Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa
File:                     b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa (raw, json)
Hash identifier:          ytGpskpnrNKKgxxce6VrGwvSejETVKOUh6RI8j2j/7A=
Subject key identifier:   75:F7:B1:76:52:36:72:D9:84:5E:CF:BD:4A:DE:25:AC:9A:49:61:68
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EDC92058445796EA71210B2A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     63949
IP address blocks:        2600:3c11::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:05:84:45:79:6e:a7:12:10:b2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=e96ec61f-61d6-4838-90fd-f4eb1002099f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:e1:2d:d6:87:72:68:81:ac:ea:3b:e4:18:
                    91:6a:55:d4:df:0c:a0:b2:a3:e3:0f:40:53:ef:5c:
                    5f:c3:2f:b6:d4:50:d7:0d:55:d4:3a:a7:81:94:4d:
                    c4:ea:d9:5e:52:62:81:d2:00:03:c6:a6:ce:36:5a:
                    63:ca:f5:79:01:00:2c:6a:fe:a2:4f:27:21:7e:85:
                    0a:2a:82:fb:12:81:5b:26:f8:cc:bd:87:4f:c4:80:
                    cb:2c:db:29:15:e4:7f:61:29:83:17:85:99:75:13:
                    6a:c8:6d:1d:35:94:ee:68:a4:5a:93:a3:01:44:8a:
                    c1:d3:46:b4:17:5b:06:3e:9b:a2:6b:0c:a4:29:46:
                    c4:aa:6d:e5:14:4c:db:02:cd:f6:73:ea:e0:69:fe:
                    bd:63:54:a9:03:ac:f3:5b:e7:73:42:e6:4c:79:30:
                    4d:56:96:0d:dc:2e:a9:87:b6:bb:7e:19:4d:73:24:
                    c8:66:74:54:d3:a5:c8:cc:76:f5:bb:77:a0:f0:fc:
                    16:d9:9f:98:b7:0c:40:79:f5:9d:82:69:9b:06:5d:
                    05:a3:a6:88:9e:cc:13:1a:bb:f7:39:06:11:9f:4b:
                    ec:84:a5:d4:22:21:cf:e9:96:90:f9:ee:e5:34:37:
                    e2:b2:35:d1:c8:6d:2b:46:32:a4:b1:b7:5c:cd:5c:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F7:B1:76:52:36:72:D9:84:5E:CF:BD:4A:DE:25:AC:9A:49:61:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c11::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:b7:4e:00:be:45:f4:3d:71:06:e7:c9:4e:0d:c0:0b:cf:
         93:1b:f1:8a:6c:80:40:39:98:ca:fc:db:39:65:2a:8f:a3:2c:
         b8:6b:72:f4:ec:74:59:c1:7a:80:2b:06:33:e3:5e:a5:3a:7e:
         18:ae:4d:3b:77:19:12:a9:e0:b4:7f:97:62:c6:1b:be:c5:3b:
         9e:9f:b6:87:fc:c8:ea:c2:85:e9:5c:c6:8c:bf:eb:20:4b:7f:
         9f:78:a1:6b:cf:39:4c:c3:57:5b:9d:38:41:3d:90:b6:38:a1:
         39:66:79:d0:42:0b:f1:58:30:9d:d1:1e:0d:04:d6:4b:05:47:
         13:3b:c0:13:d3:43:69:8b:f4:f5:ef:16:7e:c9:90:10:d4:77:
         70:7e:48:23:0f:1f:76:e5:ee:7d:75:f0:6b:ae:91:5c:a8:2b:
         26:5d:e0:e4:0a:d1:76:a8:6c:3f:28:88:b5:4b:fc:f0:a2:6a:
         a8:07:f4:0a:b6:6c:7d:6b:19:a0:de:a8:da:c9:43:b8:63:18:
         86:47:cb:37:24:32:49:ec:86:f1:64:64:a9:0c:6c:ad:4a:fb:
         c3:36:e5:9f:37:11:d4:19:0a:ec:ce:4b:bc:98:43:5a:73:21:
         48:ae:c7:66:a5:e2:bb:f9:53:45:30:84:35:6d:f9:3e:89:65:
         24:29:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:25:24 2026 by rpki-client