Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06be8607-f279-3fb9-a791-6ea1c15da3bb.roa
File:                     06be8607-f279-3fb9-a791-6ea1c15da3bb.roa (raw, json)
Hash identifier:          j3mxgQgh6q9ZD6VWXenAUOFqJ17ybq0KlxJtueUPRkI=
Subject key identifier:   7E:85:CE:90:3E:2D:65:9C:06:E8:C4:60:91:8F:4A:2C:C7:1D:B3:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7929483D63374E04D6FE7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06be8607-f279-3fb9-a791-6ea1c15da3bb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     35994
IP address blocks:        2600:1406:f800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:94:83:d6:33:74:e0:4d:6f:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c9ff7479-7136-4261-9f7c-f18bc9df9f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:63:62:c1:fb:d6:28:f7:1d:54:1f:21:2f:
                    2f:27:e2:5a:ee:aa:81:f2:6e:2d:bc:6a:fc:4a:e7:
                    65:e3:b6:de:65:41:0d:02:4e:f8:e6:7a:b2:49:81:
                    14:3a:37:8b:f5:a5:96:d5:09:a1:4f:e1:1c:f1:fc:
                    2f:3a:52:8c:64:d0:90:48:d1:a9:4e:fb:da:1b:02:
                    0c:90:a5:55:9e:90:f4:ab:39:57:3d:4e:3b:2a:6d:
                    5a:70:bc:41:11:18:53:3f:f0:be:4c:d1:3d:f2:70:
                    9f:a4:9f:44:9b:d6:1f:6a:43:87:19:fb:05:95:7d:
                    ed:9d:3b:ba:7d:de:d2:75:79:86:fe:03:bf:d0:53:
                    46:07:89:d4:b0:71:84:26:d3:27:db:9b:17:e4:d6:
                    f1:62:a9:06:e6:79:5c:a6:74:e3:07:a8:88:fc:e9:
                    57:59:2e:51:f8:64:3b:b8:1d:45:86:61:a2:dd:75:
                    2c:2c:3f:a7:bd:18:41:6a:ab:ac:45:92:f8:bb:60:
                    35:84:19:4e:08:e5:6a:55:40:d6:4b:36:0b:e0:7e:
                    46:a5:97:44:cd:04:1d:38:b5:97:46:46:df:4b:df:
                    a9:35:8f:24:68:d7:2b:f5:d7:e3:c7:12:da:ac:81:
                    d4:f0:61:57:aa:1b:97:46:52:11:0d:15:8f:50:24:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:CE:90:3E:2D:65:9C:06:E8:C4:60:91:8F:4A:2C:C7:1D:B3:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06be8607-f279-3fb9-a791-6ea1c15da3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:f800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:08:58:7d:f6:18:c8:12:2e:ca:d4:a1:26:1c:36:56:2e:d8:
         09:53:04:84:b0:94:04:51:80:59:8b:cf:21:fe:72:2b:4e:bf:
         c5:24:44:4a:e0:e6:da:78:0d:6c:0f:32:43:b6:f9:e5:a5:f8:
         87:66:5a:5a:85:92:64:43:22:cf:f6:d9:fb:13:71:34:59:02:
         bb:84:26:c9:59:be:b6:3e:93:d9:24:07:d9:d2:5c:7e:b6:2b:
         14:19:a2:9a:9b:9e:8d:cc:0e:b8:5b:b6:92:a0:50:b2:91:74:
         7a:e3:2a:0a:f3:c9:6e:81:67:36:32:c9:eb:c5:5a:5c:2b:b5:
         f2:b5:ea:75:cb:1a:79:d9:95:ba:90:58:94:5b:05:55:67:5c:
         11:f7:fe:33:4f:4d:76:d7:2b:dd:d0:89:ee:40:1f:68:14:70:
         d8:a4:18:57:2b:a2:b7:b0:17:84:35:6b:36:87:7b:2b:57:47:
         91:ee:cb:ff:c9:ff:c2:9d:02:dd:06:8a:24:6e:f4:bf:7d:0d:
         dc:8c:5c:7c:3f:40:ce:14:46:d5:9d:ec:c5:44:c8:66:e6:ed:
         35:63:66:da:f8:3c:3c:0c:e1:d2:56:6f:b3:f3:69:83:f7:41:
         b2:ce:7e:9b:a7:be:c2:5e:f5:20:2e:3c:33:36:28:d7:d9:a3:
         a4:b0:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:12:09 2026 by rpki-client