Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
File:                     8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa (raw, json)
Hash identifier:          a7AnnLjdQNPKqTpU0aGqkQzTOeLCuG+65lqFghaLM7Q=
Subject key identifier:   6B:00:71:4D:4C:69:53:AE:0E:9B:17:49:73:96:13:54:42:8D:54:E7
Certificate issuer:       /CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Certificate serial:       010D0C9F4328584CCBA74F7F5132C6A8051C3200
Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     21709
IP address blocks:        2606:6400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:4f:7f:51:32:c6:a8:05:1c:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=0edeb546-c6a5-43c3-988c-8e75be8a2898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:80:a0:17:6a:65:86:cd:eb:28:df:fa:09:
                    d9:a8:e2:b7:75:6c:45:1b:78:ad:e7:58:92:e1:b9:
                    f4:01:c1:f3:7f:c4:cb:48:c8:38:b5:72:ac:5d:d1:
                    64:d1:b1:d5:81:40:f5:a8:a2:48:b5:99:57:d2:4a:
                    0c:d6:53:58:64:fd:1f:1d:2d:66:dc:7c:6d:b9:42:
                    6c:10:97:3d:52:ae:a9:01:e8:20:90:2d:e8:cd:87:
                    65:17:a3:98:80:70:1f:31:c7:1c:d0:da:7e:f3:63:
                    5e:38:ea:4e:0d:8d:37:88:38:cd:e1:1d:a2:ed:c5:
                    96:dc:3f:ef:7b:3e:c8:86:67:46:52:a4:f0:5e:7e:
                    d2:d5:6e:70:5a:3e:a2:4e:64:71:02:65:cd:f8:48:
                    d5:bb:a4:92:e8:7a:7f:b8:27:d6:bb:85:a6:98:53:
                    28:ef:c8:2d:bc:77:ab:c6:03:80:3c:69:aa:bd:96:
                    9e:95:e1:f0:af:84:dc:3a:58:4a:b4:53:f0:06:f6:
                    96:ab:20:d8:f4:85:f5:e9:5e:b3:be:a8:70:1f:c7:
                    1c:2f:34:b1:e4:51:0b:fe:cf:2a:c8:8d:44:08:74:
                    e3:5b:75:8e:04:0f:af:38:e6:23:20:fe:23:bf:61:
                    44:55:41:96:9c:2c:2f:3d:ba:5d:b7:d1:73:2c:5c:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:00:71:4D:4C:69:53:AE:0E:9B:17:49:73:96:13:54:42:8D:54:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl

            X509v3 Authority Key Identifier:
                keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ba:dd:31:cc:90:19:a5:11:21:46:9a:b4:fd:08:87:a4:76:
         7d:07:5d:eb:77:78:c8:7e:6d:15:67:95:dc:a4:e1:b5:b4:13:
         ac:47:dc:9c:d7:c0:df:8c:bc:83:78:ea:4c:7e:46:1b:4e:34:
         75:e2:22:f7:94:ec:b9:8a:3d:50:c0:75:76:ff:07:5d:ab:56:
         78:bf:16:ce:3d:a3:14:b6:fe:57:2e:2a:fb:cd:07:dc:bf:cc:
         41:ba:81:3f:99:59:5e:72:bc:84:43:e0:0b:b6:d1:f3:a7:56:
         9c:80:b1:ba:32:fb:a0:2c:3e:11:8c:38:56:67:93:38:fb:89:
         d7:17:90:ad:22:1c:84:05:3b:cd:14:da:90:64:69:0f:b7:c3:
         91:8d:b6:ed:ce:f2:75:37:38:39:8a:ca:66:cb:82:41:34:0f:
         f1:bc:81:22:05:d4:48:d7:85:f9:05:eb:e6:7a:fb:6a:8d:28:
         cd:07:4d:6b:de:32:9e:4b:c5:14:34:26:db:42:b5:de:37:ad:
         08:ac:1c:a8:71:58:c5:c2:cd:a8:09:c0:04:a2:2f:b9:4c:42:
         c2:ce:01:63:f9:1d:42:23:dc:fb:20:60:be:82:96:2a:3b:e0:
         5f:ce:1b:79:c8:3d:01:41:32:fd:03:2d:a9:a3:51:53:e3:f8:
         40:26:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:19 2026 by rpki-client