Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa
File:                     03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa (raw, json)
Hash identifier:          uMFNaRTetchE7H4q0iBwzhGArawMs9oNfove+bmJ2aU=
Subject key identifier:   D9:5F:A6:5F:E6:2A:85:6A:2C:BE:16:A8:54:54:F1:86:BE:08:90:3D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7928FA141F165F44A22AA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:1488:a280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:8f:a1:41:f1:65:f4:4a:22:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=514544dc-6d4e-4018-9a72-f1561ec8140f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:f0:88:e6:de:23:d0:34:f3:27:d2:ba:f9:
                    27:c4:ea:e6:1c:4c:a8:df:78:87:03:e7:a6:98:1f:
                    41:92:4a:83:b6:47:50:90:4b:04:cc:ee:52:47:05:
                    7e:ef:fd:5f:79:5f:da:11:a9:5f:34:0a:8e:a6:b2:
                    27:1c:72:55:bc:74:4c:70:c5:72:90:83:c6:b7:47:
                    f2:c8:b3:09:26:7b:54:8b:f8:f5:5e:f5:1c:0c:4d:
                    79:c7:19:f3:aa:82:8c:5a:e7:f4:67:5c:61:2a:a1:
                    a2:d9:94:14:fc:51:12:f7:50:97:90:1b:4b:c7:db:
                    de:13:e5:db:34:8e:ee:3f:f1:53:e4:f9:8e:78:c2:
                    0d:7d:44:f9:6d:a3:ca:4f:de:40:4f:1d:12:42:70:
                    99:9f:7e:a2:ab:8b:fc:98:9b:07:6d:95:0f:e5:cf:
                    ca:84:5b:12:fd:ea:bc:6e:6e:d4:61:f5:d7:9a:d1:
                    df:89:a6:e4:24:2d:6e:13:97:ed:1c:5d:c9:69:1a:
                    0d:f4:06:25:8b:eb:bd:57:4b:90:2e:83:b6:e2:93:
                    1c:09:d8:6f:22:46:00:75:2a:df:67:db:d3:3b:4a:
                    b7:18:1a:ea:cc:63:21:bc:c4:ca:02:fb:e0:e8:95:
                    95:ff:be:31:cc:4e:2a:71:31:67:70:02:ef:28:f8:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5F:A6:5F:E6:2A:85:6A:2C:BE:16:A8:54:54:F1:86:BE:08:90:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a280::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:34:ef:11:18:83:01:03:7d:cd:fa:e3:b5:a9:49:0a:53:00:
         d8:11:43:bc:d9:56:38:a0:64:66:61:d3:1c:5e:20:d8:94:06:
         73:48:0b:2f:6f:0a:bc:e3:5d:48:a2:d5:d4:e9:52:c5:82:68:
         e5:68:96:e7:eb:14:c6:6f:1b:78:95:fc:8f:6e:2e:f2:52:96:
         d6:1a:a0:ce:ba:9b:92:17:96:cf:df:90:de:36:bf:fa:c0:fb:
         26:11:be:45:62:31:7c:7b:e4:d3:24:98:28:3d:60:ba:ee:6c:
         e2:9e:14:96:d4:89:09:ba:ac:d0:53:97:91:c5:62:c9:24:a0:
         b8:12:23:9b:74:91:ff:80:27:1f:8c:1e:bf:1c:06:60:97:67:
         be:e9:e2:a1:07:7a:d4:bb:3c:63:fe:af:90:58:91:cf:ad:f5:
         87:b5:db:bc:73:54:99:7b:96:48:26:a0:d4:ca:94:77:5b:23:
         61:5f:a5:b4:99:3c:0a:34:91:bb:7c:8b:50:6f:8f:52:2a:6a:
         75:78:91:48:ee:96:83:6d:1d:01:c5:9f:d8:d3:5d:e0:99:b7:
         06:05:3a:7a:61:2b:4b:f6:a9:fa:c8:ec:9d:86:3d:df:32:f6:
         44:58:92:1d:33:09:8b:98:92:f7:bc:48:c4:86:94:a3:94:c9:
         f5:19:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:24:55 2026 by rpki-client