Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa
File:                     a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa (raw, json)
Hash identifier:          aUe3tckwSe8zZK/cK2gYvH0y9Kau23PxM50ErfHK+vE=
Subject key identifier:   63:06:20:19:8A:D9:5F:32:7E:80:F0:C0:81:C3:D5:D9:54:4F:3A:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78F811FB6A6E07CAF0F2F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:1402:1c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:81:1f:b6:a6:e0:7c:af:0f:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=69240700-cb48-4318-8d82-8e5f64343bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:9d:41:0b:90:25:51:a9:4c:92:86:87:3c:
                    37:e3:9b:c4:62:02:32:cf:f9:59:d2:f3:ac:65:1c:
                    52:26:b9:52:3d:50:1c:0b:37:a6:75:81:c8:69:14:
                    b6:37:60:00:3c:1c:ad:5d:d0:1e:e6:8f:d0:56:85:
                    ea:75:43:17:91:9d:78:d4:d5:55:12:a5:13:c5:16:
                    a8:1b:3a:84:d1:c1:11:c4:fc:e9:ff:25:7c:b6:bd:
                    f6:54:db:a7:cf:71:1c:92:a5:9f:4d:27:b7:84:cc:
                    de:7a:29:87:77:8f:cf:4f:c3:4d:e5:8d:2d:60:5d:
                    8d:c5:37:58:52:a2:26:96:bf:9a:bd:69:5f:76:e4:
                    65:2c:ca:3f:1b:5d:88:c9:25:2d:8d:bd:8c:8c:36:
                    a3:88:bd:ca:47:c5:6a:28:e9:4e:79:01:29:2e:38:
                    61:8f:81:02:1f:96:b6:21:cb:63:e2:76:b9:5c:92:
                    ba:cd:fa:04:aa:a1:50:03:c0:1d:7b:a5:3c:17:d4:
                    82:6c:cf:59:64:f4:de:16:97:e7:b8:b5:8e:d4:08:
                    f2:fe:b3:37:74:d7:2a:b2:74:5f:75:f8:a7:d6:4f:
                    06:9a:c4:95:c5:29:60:37:1a:8c:27:e8:50:3d:e2:
                    08:5f:6c:20:02:48:ae:62:1d:c9:3e:3f:49:e8:fa:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:20:19:8A:D9:5F:32:7E:80:F0:C0:81:C3:D5:D9:54:4F:3A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:1c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:44:5f:7e:90:5a:13:42:51:b0:70:05:bd:2c:06:fd:8b:
         d7:5f:1a:d9:cf:a6:61:b3:4b:f5:32:c4:1e:72:b2:41:a6:a1:
         d9:92:0c:7f:80:c3:05:a0:aa:4a:e2:49:4f:16:73:08:5b:7d:
         1c:cb:00:a6:60:7d:52:65:d4:6e:5a:e6:58:26:f7:e6:a8:8b:
         71:92:c5:dc:51:bd:57:f6:cd:e9:5b:2b:60:8a:6b:af:85:ad:
         7f:65:7f:60:05:a6:b1:2c:28:e6:be:8c:86:bd:35:dd:1f:07:
         71:23:91:0b:48:c0:f4:79:14:8b:fe:08:bc:89:58:ef:1e:77:
         fc:e7:06:84:ba:5d:44:ef:1b:c0:7c:bd:bd:4c:80:75:df:b7:
         36:43:b1:49:eb:bf:f9:c8:d5:ca:ea:a7:7d:9e:cb:3d:08:6f:
         5d:f1:d1:37:71:ae:6c:cb:59:9b:40:8a:b8:d6:aa:6c:89:b2:
         00:3f:eb:de:a7:7b:e4:0e:71:a7:78:95:07:c4:62:bc:51:72:
         8a:31:67:18:5a:8f:8e:8f:8b:78:56:09:57:29:7b:4d:c1:7a:
         5e:bf:ad:79:37:80:fd:49:87:30:37:e4:be:bc:19:08:db:77:
         32:53:ec:cc:77:88:d1:e1:eb:bc:a0:af:8e:0b:ee:0f:c1:26:
         ea:68:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:53:53 2026 by rpki-client