Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa
File:                     6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa (raw, json)
Hash identifier:          EcEIUqWNratad+PCvniN5ZdNHeuLMDPyaUqxdAcSTSE=
Subject key identifier:   F2:8E:59:7C:7E:AB:57:AA:BA:18:EB:4C:F8:7B:2F:C7:5F:44:1B:D5
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584CC611EA5ABF965782543ABD80
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     36103
IP address blocks:        2606:db40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:ea:5a:bf:96:57:82:54:3a:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=3df03219-5262-4ad4-b794-11ed72d563c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:55:b3:ff:a6:8c:5b:98:bf:0b:6f:02:31:
                    ab:10:6d:93:10:70:c8:4f:52:77:f7:af:7b:34:67:
                    82:46:9e:fa:98:8c:9d:95:43:c9:0e:f5:26:22:a5:
                    de:00:c7:88:e7:48:1c:ad:8a:97:c9:f6:de:db:86:
                    78:88:c9:bc:65:6b:21:0d:2d:15:68:a0:9c:ea:ef:
                    76:e6:ea:9b:a1:6b:a6:df:c1:2f:16:76:3a:a4:ee:
                    50:f1:bf:78:2e:85:dc:4b:b2:eb:fc:e2:8c:a0:3f:
                    22:8b:51:cb:6a:66:05:3a:ff:02:7f:22:e0:47:6e:
                    f4:e3:6f:81:05:f0:99:05:e8:82:1c:5d:ca:1f:2c:
                    c6:50:ed:81:f0:0f:82:e5:90:eb:be:7b:c2:0a:ac:
                    92:5e:2d:7f:fc:99:b1:56:b5:b8:99:8b:4d:40:9b:
                    af:77:ea:64:b9:f2:f9:7f:99:14:ae:18:d4:87:bd:
                    7d:62:10:68:76:05:b0:f3:52:67:00:32:78:61:e4:
                    fb:4c:e6:a8:28:3a:8e:51:52:60:8f:b4:10:89:6a:
                    88:77:26:ba:ef:60:3a:67:f2:4f:e6:06:d2:94:7b:
                    20:88:4a:78:5c:e9:ce:9e:94:47:f2:a4:ba:e1:54:
                    49:16:c5:48:da:7b:d0:f9:ae:c1:a9:5a:b3:13:46:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:59:7C:7E:AB:57:AA:BA:18:EB:4C:F8:7B:2F:C7:5F:44:1B:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:db40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:90:5d:b0:e5:c1:53:0c:ee:a2:77:de:67:4d:e6:0d:50:98:
         3a:a1:f2:db:f1:66:db:70:cb:71:ed:a5:86:93:71:86:d8:02:
         47:8e:8f:97:bf:05:1e:8f:b7:70:64:85:f9:d9:d0:60:32:15:
         78:a6:09:2b:bd:4c:59:a5:22:60:3d:6e:5c:04:23:b6:58:6c:
         a2:bc:f5:63:d2:52:a0:f9:22:2b:bd:11:80:79:22:34:bc:9f:
         9d:55:95:67:ee:ec:80:bf:57:4a:6e:cc:43:c4:f5:29:8f:89:
         0b:9e:94:32:ed:77:f7:10:30:a6:35:1e:39:16:18:27:a1:83:
         ad:3f:df:2a:bb:88:a9:1c:e8:38:8b:d3:cc:5a:6e:fd:72:23:
         7e:ea:6c:b8:bd:7a:00:6e:99:a9:6a:c9:7e:63:3f:37:06:60:
         81:3f:0c:da:77:44:fc:ec:86:1c:5a:d8:92:3d:53:4c:e7:21:
         fc:23:b0:21:5b:52:ef:8e:20:84:40:f5:33:0e:99:48:86:00:
         45:7d:d0:d1:db:c9:44:90:e2:8e:8c:f9:5e:b8:6a:c6:27:8b:
         b5:35:e8:f1:2c:e6:90:a3:43:98:bb:6b:75:e3:4c:25:44:5a:
         df:8a:73:09:1a:d7:79:4a:8c:f0:9a:19:75:93:45:95:dc:84:
         9d:9e:18:16
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzGEepav5ZXglQ6vYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
M2RmMDMyMTktNTI2Mi00YWQ0LWI3OTQtMTFlZDcyZDU2M2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVdVs/+mjFuYvwtvAjGrEG2TEHDIT1J39697
NGeCRp76mIydlUPJDvUmIqXeAMeI50gcrYqXyfbe24Z4iMm8ZWshDS0VaKCc6u92
5uqboWum38EvFnY6pO5Q8b94LoXcS7Lr/OKMoD8ii1HLamYFOv8CfyLgR27042+B
BfCZBeiCHF3KHyzGUO2B8A+C5ZDrvnvCCqySXi1//JmxVrW4mYtNQJuvd+pkufL5
f5kUrhjUh719YhBodgWw81JnADJ4YeT7TOaoKDqOUVJgj7QQiWqIdya672A6Z/JP
5gbSlHsgiEp4XOnOnpRH8qS64VRJFsVI2nvQ+a7BqVqzE0bQlwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPKOWXx+q1equhjrTPh7L8dfRBvVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvNmU2NzNhZjQtYjdlYi0z
YjlkLWE4ZWQtMjFjMzY0NjExOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbbQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4kF2w5cFTDO6id95nTeYNUJg6ofLb8WbbcMtx7aWGk3GG2AJHjo+X
vwUej7dwZIX52dBgMhV4pgkrvUxZpSJgPW5cBCO2WGyivPVj0lKg+SIrvRGAeSI0
vJ+dVZVn7uyAv1dKbsxDxPUpj4kLnpQy7Xf3EDCmNR45FhgnoYOtP98qu4ipHOg4
i9PMWm79ciN+6my4vXoAbpmpasl+Yz83BmCBPwzad0T87IYcWtiSPVNM5yH8I7Ah
W1LvjiCEQPUzDplIhgBFfdDR28lEkOKOjPleuGrGJ4u1NejxLOaQo0OYu2t140wl
RFrfinMJGtd5Sozwmhl1k0WV3ISdnhgW
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:11 2026 by rpki-client