Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a221f11-e4a2-31d5-9b84-199e435c59b5.roa
File:                     1a221f11-e4a2-31d5-9b84-199e435c59b5.roa (raw, json)
Hash identifier:          E/q6iHPpMOl549bhcRq/I4n91MCANQs7e9pozwb2VM4=
Subject key identifier:   E6:B0:1E:55:7B:00:99:C3:57:4D:24:ED:14:66:48:97:C6:86:F6:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E51E9E4F0C545205639381C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a221f11-e4a2-31d5-9b84-199e435c59b5.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     20940
IP address blocks:        2600:1410:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e4:f0:c5:45:20:56:39:38:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=86cc6999-a60d-402c-b78f-622eeb871ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:e2:97:dd:bb:9a:95:f9:f9:bd:0f:bf:e2:
                    33:19:95:2a:20:7b:77:91:bf:b0:b0:d6:db:d0:32:
                    5c:dd:86:1c:61:1e:b6:87:ce:9a:01:89:32:5a:a5:
                    49:bd:54:24:07:fb:9f:ff:67:09:0f:16:97:70:aa:
                    c3:4c:35:de:38:6c:d4:30:6b:ee:1a:cd:2a:18:4d:
                    25:65:ad:58:0a:06:0b:95:81:85:e2:24:8a:7f:69:
                    e3:ce:a5:ce:df:f6:c2:2c:4c:4e:32:b9:71:68:34:
                    af:6a:0c:2e:b6:74:1c:e6:38:06:10:76:f8:f5:f5:
                    52:b1:45:5b:1f:26:06:17:de:d0:79:61:ef:d1:ee:
                    57:53:00:7b:8f:49:36:b0:34:0d:25:03:6f:7c:ef:
                    a2:e3:1a:34:5e:9b:97:2a:85:67:57:72:31:4a:00:
                    0c:0c:8f:48:95:58:ec:7f:03:92:1a:bf:3e:e1:8d:
                    1d:2a:fb:46:66:3d:ed:b6:50:65:68:b0:c6:f8:d0:
                    b5:13:c9:ff:d1:18:7e:80:e4:b9:cf:ce:a5:96:93:
                    ad:d2:1f:93:d0:f1:f6:93:d7:d6:d6:50:c5:50:3c:
                    58:7b:49:08:f2:69:52:ce:ba:28:f2:35:99:f7:db:
                    89:dc:88:0d:1e:33:56:fb:78:a5:1c:8d:16:f6:fc:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:1E:55:7B:00:99:C3:57:4D:24:ED:14:66:48:97:C6:86:F6:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a221f11-e4a2-31d5-9b84-199e435c59b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:8b:cf:ac:ea:09:79:f8:af:9d:6b:03:a4:10:00:7a:9c:d3:
         86:d3:6c:8d:a6:c4:39:49:50:a9:58:61:11:eb:71:c0:44:70:
         46:ac:51:6e:c4:74:87:a8:35:da:f5:e4:14:a9:04:d6:45:d8:
         c6:07:2a:b4:40:e1:2d:7b:6e:c2:ad:99:13:45:cd:95:84:3e:
         34:46:60:dc:93:7d:14:9c:93:ad:f5:8d:cd:3b:73:3b:f5:94:
         b2:cd:d4:d1:2d:3f:59:20:47:89:f7:37:65:cd:be:48:21:53:
         94:47:35:a0:2c:a7:b1:43:c7:b1:64:4f:ef:bb:b8:5d:da:e7:
         63:19:c2:46:3f:38:12:0a:3b:05:dc:a8:5f:29:65:57:ad:de:
         af:9d:fa:c9:83:6d:41:31:ec:ac:5b:ec:7c:c1:90:d2:cc:9a:
         bd:0b:71:e9:5d:0e:32:bc:ed:17:67:9d:95:a2:75:2d:30:f1:
         88:fa:ba:67:88:aa:bd:e7:72:eb:5f:f5:d1:58:e3:c9:3b:aa:
         13:23:9c:17:68:14:2e:f2:58:95:8e:ff:58:18:0b:62:f6:e5:
         09:80:19:41:df:6b:e9:b0:06:22:34:cb:a8:fb:f8:e0:43:66:
         92:9d:8f:d2:c0:6c:c8:27:2e:f5:73:ab:e8:b0:39:88:d3:81:
         3f:c1:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:50:37 2026 by rpki-client