Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa
File:                     cecd7a26-37f7-391f-988a-77a64e655f49.roa (raw, json)
Hash identifier:          gI9ug5SubHyEI2vYs8N2AR0gVf/L6eiOyikcqDyzyt8=
Subject key identifier:   62:CA:8A:8B:D6:64:FA:BF:76:18:FB:73:A8:F6:41:E9:FB:17:16:4D
Certificate issuer:       /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
Certificate serial:       010D0C9F4328584EA78879A2E45D73BD04E32C80
Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36515
IP address blocks:        2604:4c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:79:a2:e4:5d:73:bd:04:e3:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0620a54d-afa7-4f0a-b50f-401268f25f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:21:64:a8:c9:90:21:90:23:cc:f8:5c:fe:
                    cf:69:53:49:d3:d4:83:bf:4c:dd:53:7e:4f:f2:23:
                    76:25:df:48:93:3a:14:fc:4a:31:a9:69:15:73:73:
                    3a:8b:53:4d:a3:c0:45:1c:52:c7:fd:29:83:00:48:
                    5c:a0:cb:6a:7e:d5:91:89:20:f3:df:d7:f2:c9:7f:
                    ab:3a:d6:c5:5c:25:32:91:af:42:48:75:9f:9f:c3:
                    d6:a1:96:09:ba:5c:d2:3e:73:68:0c:eb:c0:2f:91:
                    f0:7c:7d:d4:f5:c0:19:6d:b1:6f:03:18:65:93:52:
                    2a:55:ee:88:24:db:89:65:ac:b5:a3:93:e2:a6:8f:
                    f9:fc:b3:a5:a0:35:a8:a7:43:0d:98:18:25:b2:06:
                    ab:45:35:48:9d:c3:59:c1:1f:d7:c8:5d:94:53:9a:
                    19:0e:e1:2c:71:cd:ef:d5:4f:7d:77:00:b7:79:1b:
                    28:0c:bc:a6:ae:38:46:78:52:c3:d5:08:37:ef:1d:
                    a2:af:b3:f5:59:b9:9f:c9:77:e4:f1:e7:ae:23:58:
                    73:09:2e:45:23:1e:d0:a1:10:89:15:3a:db:f8:8a:
                    a2:ec:49:85:5c:c6:68:23:65:49:af:a4:55:d3:d2:
                    81:ed:ce:42:63:c6:25:93:0a:2b:bb:dd:da:29:bd:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:8A:8B:D6:64:FA:BF:76:18:FB:73:A8:F6:41:E9:FB:17:16:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl

            X509v3 Authority Key Identifier:
                keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:50:ef:ec:aa:12:c7:60:0a:38:ca:31:ff:97:e0:8b:36:7d:
         fe:eb:15:53:2f:72:9e:1a:ba:af:7d:27:32:bd:27:02:ab:e2:
         f2:c3:d0:d3:60:91:f9:38:06:57:2e:0c:e2:cc:7b:1c:c1:1f:
         ca:ba:7c:08:93:50:f5:6c:fb:cf:ff:10:60:e3:71:68:1f:d3:
         3f:3c:c9:36:18:f4:b8:b0:c3:4c:5c:a2:9b:62:98:d6:f3:25:
         b7:e4:d5:25:87:5b:8b:a6:0b:a5:9d:eb:bb:39:ea:4f:86:e5:
         7c:ea:c7:03:b1:87:dd:71:79:38:bc:c0:7b:bc:55:bb:b8:3e:
         48:75:ce:76:50:5a:cb:81:e3:46:2f:9c:71:85:2d:72:87:b7:
         3a:bd:dc:99:e9:96:c2:3e:a0:b2:7d:41:7b:54:de:85:b9:da:
         43:e3:50:7d:1f:94:a3:81:2e:ce:f2:a3:5f:84:4c:92:0f:85:
         5f:3b:33:be:4e:33:e9:9d:fc:65:e7:30:6b:3f:6b:f3:94:99:
         c0:76:47:bb:f3:26:85:83:42:8d:3a:09:ee:a3:60:9d:25:a4:
         20:ae:f7:e9:f5:30:e3:4c:31:1a:b3:4d:cc:ed:c5:70:36:68:
         ef:b8:72:26:8d:1b:9e:95:da:df:9b:a9:98:1c:a5:fc:1d:85:
         67:dd:3e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:33 2026 by rpki-client