Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa
File:                     1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa (raw, json)
Hash identifier:          1jbnH+hf125Qu0UPihqyhFn58H88V1hZTLOL1TeONbQ=
Subject key identifier:   EF:02:1C:1B:5F:64:6D:73:81:B5:65:B3:73:B1:D7:78:CB:AD:48:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7944D33F8AB6C34645C0AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     24319
IP address blocks:        2600:1413:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:4d:33:f8:ab:6c:34:64:5c:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4bb305ca-3f86-4b63-8075-668516222470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:27:75:b8:f9:58:11:13:09:da:40:b6:6f:
                    d2:fc:a5:36:85:99:e8:de:d2:b0:f5:15:83:df:22:
                    3a:35:01:b8:05:ce:ab:ed:26:f5:0c:ac:a6:55:b0:
                    0f:ac:c3:b1:bc:77:67:c5:d4:81:83:94:cc:ed:7c:
                    7e:2b:04:d5:49:c6:fc:6d:c3:52:c6:aa:42:88:1e:
                    36:a3:70:e2:f8:8e:39:51:2c:8d:55:2b:40:86:a6:
                    87:51:9c:08:6a:e3:29:02:02:ca:50:f9:6d:26:4f:
                    01:fd:a2:44:21:77:19:24:30:fc:f7:3d:30:7e:d5:
                    b6:0c:00:bc:c3:8d:de:44:eb:18:f5:a0:7a:9e:3c:
                    5a:9a:1d:22:4f:c8:3e:98:cb:5d:ab:72:b5:11:d7:
                    7d:52:fc:a2:f8:6e:25:11:c6:ae:3d:93:d8:51:06:
                    31:69:c9:d8:66:24:57:f3:b2:28:ea:51:2b:85:c2:
                    c6:72:e8:31:01:8b:33:3b:84:70:93:ed:36:d4:69:
                    12:9d:1b:eb:f3:a2:c1:bc:40:ee:a8:28:25:cd:df:
                    ea:1f:92:17:6c:1c:7d:d0:2d:c6:43:d4:40:87:98:
                    71:18:8c:6e:26:36:05:87:53:2b:6d:87:9c:20:0f:
                    8a:e7:b0:51:4c:4b:50:68:1a:e2:87:ec:79:05:ee:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:02:1C:1B:5F:64:6D:73:81:B5:65:B3:73:B1:D7:78:CB:AD:48:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1afa5d41-04bd-3d63-b8a9-820ee8d5f88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1413:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:14:f3:28:ea:d1:b7:76:8d:f9:fc:bc:31:93:e2:80:d5:54:
         09:a2:ca:26:68:a1:48:e7:13:8e:d2:63:28:61:6e:d1:90:9e:
         a6:ff:d3:a1:63:03:5b:ff:9a:7d:4d:b4:32:19:1e:69:54:ee:
         34:d3:d2:1b:e7:af:33:05:a4:b8:32:f8:5c:70:67:43:05:33:
         57:d1:9b:27:6b:86:c5:9d:1c:4a:f9:7a:16:c0:ed:4f:69:71:
         cc:f4:74:e9:42:ef:5d:29:70:b3:92:91:49:19:4b:43:9c:a9:
         d1:8f:3c:32:34:1a:fe:c6:ba:3c:96:bd:1c:82:aa:5d:d2:fa:
         66:2a:e6:42:24:3b:d6:c1:50:94:c6:d1:11:56:60:63:97:dc:
         67:2d:c4:b1:ca:0d:6d:bb:03:ea:b3:14:20:f8:c4:ad:76:f9:
         f2:21:17:ff:02:6f:60:ff:e5:2c:02:ab:7b:cd:3a:26:4d:ee:
         1a:a3:f8:17:48:c7:a7:2c:e2:69:aa:c3:9e:d4:03:3f:d0:15:
         8a:29:fd:a3:0d:ca:57:f4:0f:95:54:8c:c3:86:29:0f:1f:e7:
         47:4b:62:59:8e:8f:a1:73:49:19:bf:69:54:51:21:75:bf:4a:
         44:ca:0e:e7:5f:f2:82:f1:50:53:43:90:58:89:23:e0:a6:e0:
         23:a0:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:22:58 2026 by rpki-client