Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa
File:                     4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa (raw, json)
Hash identifier:          EgQw4WpdIHc6zkgd6WqnqJPajblo1iOlsAwzGPJUwlk=
Subject key identifier:   A7:16:F2:4C:7C:16:3C:36:3A:9F:93:8C:ED:63:06:70:59:32:5C:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7873E0E1AB5370A645EE300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:1404:b400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3e:0e:1a:b5:37:0a:64:5e:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=44fd159e-751d-409d-8645-7cd3b087e1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:50:73:5a:89:66:08:fe:9f:4c:7c:c5:6a:
                    3e:bd:f0:45:c3:c7:21:ee:37:f6:05:e4:a8:93:35:
                    80:7c:66:b4:59:d3:90:06:a7:db:f0:af:b0:71:a5:
                    17:8d:36:21:44:4b:6f:18:a1:c9:6e:36:f3:c8:56:
                    ac:1e:d6:7c:6f:95:27:13:14:43:b5:13:72:8c:1b:
                    bc:9a:6a:10:d5:97:24:cf:19:0f:27:bd:a9:f0:e5:
                    eb:d2:eb:af:4d:fe:ff:0d:0c:54:3f:b3:bb:73:19:
                    49:1d:a9:fd:ce:34:23:c8:85:d1:01:9a:94:2a:3d:
                    f9:93:85:6c:37:43:c8:9c:ab:cf:bc:58:da:9d:b4:
                    e0:69:28:28:c1:1b:f3:30:79:dd:00:5c:39:51:75:
                    cc:86:a7:7b:17:28:da:74:eb:e8:3e:d3:ad:31:82:
                    36:90:89:ed:45:36:db:d7:e9:05:31:fc:22:34:96:
                    54:cc:58:32:04:b4:03:d2:c9:a3:d2:39:74:6f:4e:
                    86:9b:43:84:f3:0b:cb:27:d1:69:47:88:b4:9b:fd:
                    38:37:d4:33:72:b6:b8:46:24:54:73:a5:39:77:be:
                    61:2e:1f:9a:db:26:7a:02:cd:45:76:e2:d1:4b:ac:
                    11:cd:55:b7:d1:3f:12:e1:e9:bf:b7:56:db:20:2a:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:16:F2:4C:7C:16:3C:36:3A:9F:93:8C:ED:63:06:70:59:32:5C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:b400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5e:1c:41:5d:23:a1:5d:d9:f2:c8:10:fc:8b:c5:42:94:5e:
         6f:b6:4b:b0:b3:b0:35:f7:1b:d2:75:46:71:d4:e6:96:6e:94:
         2a:cc:40:de:ad:f2:98:e1:c6:32:f6:13:0a:52:64:f1:b9:50:
         f6:1c:e5:56:b2:ad:d2:e5:06:4f:94:cd:1d:e3:36:89:a4:a3:
         46:d6:84:fd:4a:d8:73:4c:e4:74:98:9d:99:db:b8:d5:b5:9e:
         5f:f3:9b:0d:9d:57:5d:f1:5f:50:c2:d7:a6:4a:23:7a:f3:fa:
         89:75:78:89:34:58:fe:53:74:49:56:90:c7:e0:64:ee:57:46:
         7c:cb:a8:51:2b:c6:53:ca:59:59:17:ab:68:41:0a:14:eb:aa:
         aa:b7:98:59:67:b3:ea:ac:35:f2:56:6b:e8:de:9d:81:92:4f:
         a3:69:11:f4:75:97:f0:96:c8:d0:8a:a0:91:65:9d:4e:5a:d8:
         dc:0e:c0:ca:09:7b:8e:37:66:9d:ba:2d:de:00:ad:08:b2:34:
         87:19:6f:2d:05:80:77:7a:88:f3:7e:a7:40:72:78:1f:c5:e7:
         6f:fe:74:74:91:8e:21:3e:34:c9:0d:ae:ec:10:51:43:87:f0:
         55:b8:4f:b3:40:33:25:f6:78:cd:2a:c5:02:0b:39:37:bb:73:
         9b:dc:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:10:11 2026 by rpki-client