Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6afacedf-518e-3883-839c-012fca8f1307.roa
File:                     6afacedf-518e-3883-839c-012fca8f1307.roa (raw, json)
Hash identifier:          cr7uABE+kI0Rg49qllDCtu4RCM7uGBRBv6+t1yu0kfE=
Subject key identifier:   DC:9F:F3:68:41:95:E4:EE:1D:6E:23:32:23:2C:3C:4C:2D:DD:62:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78F87FDBF65EE333A0B6300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6afacedf-518e-3883-839c-012fca8f1307.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:140b:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:87:fd:bf:65:ee:33:3a:0b:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c030ce8c-7b9a-458b-ba9d-33e92724b08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:27:b1:c7:14:a3:53:e4:6c:7c:0f:bd:7f:
                    fa:6f:7c:f4:39:60:4f:82:8c:20:cd:9e:3e:12:c2:
                    6c:40:65:4f:80:19:7e:3d:a7:14:d2:4b:9b:ca:fd:
                    bf:0a:cd:9d:c8:b9:3c:56:a9:05:aa:98:dc:6c:4c:
                    58:ed:86:88:95:d1:ee:78:21:cb:da:5a:da:5e:76:
                    3b:c9:36:ed:0b:7c:b2:6a:87:6b:4f:fe:8c:ff:64:
                    41:22:5c:9a:38:aa:2f:04:41:3c:9a:20:3e:3d:f0:
                    6f:11:9c:f8:35:1e:92:f4:65:e6:bc:01:0c:2e:fc:
                    ac:91:1c:ee:4a:ab:9d:2c:c7:a1:03:1c:e5:10:76:
                    80:95:f6:51:a7:da:ca:5a:fa:79:9d:40:69:ea:d8:
                    7a:a9:c9:a1:f3:29:be:7e:6c:1e:c6:a6:ed:b9:15:
                    14:37:37:43:d5:8b:32:b8:3a:7d:8a:ca:90:15:4d:
                    8a:8a:4f:f1:a5:47:d4:3b:0a:22:74:80:96:6c:da:
                    67:86:9a:29:9c:df:fd:8d:6c:0e:f2:9c:20:91:e5:
                    3d:24:c3:b3:00:44:6a:56:1e:80:02:4b:81:10:d2:
                    0f:fd:24:10:fd:72:bd:2b:b0:16:a9:b7:46:de:d3:
                    3a:3d:3f:e8:95:2a:d0:65:ba:f1:f8:09:a0:15:fd:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9F:F3:68:41:95:E4:EE:1D:6E:23:32:23:2C:3C:4C:2D:DD:62:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6afacedf-518e-3883-839c-012fca8f1307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:5800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:d6:24:3a:4a:14:da:0d:4b:b0:9d:c4:9c:6b:43:09:d8:
         a8:9a:d7:5a:85:9d:34:eb:c7:1a:eb:59:b6:0c:87:4f:29:33:
         14:81:b8:64:bc:04:dd:ef:6d:87:d5:ab:03:9d:eb:92:15:97:
         09:8f:54:f4:90:f2:1d:97:bf:09:27:d6:c8:88:51:0c:b8:05:
         1e:29:2f:67:58:99:9e:75:ea:c6:42:ac:b9:7c:36:03:e4:22:
         74:10:c4:58:54:ba:6c:bc:7b:36:a9:8a:44:64:6a:71:59:f3:
         3c:77:94:47:d0:d0:94:41:99:80:ed:fd:d9:5f:ce:14:6b:94:
         aa:ad:19:a0:09:f6:23:24:ee:84:9b:c7:9e:7b:7f:cb:f4:cf:
         98:f9:67:07:d9:93:00:46:49:cf:c9:14:d7:c2:99:ed:8a:01:
         73:2f:01:e3:d2:a5:26:51:46:a5:b3:13:1d:fd:ab:62:fd:5e:
         ea:4a:2c:fd:14:8c:b3:07:af:90:df:5f:77:9e:32:fe:bf:22:
         73:57:23:86:1d:e2:8a:73:61:8e:e8:be:6d:a4:7c:ba:ad:9e:
         38:b4:25:e8:eb:ef:3e:ff:50:f3:f0:04:a5:3f:90:c8:1e:d1:
         ab:5f:35:46:9f:57:a6:f2:78:ed:6a:d7:e5:37:c0:02:24:91:
         e2:43:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:29:25 2026 by rpki-client