Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
File:                     06117935-952b-3adf-88ac-10a942733ca0.roa (raw, json)
Hash identifier:          IKJon+4ugqKiHIoNNHC0q1B2BnIubUCaTr1Dnz2+qnk=
Subject key identifier:   3D:55:A0:82:6D:7A:8E:3E:D0:DA:78:EC:CC:1A:D3:0D:B1:72:B9:4E
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584EA7926EB0D64123D385017100
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36850
IP address blocks:        2606:f640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:6e:b0:d6:41:23:d3:85:01:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9d13ef67-7610-46be-88d1-bd5a81596096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4e:39:bb:62:e8:23:37:69:74:ee:08:ab:8c:
                    a1:ee:4a:96:23:99:e3:7c:8c:3a:46:85:1f:dd:49:
                    b6:73:78:8d:30:c4:86:8a:3a:bf:fa:ea:cc:48:c9:
                    2c:c2:3a:d5:69:ce:51:08:58:b4:05:b2:35:07:29:
                    69:ef:7b:e7:f4:41:e3:20:39:59:03:45:b1:40:d6:
                    21:58:c7:34:43:b1:0e:2f:05:5e:c1:28:cc:b1:4b:
                    85:05:45:f6:c0:fc:0b:c8:24:30:b2:2a:23:f1:e5:
                    a7:c7:3e:2c:f9:28:03:56:9e:6b:33:20:18:ae:3f:
                    db:0d:d2:df:65:ba:77:49:05:8b:f2:2f:05:36:a2:
                    3e:38:17:21:5b:f6:2a:da:8a:f9:48:62:19:5f:2f:
                    03:d0:4c:60:18:dc:d1:47:d6:42:09:2a:f0:d9:7c:
                    58:c6:3c:9f:cc:93:43:a2:e4:9e:ec:1f:37:22:dd:
                    7a:ea:0b:51:b7:6b:de:61:8e:5d:ce:a0:86:63:40:
                    3d:9e:4a:c4:f9:84:cf:66:46:a5:b3:cb:02:89:f8:
                    97:82:65:c6:16:b3:b9:cf:09:92:3d:a1:85:93:64:
                    77:ba:e3:2c:06:e4:3b:fe:99:39:54:57:0a:86:5b:
                    17:6d:12:e6:8a:a8:30:ca:22:cc:1f:41:e7:5b:3a:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:55:A0:82:6D:7A:8E:3E:D0:DA:78:EC:CC:1A:D3:0D:B1:72:B9:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:d6:f3:e9:55:a4:a3:69:0a:a2:ff:7c:0b:c1:01:74:d0:
         a7:e6:a8:9a:c6:7a:62:4c:c8:83:2a:2d:40:50:4c:e6:9f:87:
         9b:ad:23:bd:67:6a:93:b2:8c:f6:89:75:71:f8:b5:e2:18:ba:
         c2:2a:13:62:e5:cc:f7:95:46:36:d0:e6:8e:c4:cf:f5:ac:78:
         02:18:03:86:eb:12:3a:a1:91:47:57:e0:5f:da:30:9a:75:75:
         55:d2:75:18:5c:84:d3:df:fd:43:a0:64:86:f2:4c:af:29:e3:
         ae:fc:3e:3a:a9:f3:a8:2d:e4:24:57:93:7b:69:83:4b:9a:ad:
         13:46:62:7f:7b:66:ba:32:5c:da:c4:4a:93:77:0d:e7:57:17:
         00:a2:ba:e5:78:4a:4d:20:d0:bf:ae:81:ad:68:d5:fd:b5:41:
         94:b5:3d:4d:06:3a:95:db:b6:bb:bc:b6:ef:e7:d4:70:55:d1:
         92:cd:91:f2:03:f1:94:33:96:27:ca:34:55:45:fc:46:93:a5:
         72:04:f2:ca:e8:2f:a5:cc:76:dc:e7:63:37:4f:dd:ed:c6:14:
         e3:d5:a1:19:a6:08:b5:0b:06:c5:b5:df:f1:6a:bc:8f:66:a0:
         11:bd:49:68:b6:00:5d:63:77:05:cb:71:0b:f5:d3:9c:bc:d3:
         80:0d:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:02 2026 by rpki-client