Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa
File:                     8eecd044-53ce-3b54-9eab-44203b2334eb.roa (raw, json)
Hash identifier:          /hb6DgQQmHJCZgK+Rs/cqtie91js6p9A2Ayj2wVaeuo=
Subject key identifier:   D9:CD:AD:2D:2C:ED:B6:41:3D:25:60:D8:4A:47:74:50:93:C0:C1:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EDC9205CF1DB8342715967F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     63949
IP address blocks:        2600:3c12:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:05:cf:1d:b8:34:27:15:96:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=4e287586-ae66-4065-adff-d1fa9aa39193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:80:24:f5:b5:0c:cc:db:a8:9e:dd:ce:7b:
                    6f:f9:8c:4e:48:e2:4b:5a:32:2f:41:f1:9d:e6:47:
                    b9:e6:95:53:6e:28:63:2c:6e:87:ae:9f:7a:b3:ce:
                    e2:4f:ae:25:e8:4c:12:4e:6a:e2:b8:59:5e:e7:5b:
                    0a:81:5d:0f:66:19:79:fd:3f:4a:55:ab:3f:37:f0:
                    a8:5f:88:b7:f2:e2:e8:d0:f1:0a:36:4d:64:3f:ce:
                    2e:6c:48:ce:69:82:27:50:3e:48:a3:1f:9e:b8:7e:
                    bf:aa:a5:ee:96:83:8c:9d:62:3f:f8:35:cd:e5:68:
                    52:cb:00:16:ac:16:94:e9:5b:db:f8:0e:85:26:71:
                    e0:a7:90:1d:58:b8:56:a1:36:a9:30:c0:9d:24:4e:
                    55:2c:a3:2f:ed:49:27:86:8a:15:5d:50:e5:7d:fc:
                    ca:a8:5a:46:2b:ef:48:fc:81:ca:7f:40:71:3f:12:
                    e8:29:04:fd:16:2d:c5:83:3d:4d:ec:d0:52:1a:5d:
                    3d:0f:78:db:6d:8a:ef:c7:7e:a3:7f:cb:7e:c8:80:
                    a1:cb:2f:f4:cc:b9:a1:22:b0:18:03:d1:0e:01:bd:
                    6e:a2:2a:1e:ec:2b:4e:c8:96:c7:12:20:49:ad:2b:
                    44:8e:34:74:e0:c3:0c:e2:8b:b5:b3:dc:62:69:61:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CD:AD:2D:2C:ED:B6:41:3D:25:60:D8:4A:47:74:50:93:C0:C1:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:39:5d:9c:4c:a0:e2:6f:07:2d:c4:21:cc:e7:8c:30:ec:a4:
         fa:39:9c:f9:fc:d1:9a:94:73:1b:48:41:4f:bc:f8:d7:00:f4:
         d3:62:aa:e7:00:17:ee:29:33:5a:77:13:ad:46:d0:c3:78:bd:
         66:4d:2f:7d:50:5a:0d:32:39:a0:6b:31:1f:ad:7c:21:b8:35:
         ae:d3:ad:28:b8:9e:b7:36:50:ff:9f:2e:df:e9:5a:7f:9d:04:
         c3:1a:5d:75:a3:bb:dc:d1:89:c4:8b:7c:c5:0e:1b:08:6b:c5:
         fb:de:60:83:38:1b:6f:25:f2:35:de:79:75:23:86:37:4d:12:
         db:dd:9f:ba:dc:d6:94:5f:d7:8f:f5:1d:62:ef:be:4f:75:1f:
         a3:c9:d3:02:fc:c4:4a:f9:c2:c5:88:6e:b8:fc:9a:48:b2:e3:
         9a:2d:61:ac:c8:7b:e9:64:5f:36:37:2c:f5:ea:71:ba:e8:25:
         1f:0a:1c:5a:23:d2:58:78:40:e7:13:f1:7a:c8:e7:93:46:69:
         13:33:2c:a2:e1:8d:88:54:42:fc:4c:fd:19:ec:26:9f:dd:37:
         23:da:84:32:31:4b:30:78:d1:eb:fe:84:95:8d:29:c2:f2:5c:
         60:85:b2:4c:40:cd:b0:b9:cf:70:90:bd:88:a1:a2:1a:40:23:
         3d:bc:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:23:36 2026 by rpki-client