Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/916a02f6-c5f9-3232-8fd0-728b47039dd3.roa
File:                     916a02f6-c5f9-3232-8fd0-728b47039dd3.roa (raw, json)
Hash identifier:          7emBG+EDAhAamG13O8W1GQe59GUrLzeofLagkQJA+wo=
Subject key identifier:   25:35:5A:23:5E:97:ED:1C:98:4A:B2:B9:97:97:E8:F6:AA:BE:E7:C4
Certificate issuer:       /CN=6faaf00e-895e-47d1-97b1-331bb4af77fc
Certificate serial:       010D0C9F4328584E1E4441A31050F82C485C5880
Authority key identifier: 7A:A7:38:11:63:DB:14:89:6A:BA:42:70:FA:C5:59:70:EE:89:89:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/916a02f6-c5f9-3232-8fd0-728b47039dd3.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        2606:c220::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/6faaf00e-895e-47d1-97b1-331bb4af77fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/6faaf00e-895e-47d1-97b1-331bb4af77fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:41:a3:10:50:f8:2c:48:5c:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faaf00e-895e-47d1-97b1-331bb4af77fc
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=307e2f4f-6edc-47ed-a84c-c08dd558c0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:db:83:35:90:57:2f:ad:d0:7f:1e:f9:44:
                    f7:c2:34:41:2e:eb:10:79:01:7f:43:e6:c3:e0:f2:
                    9c:6b:6a:45:86:86:a1:4d:55:e8:a5:98:a6:10:95:
                    15:3e:8b:b5:fe:9a:12:d4:41:39:c8:32:4f:5c:a6:
                    18:9c:2b:48:85:bf:9e:1a:31:60:fa:2b:05:c8:1d:
                    cc:7b:32:e7:82:5a:cf:41:70:22:fb:52:02:7a:42:
                    74:aa:f7:a9:d6:8e:bf:42:8e:17:68:62:d6:b1:00:
                    4f:7a:d7:73:6b:ea:57:a5:45:fb:43:50:60:ee:c6:
                    e5:51:d4:8d:93:97:82:78:a8:94:5f:d3:08:34:b0:
                    38:0d:7e:bb:69:8a:7d:6a:61:cb:55:85:19:9e:6a:
                    38:46:8a:5e:cd:8d:c1:89:e0:81:94:08:7d:ba:8c:
                    02:3f:49:08:da:a1:59:55:46:fe:7f:07:2d:82:5f:
                    41:22:6f:9e:9d:cc:d9:72:7f:2f:36:3b:4f:53:61:
                    be:87:fa:06:c9:9d:c4:7b:98:8e:c8:03:8a:4a:15:
                    6e:79:9e:01:7d:9e:73:0e:b1:f3:b6:0f:65:61:90:
                    3b:38:76:66:45:ac:54:a1:82:d3:95:c2:60:cb:f8:
                    6a:3f:83:75:be:df:54:bd:79:5e:d7:3e:e8:e4:83:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:35:5A:23:5E:97:ED:1C:98:4A:B2:B9:97:97:E8:F6:AA:BE:E7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/916a02f6-c5f9-3232-8fd0-728b47039dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/6faaf00e-895e-47d1-97b1-331bb4af77fc.crl

            X509v3 Authority Key Identifier:
                keyid:7A:A7:38:11:63:DB:14:89:6A:BA:42:70:FA:C5:59:70:EE:89:89:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c220::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:8c:90:6b:32:47:24:78:5b:c4:fe:24:a9:60:d2:f4:d4:
         cd:a5:1b:8a:67:5e:9e:d0:ec:e8:ad:a2:56:ec:3e:15:6f:4c:
         e7:7b:cc:91:e3:a0:ae:bb:54:e3:cf:d0:a1:c8:9a:61:dc:1c:
         56:10:a1:07:0c:46:22:8d:6a:d3:da:1b:25:57:47:32:8f:d9:
         5b:76:12:00:76:b5:77:a0:5e:d5:74:4e:19:82:02:da:9e:86:
         38:1a:7d:1b:eb:49:d6:88:5a:0f:39:91:82:0a:cc:0e:fb:67:
         08:9d:56:03:96:07:65:9a:8c:ec:5d:a3:4b:7a:19:2a:11:eb:
         46:fd:05:c2:97:ca:2a:fe:ab:89:2e:65:92:5d:62:3f:36:a2:
         49:85:56:5b:37:b5:d4:45:25:d4:01:b8:0e:3b:25:83:a8:21:
         b3:98:f4:b2:6c:30:f2:df:74:db:6a:22:e9:5a:40:76:59:1c:
         3c:ec:9b:96:b9:4e:83:70:b0:37:93:b8:97:e3:ef:ca:36:ef:
         72:2b:6a:47:19:1c:89:78:28:4d:f4:41:78:f4:b6:65:43:7a:
         02:b4:67:3c:dd:ab:c3:92:9b:5e:59:f5:03:d0:8a:a4:3f:f9:
         1e:f3:11:3f:74:a3:4b:04:f4:eb:7b:57:4a:0b:04:d6:30:92:
         4d:70:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:55:32 2026 by rpki-client