Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f/8e6a4c37-1262-3f10-81a6-bccf6d95e2bf.roa
File:                     8e6a4c37-1262-3f10-81a6-bccf6d95e2bf.roa (raw, json)
Hash identifier:          WbaydBe7tpXSXVaUE2TwWpJXoBAkuwBjQd8FqrCVMbY=
Subject key identifier:   F6:E2:AE:C9:92:67:0B:3F:68:9F:9B:0E:74:85:D8:3D:B5:FA:BA:4C
Certificate issuer:       /CN=8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f
Certificate serial:       010D0C9F4328584F1CC7C466863B7B92AF60DEC0
Authority key identifier: B3:9E:AE:BC:FA:8F:99:3D:5E:95:86:E7:BC:18:51:3F:C7:C9:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f/8e6a4c37-1262-3f10-81a6-bccf6d95e2bf.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     18530
IP address blocks:        2606:1940::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c4:66:86:3b:7b:92:af:60:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=405df409-ea1b-4d0f-b7ff-9829a7cba714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:f8:38:7d:aa:6e:04:65:49:df:60:87:89:
                    87:e2:bd:3e:2d:9e:98:cb:0f:0f:ad:e4:6a:0a:0a:
                    a6:db:2f:79:4d:e3:36:02:ab:7e:e3:b6:01:e6:59:
                    3a:0f:35:38:45:a1:8f:08:2e:bb:6d:17:c3:bd:5c:
                    5f:e4:6c:a9:7a:4b:82:ba:02:66:d7:61:67:74:0a:
                    0e:a1:9c:c2:1e:85:fe:97:64:e9:36:aa:21:8a:72:
                    02:0a:29:df:97:a9:7d:e5:b5:73:3e:39:39:cb:4c:
                    0e:2e:f5:12:23:a8:6a:2f:ac:30:d3:92:a7:dd:44:
                    59:0f:68:b7:c9:81:52:88:f3:43:99:64:74:4f:38:
                    ec:34:f0:74:56:3b:0f:b3:88:2c:c3:6a:13:77:e6:
                    65:09:8a:5e:bc:bb:16:7d:df:cd:3e:42:f4:ff:8b:
                    59:f3:fa:01:48:42:5f:d6:4e:6f:cc:77:38:21:a7:
                    fd:52:5b:a8:0e:c5:c4:db:2d:ed:b7:dd:6a:f5:0e:
                    6d:84:da:75:f4:a8:ef:03:79:e2:97:2a:d0:28:e0:
                    7a:e6:ac:91:4e:cb:a4:34:48:d1:89:9d:ba:c1:c4:
                    6c:30:90:21:fd:05:f4:d4:3a:7b:e9:b2:8c:d2:4d:
                    da:37:cd:3a:cb:2a:ac:c5:2f:5a:ab:1c:96:f1:2e:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:AE:C9:92:67:0B:3F:68:9F:9B:0E:74:85:D8:3D:B5:FA:BA:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f/8e6a4c37-1262-3f10-81a6-bccf6d95e2bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:9E:AE:BC:FA:8F:99:3D:5E:95:86:E7:BC:18:51:3F:C7:C9:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e7d0c3c-345f-4e9a-b6aa-7b7fed209b0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:4b:b6:c5:34:13:35:67:f8:6e:bc:78:87:8f:ce:c9:25:
         ed:7a:c1:13:46:bc:09:74:3c:df:ac:27:11:66:77:0e:75:c4:
         a8:3a:fd:4e:c6:b5:b8:5f:6d:76:24:d9:eb:95:21:b4:42:31:
         8c:d9:22:71:d0:49:c1:4c:c3:3b:24:68:a3:66:0a:d9:62:2d:
         f3:d2:46:36:bc:42:87:8e:be:ff:ed:5c:04:69:c1:97:2f:fe:
         ae:58:e1:d6:36:c2:c4:f7:e4:a1:c8:bf:b7:a1:30:f2:ef:e3:
         2e:5e:9b:3c:59:ec:2b:c6:07:5c:c9:72:0b:d9:dc:7f:92:32:
         4c:a0:f6:43:3d:ba:3d:79:ed:4e:58:18:56:61:4a:c6:1f:49:
         23:27:ce:e8:46:db:f7:4c:03:ec:62:06:f6:e7:f3:6e:80:1e:
         7f:b7:67:a7:2d:04:0e:40:4c:d2:5b:e0:be:19:55:97:97:4e:
         53:87:bf:cd:06:57:68:1f:82:dd:20:91:c6:5b:3f:d1:78:70:
         36:9f:ed:6a:22:0b:94:38:0f:82:20:47:a0:d0:4a:a1:d4:72:
         78:ad:90:38:be:3c:33:a8:37:3b:c1:6d:12:78:e2:72:67:ef:
         41:43:51:b5:d7:7c:07:7f:26:9c:d5:c0:36:e4:e5:38:97:a0:
         95:0e:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:35 2026 by rpki-client