:          OEDoH+9YudoHsbsm9u9Kp0b9XHKJDelOr/jcBpCKjiU=
Subject key identifier:   0D:A4:0C:C1:04:46:F7:E8:C4:D1:15:CF:9F:94:FE:BF:05:41:45:E9
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF8464FE5A762303D9CBBB80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6bae1bed-0308-3bdf-b24b-02e8e5d013d9.roa
Signing time:             Thu 06 Aug 2026 15:14:40 +0000
ROA not before:           Thu 06 Aug 2026 15:14:40 +0000
ROA not after:            Wed 04 Nov 2026 16:14:40 +0000
asID:                     394380
IP address blocks:        2606:9880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:84:64:fe:5a:76:23:03:d9:cb:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 15:14:40 2026 GMT
            Not After : Nov  4 16:14:40 2026 GMT
        Subject: CN=fd215cd0-a8a9-4f8c-ba9d-4fb4ebb1fb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2d:e6:46:15:5f:de:d9:89:19:bc:fe:1b:29:
                    33:cf:65:7e:5c:0a:b8:c3:30:dd:91:e1:ad:9d:a2:
                    a7:b6:f4:36:77:69:4a:1f:f3:8a:df:c9:5b:0b:51:
                    07:f4:f3:2c:6f:98:3e:cd:b7:2e:f7:d6:7a:c1:08:
                    72:3a:e8:7a:a0:e3:b8:61:30:a7:68:a1:80:33:c0:
                    6a:95:de:09:33:7c:bd:fd:6f:00:21:56:9d:61:30:
                    c6:e1:18:54:0e:0c:e9:73:22:ff:5d:da:2d:41:f0:
                    29:e5:08:15:6d:76:fc:62:79:14:6a:3e:b1:0e:24:
                    d5:f6:a0:b2:94:a7:78:6b:ae:2d:d7:19:73:97:18:
                    ea:47:8d:93:84:e6:f5:23:cd:ea:f9:21:c6:06:d2:
                    f7:57:04:ab:d4:f2:f2:b9:35:f3:73:1d:20:09:35:
                    6e:d0:7b:12:6f:85:4d:9d:d0:54:e3:eb:db:ea:ef:
                    81:57:e0:33:85:00:fa:1a:35:b5:96:e3:3f:6d:b3:
                    7a:be:28:8a:3e:d7:cb:7f:86:d1:6f:72:a6:be:f0:
                    a5:78:60:ed:01:ca:b4:35:cd:d2:f5:82:0f:9c:57:
                    e5:c2:73:9b:ba:23:23:fc:78:00:74:02:a3:8e:32:
                    62:72:b3:8a:00:c6:44:d5:8c:e8:fc:0e:6e:f0:43:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A4:0C:C1:04:46:F7:E8:C4:D1:15:CF:9F:94:FE:BF:05:41:45:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6bae1bed-0308-3bdf-b24b-02e8e5d013d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d1:04:77:40:60:9f:4c:37:7f:2b:c0:b9:51:4f:4d:c5:c0:
         6b:54:50:3a:c2:42:25:60:ce:d3:b5:fa:2c:ac:7f:b8:3f:0f:
         51:bd:d9:1f:66:33:de:04:f1:59:4f:c0:fc:f9:31:9e:6e:4e:
         cf:5f:18:5f:29:bf:67:4c:7b:37:bf:f6:6d:e2:58:aa:ff:31:
         bc:29:00:b5:24:72:3f:ac:23:a9:a1:93:bc:f2:f0:d0:69:3c:
         ae:e5:54:3e:51:fc:8b:8a:80:54:eb:52:30:1e:80:b3:de:4d:
         e4:ab:b7:d4:fa:e3:84:12:99:9d:29:a0:43:07:b4:60:f8:03:
         8c:57:c6:0b:2c:c7:d3:bf:95:58:10:d1:83:f3:ea:4b:e2:a4:
         27:1e:b5:8d:f2:dd:3e:82:96:83:79:73:14:ea:92:10:a1:95:
         9f:6e:98:7f:49:a3:92:33:a5:c4:37:09:07:ac:33:e8:08:ef:
         03:43:bb:f1:ef:4a:b9:c2:c6:1e:fa:fd:ab:b8:11:c5:d0:39:
         c2:20:11:42:6c:ed:b1:ca:44:71:46:f1:42:14:a6:a3:8c:81:
         9e:35:f0:ed:ee:9e:c3:f3:4f:7e:d2:8c:34:9c:99:22:44:a2:
         f5:e4:ef:74:86:ca:0d:c0:a9:fd:97:08:ef:d6:f0:0a:57:88:
         22:ab:a5:4d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6/hGT+WnYjA9nLu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNjE1MTQ0MFoXDTI2MTEwNDE2MTQ0MFowLzEtMCsGA1UEAxMk
ZmQyMTVjZDAtYThhOS00ZjhjLWJhOWQtNGZiNGViYjFmYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S3mRhVf3tmJGbz+Gykzz2V+XAq4wzDdkeGt
naKntvQ2d2lKH/OK38lbC1EH9PMsb5g+zbcu99Z6wQhyOuh6oOO4YTCnaKGAM8Bq
ld4JM3y9/W8AIVadYTDG4RhUDgzpcyL/XdotQfAp5QgVbXb8YnkUaj6xDiTV9qCy
lKd4a64t1xlzlxjqR42ThOb1I83q+SHGBtL3VwSr1PLyuTXzcx0gCTVu0HsSb4VN
ndBU4+vb6u+BV+AzhQD6GjW1luM/bbN6viiKPtfLf4bRb3KmvvCleGDtAcq0Nc3S
9YIPnFflwnObuiMj/HgAdAKjjjJicrOKAMZE1Yzo/A5u8EN59wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA2kDMEERvfoxNEVz5+U/r8FQUXpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNmJhZTFiZWQtMDMwOC0z
YmRmLWIyNGItMDJlOGU1ZDAxM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaYgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA80QR3QGCfTDd/K8C5UU9NxcBrVFA6wkIlYM7TtfosrH+4Pw9Rvdkf
ZjPeBPFZT8D8+TGebk7PXxhfKb9nTHs3v/Zt4liq/zG8KQC1JHI/rCOpoZO88vDQ
aTyu5VQ+UfyLioBU61IwHoCz3k3kq7fU+uOEEpmdKaBDB7Rg+AOMV8YLLMfTv5VY
ENGD8+pL4qQnHrWN8t0+gpaDeXMU6pIQoZWfbph/SaOSM6XENwkHrDPoCO8DQ7vx
70q5wsYe+v2ruBHF0DnCIBFCbO2xykRxRvFCFKajjIGeNfDt7p7D809+0ow0nJki
RKL15O90hsoNwKn9lwjv1vAKV4giq6VN
-----END CERTIFICATE-----
Generated at Thu Aug 27 17:37:57 2026 by rpki-client