Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bedf93b-0c08-3d2e-905b-27a466a87609.roa
File:                     6bedf93b-0c08-3d2e-905b-27a466a87609.roa (raw, json)
Hash identifier:          njDYFQR5P8tj+KbWb3M9n+tMUpgVS9YxbPvvjx7L4YQ=
Subject key identifier:   60:25:5B:52:BA:4A:51:05:2C:96:11:61:74:70:E8:95:5C:CE:EF:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7966B4A0AE9F380AEEC9620
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bedf93b-0c08-3d2e-905b-27a466a87609.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21342
IP address blocks:        2600:1480:a801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:6b:4a:0a:e9:f3:80:ae:ec:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=436e395a-a546-4456-8706-ba6e3deeb482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:13:e7:00:a9:83:d4:a9:ac:f8:cb:51:ae:
                    1f:0a:68:81:00:e1:01:31:25:a6:36:48:0b:fb:7a:
                    7e:9c:ab:b1:ea:31:6d:ad:50:53:99:96:32:e7:fb:
                    36:27:37:3a:0e:7f:46:f7:72:34:71:05:ad:05:06:
                    25:d1:ad:16:47:03:d0:a6:c3:f3:d0:75:28:2e:f0:
                    26:69:76:ab:31:e9:cc:d2:85:c6:51:b1:5d:5b:96:
                    56:91:ec:2d:44:82:58:cf:77:4f:7b:6f:52:c7:1c:
                    16:17:ba:aa:4a:16:91:d5:19:59:e6:15:35:5f:29:
                    a5:49:2a:cf:0d:04:9c:28:d2:58:60:9c:c5:99:2e:
                    ff:60:fd:56:b7:47:dd:3a:37:31:d9:46:2b:32:46:
                    27:0b:41:5d:d2:bc:af:78:e6:c6:22:e4:c0:80:50:
                    c4:8f:50:3d:c2:88:02:73:88:53:76:f6:7d:cf:83:
                    8c:c4:26:c6:a4:d4:d3:ca:72:1b:f4:77:7d:cc:4f:
                    3b:0d:a8:66:f7:b3:33:79:73:11:ed:75:50:e3:43:
                    96:9e:37:04:57:16:3b:4b:68:bc:69:cb:a9:ac:28:
                    09:27:03:1f:b3:83:2f:9c:d6:3d:6e:da:43:06:06:
                    27:e4:c8:e8:b7:cd:0f:db:0a:62:b2:d0:85:f3:9d:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:25:5B:52:BA:4A:51:05:2C:96:11:61:74:70:E8:95:5C:CE:EF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bedf93b-0c08-3d2e-905b-27a466a87609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:a801::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:61:6f:25:e1:e0:1a:1d:2b:9c:3b:7e:6e:77:d3:dd:0c:6e:
         8c:c6:4a:ad:cf:62:96:c6:a1:79:b4:67:80:d7:a3:65:fe:b3:
         a2:05:4a:a2:f7:68:df:ab:31:b7:51:38:21:63:f4:b4:15:c5:
         ed:42:a0:e6:83:0e:83:76:fc:0e:72:6a:a4:b4:51:fd:9a:96:
         ec:2a:27:9e:66:fc:61:73:2a:a4:5d:d1:cc:e5:c9:1c:f4:47:
         36:7e:3e:60:6e:03:61:d3:18:b6:ed:9b:2b:2e:65:7e:6a:15:
         4c:5e:ef:3a:a3:e6:15:70:c9:ea:a7:97:02:60:b2:36:9e:aa:
         71:a6:5a:58:4b:57:c3:c3:19:76:14:11:28:cc:59:3d:d5:8b:
         e7:a5:a6:5f:01:0c:20:a1:f3:1c:71:0f:4d:28:21:aa:54:13:
         32:b9:ce:a5:16:b9:63:7a:53:8a:91:08:fe:59:49:38:4f:1b:
         4a:34:51:17:92:28:10:c9:60:3d:18:bc:0c:73:e2:eb:ff:da:
         d0:87:07:fd:d4:72:1d:d8:ac:0a:e8:4f:86:6f:43:d2:cb:86:
         7f:d3:fe:09:80:db:df:93:07:ce:d4:42:68:74:43:94:f3:2a:
         cc:a3:66:09:50:e7:f3:d3:58:56:f4:d5:b7:1d:83:75:ff:c4:
         4d:0d:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:56:47 2026 by rpki-client