Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/9e5339b1-05b1-39f8-9ff7-1da284065796.roa
File:                     9e5339b1-05b1-39f8-9ff7-1da284065796.roa (raw, json)
Hash identifier:          fAfJ7F61qfwk5p1ibxLKSFAWu8vYC2n4mtQr0QXqXLE=
Subject key identifier:   D7:2B:14:E0:30:C9:DD:BD:98:FF:36:8E:F8:F6:F2:08:29:C9:2D:E1
Certificate issuer:       /CN=086f01d4-c895-4205-9b95-29c50942197b
Certificate serial:       010D0C9F4328584D6B4DA4855B986D68EC39FF00
Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/9e5339b1-05b1-39f8-9ff7-1da284065796.roa
Signing time:             Mon 06 Apr 2026 18:29:31 +0000
ROA not before:           Mon 06 Apr 2026 18:29:31 +0000
ROA not after:            Sun 05 Jul 2026 18:29:31 +0000
asID:                     3128
IP address blocks:        2606:8700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6b:4d:a4:85:5b:98:6d:68:ec:39:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b
        Validity
            Not Before: Apr  6 18:29:31 2026 GMT
            Not After : Jul  5 18:29:31 2026 GMT
        Subject: CN=4c311bb4-8f66-40bf-9eba-0ca47ef84918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:d1:21:b5:ba:34:5f:7a:69:9d:49:8f:bb:
                    d6:b5:b6:41:2d:17:3b:cb:5c:00:20:3f:02:85:2b:
                    82:f9:4c:c1:57:55:4b:da:ff:9c:5c:27:d1:7a:1e:
                    cc:ed:c1:d8:55:5e:0d:31:54:6d:cd:29:20:44:09:
                    f5:0e:4d:30:f1:2d:90:ea:30:bb:6c:aa:ac:6f:67:
                    d0:88:ec:1f:4f:42:8b:81:ee:1f:5e:2e:56:ac:79:
                    dd:64:81:33:d0:d2:44:a1:0e:16:1a:16:9e:cd:f4:
                    68:e4:67:f9:cd:51:39:f5:16:f4:7d:4b:ff:cd:d0:
                    80:d6:df:c8:4c:17:bb:07:49:0f:c8:a1:90:90:41:
                    7c:7d:ce:5a:1a:e4:26:58:e9:d4:ff:19:94:74:bb:
                    58:54:2f:76:3d:d1:93:da:8e:81:de:71:14:90:ef:
                    22:16:af:1d:65:d7:66:3d:9a:dd:cf:28:78:ee:7b:
                    78:55:df:a8:a0:bc:a8:fa:11:3b:60:a8:ad:cf:fe:
                    1f:99:17:a7:86:49:ef:e3:76:5a:d9:b6:45:ce:25:
                    c7:b0:4b:c7:87:4e:9d:15:f2:3f:5b:23:4c:b3:81:
                    6e:d7:bf:13:dd:05:a5:56:cb:68:1d:83:03:ca:5e:
                    ff:4a:c7:8d:2c:b5:8f:69:56:75:ef:84:c0:5b:3c:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:14:E0:30:C9:DD:BD:98:FF:36:8E:F8:F6:F2:08:29:C9:2D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/9e5339b1-05b1-39f8-9ff7-1da284065796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:29:eb:47:92:53:a7:e5:9a:a6:9a:ab:06:04:e6:e4:e0:03:
         aa:9a:3e:cc:88:bc:5c:67:e6:70:66:cf:f3:8a:bb:e5:97:e3:
         86:ad:94:2c:bb:2d:68:9d:ad:f7:84:89:89:8d:f6:81:6c:8a:
         46:a4:1c:ad:2b:bb:9d:b0:7e:1a:82:74:44:1d:e5:6a:68:26:
         7c:86:ab:39:a4:85:0e:1e:c3:48:42:dd:df:5b:99:4e:30:c2:
         9b:13:0d:ba:6d:72:aa:46:a7:1b:ac:55:37:8e:7c:89:38:5a:
         cf:31:63:b0:1a:1a:5d:bc:f4:9a:f5:90:ec:0d:bc:6d:d0:30:
         70:09:d1:c4:66:6d:34:0b:ed:6a:f3:ff:fa:39:20:46:71:5b:
         c8:ce:a1:18:e8:8f:1a:cb:14:e3:ce:44:97:92:0f:ee:12:36:
         f1:e3:6e:b3:22:63:92:99:f9:c8:2a:2d:ac:ae:c4:fb:b3:10:
         02:ad:ed:3b:1b:ce:0d:59:c0:7e:13:34:da:ad:d3:2b:27:b6:
         60:9c:60:1f:07:8c:4a:f4:42:c8:c5:69:fd:55:4e:13:a5:8f:
         89:a2:26:e8:37:59:06:ef:fa:e3:e2:b5:af:25:b1:ab:e8:80:
         76:db:03:7b:06:12:50:5d:aa:e5:81:a9:5a:84:44:61:7a:39:
         8b:47:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:13 2026 by rpki-client