Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
File:                     6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa (raw, json)
Hash identifier:          CRxVHIYCyepKbjLlMcKHdmE+mTaNzUQLtLkA+JeL/MM=
Subject key identifier:   E8:3F:C5:0F:0F:AB:60:3E:52:52:06:73:43:51:D8:4D:F6:80:6F:07
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584ED9C7519A0BE01463D2F41980
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     12129
IP address blocks:        2607:f790::/32 maxlen: 32
                          2607:f790:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:51:9a:0b:e0:14:63:d2:f4:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=14a178e6-6b4a-42cc-ade8-c51990b8d9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:14:a2:de:96:ac:19:7c:5d:c9:79:bc:96:
                    65:4a:2b:25:f7:aa:34:0c:62:de:b4:77:e8:c6:80:
                    78:40:c5:33:bf:a8:96:f3:c2:0d:9f:bf:b2:fb:f6:
                    08:43:2e:bc:d0:25:e7:b2:cc:7d:a3:14:46:d4:dc:
                    0e:96:0a:ac:f0:31:12:95:0d:8d:2e:c3:a1:da:18:
                    87:15:e4:39:3a:9d:0a:f2:84:8f:a0:12:cb:07:ce:
                    53:a1:fc:e5:9e:96:2b:46:ca:e1:b1:3a:ee:93:a2:
                    91:94:73:a6:15:7b:70:31:8a:5b:5e:c8:3f:93:f7:
                    d6:b5:92:2b:e2:f5:87:e5:02:81:e3:8c:c8:0d:a1:
                    2e:2b:c0:ab:9e:7a:0e:6b:f3:54:97:15:7e:c1:da:
                    46:df:7a:c5:ba:12:e9:68:75:cc:04:3e:ed:94:c9:
                    f8:2f:a1:2c:2a:60:f9:07:a5:4b:42:97:21:15:68:
                    10:4e:4e:9a:83:d3:37:3c:19:87:31:31:43:93:82:
                    79:c2:fd:6f:4a:c8:4e:4d:81:83:82:0c:a6:a9:91:
                    df:3c:e4:f5:23:da:6d:df:a8:50:63:02:f8:d3:40:
                    6b:1e:c5:19:94:1a:b0:f6:3a:ba:89:d4:86:93:21:
                    5a:1c:0c:04:f8:c3:9d:99:39:6c:b1:4c:09:29:57:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:C5:0F:0F:AB:60:3E:52:52:06:73:43:51:D8:4D:F6:80:6F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:1b:d6:d4:75:ae:e5:22:b1:3b:4b:51:01:72:43:10:37:
         f7:3d:81:3c:22:be:a6:68:48:07:5a:f0:67:85:bb:d0:54:34:
         dd:cc:d6:03:2b:23:72:8b:37:da:9d:43:7c:46:d5:0f:63:40:
         65:5f:f8:b6:f5:81:0b:07:69:97:8e:6f:19:0d:7b:56:db:37:
         96:43:46:8b:60:b9:c7:96:07:c3:33:a1:ba:e8:a4:c4:e2:2d:
         fd:f3:47:51:97:68:00:e5:01:e7:a4:7c:15:6f:ae:0b:82:a4:
         06:52:5a:22:7b:64:34:e6:94:c3:ad:d3:6b:bd:5a:e0:52:0c:
         83:68:6e:1c:69:eb:97:0e:7a:e9:8b:1c:8f:48:9b:0f:3a:fb:
         1a:c2:7a:31:57:cf:c0:d8:69:8a:0c:8c:65:25:cb:e5:35:48:
         f2:1f:6b:94:b4:25:84:e6:f7:86:47:f2:47:01:3a:aa:4c:7e:
         52:3d:c0:4c:87:85:ec:45:50:05:9c:12:f1:45:c7:c3:6a:55:
         5e:ef:ec:7c:64:cd:c0:91:df:9b:86:e0:8c:39:3f:44:6b:bf:
         d1:53:26:d4:b7:69:25:25:2b:97:ec:aa:1f:4e:5f:21:4c:c9:
         04:4d:b6:4c:a7:ce:bb:c1:8b:35:1c:93:82:23:01:2c:94:e7:
         98:d4:43:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:22 2026 by rpki-client