Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa
File:                     6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa (raw, json)
Hash identifier:          mbHPvVtvNPVII9q/ME9/6YJXIrS6xeDjY4NfZjLesq4=
Subject key identifier:   FB:65:6A:A6:47:9D:0C:C0:83:83:16:DF:73:96:F8:E5:72:95:60:9C
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584D04E23FB6524A154AE13E3980
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     7764
IP address blocks:        2610:20:2000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:3f:b6:52:4a:15:4a:e1:3e:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=2ecdb701-a985-4988-8d21-a890c019dfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:85:f6:a6:5b:b8:e9:c3:7c:3f:99:6a:3a:
                    dd:8d:95:ba:11:74:a2:3b:d4:c2:33:de:6f:52:59:
                    05:9e:3d:bd:b7:72:76:67:18:c0:f8:6e:df:b6:04:
                    33:15:47:2d:55:2a:fa:0a:5b:e5:43:4c:0a:d8:78:
                    cb:f4:d1:24:7c:11:4a:96:e6:6e:27:ea:c1:3a:50:
                    0c:fd:24:3c:5b:ca:18:1d:3d:34:68:f1:c3:fc:2e:
                    54:81:c5:cd:c4:1c:2f:cb:47:aa:13:a1:3a:81:48:
                    d3:11:60:55:eb:d3:62:e2:1a:9a:92:47:bb:83:14:
                    09:80:ea:7a:4a:66:a6:30:d3:30:80:7a:ce:51:82:
                    89:46:74:94:76:f3:36:51:26:85:5b:d8:2f:76:13:
                    32:4e:69:3f:bb:c6:82:a2:f4:ea:48:df:b1:c1:3d:
                    77:00:7f:b4:85:ac:17:55:e1:af:d6:cf:f9:55:9f:
                    13:66:8c:60:c2:33:ad:1e:a9:f8:3d:56:53:00:25:
                    60:e6:d7:6d:d7:20:27:18:c6:2e:9c:7a:fe:27:10:
                    f4:b0:51:4a:a6:ca:98:b4:6e:fd:c6:e1:03:c1:7b:
                    e9:2e:c3:48:5b:62:3e:de:ee:6e:8b:45:c5:c4:a0:
                    3b:f4:76:33:bb:81:16:3f:a5:e8:92:cd:2b:45:8c:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:65:6A:A6:47:9D:0C:C0:83:83:16:DF:73:96:F8:E5:72:95:60:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8a:59:d5:4a:95:2e:85:c7:bd:42:9f:ef:3f:d1:d2:3e:06:
         49:c0:f6:4b:3b:51:bf:54:bd:2d:70:21:d9:0e:ab:a7:4d:bf:
         bd:0f:89:de:af:85:2e:22:ba:93:99:9e:66:f9:8a:1a:48:5f:
         a8:8c:17:42:ab:c1:79:0d:aa:47:bb:35:68:e9:2b:80:02:35:
         be:fd:7e:55:f7:5b:3d:47:96:21:91:6f:b9:06:19:57:d0:af:
         86:87:2b:d4:89:ad:68:57:a6:60:40:65:ed:f8:60:86:b7:4a:
         1e:8b:61:68:57:6d:46:8d:e5:6a:f8:d0:c8:dd:6c:34:1b:b3:
         15:60:e4:ab:92:5c:49:fa:4c:fb:f6:58:41:18:c5:55:ba:41:
         50:99:7f:88:dc:bd:25:fd:04:51:a5:b5:09:fa:0e:80:05:4f:
         18:70:64:c2:f5:d5:33:be:2a:6f:27:91:fb:42:a0:49:fc:8b:
         51:ba:83:b4:df:1d:02:1b:61:d6:b2:75:f3:3f:95:e6:4e:83:
         cb:47:bb:52:1c:a1:2e:99:44:48:e0:79:48:e5:32:5c:b0:8b:
         23:6c:e7:3a:d7:db:9d:8a:97:a9:ba:d4:cf:b1:97:ce:51:8a:
         3a:5b:66:c8:76:63:21:d7:02:d0:05:f9:68:6d:9a:36:54:4f:
         e7:4c:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:57 2026 by rpki-client