Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf13e06d-8edb-3633-b421-010bb02f08ad.roa
File:                     bf13e06d-8edb-3633-b421-010bb02f08ad.roa (raw, json)
Hash identifier:          65awlMtMVcFCun1zlpMEwkufamkxDkrlsmYDHjT43/s=
Subject key identifier:   8A:56:60:60:AE:D8:56:9E:EB:46:D6:EE:2E:58:89:30:CC:61:81:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E779A2E842CB00601E6567BEC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf13e06d-8edb-3633-b421-010bb02f08ad.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     20940
IP address blocks:        2600:1405:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:2e:84:2c:b0:06:01:e6:56:7b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=3aac41cf-52a2-438f-a54d-07ff2c82a3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:13:b6:ec:ff:e4:80:02:7a:69:a7:c4:d2:
                    3b:05:a0:72:d7:ac:7e:e7:6f:01:7c:f4:a9:bc:48:
                    a0:32:78:1b:78:29:10:94:1b:6c:66:c9:1a:f5:3a:
                    55:9a:36:94:91:d7:de:d5:81:1e:e3:19:e6:8c:fc:
                    05:15:fb:52:49:8e:34:45:0d:65:1e:57:67:5a:75:
                    44:da:81:84:93:10:e1:e9:b6:4a:0b:d0:7b:74:45:
                    f5:49:2c:e5:16:e8:4f:24:d3:af:f9:8f:e3:6d:86:
                    c3:75:e6:12:da:44:d2:fc:84:1d:07:9a:40:d6:ec:
                    f7:b6:de:79:5a:e9:fe:b3:fb:e2:0f:1e:89:b2:66:
                    ae:b1:23:f4:b7:eb:84:3a:97:de:78:2f:d3:fd:8e:
                    52:30:1e:08:e0:fe:04:cd:2b:ef:3a:bb:22:d6:ef:
                    de:bd:2b:4a:cd:19:1c:29:8c:85:90:ad:e6:ef:7a:
                    5f:99:0e:a0:05:3b:7a:52:37:cd:92:bd:0f:02:cc:
                    a4:cf:74:15:83:b5:eb:6a:07:bb:f1:69:e8:2c:0c:
                    89:2b:7d:06:e2:63:f4:00:eb:a1:92:47:46:4a:6b:
                    c9:e5:07:ca:df:fd:0d:e6:fe:ea:35:42:27:7d:6e:
                    15:96:15:92:dc:7f:2d:26:54:25:d7:fc:36:5b:ed:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:56:60:60:AE:D8:56:9E:EB:46:D6:EE:2E:58:89:30:CC:61:81:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf13e06d-8edb-3633-b421-010bb02f08ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:db:cf:23:18:c9:14:c0:ba:72:f6:cd:79:ad:86:f3:08:
         3f:99:19:9b:41:f9:57:5a:f2:e8:6b:2a:8c:40:75:c5:72:09:
         24:34:05:d1:b6:b1:98:cb:4e:82:3b:6e:5f:6f:51:fc:6c:b8:
         d8:38:1a:dc:f4:39:4a:08:d9:fa:ce:ef:ec:a1:6b:7a:a1:d1:
         2a:fc:8b:82:39:ae:e5:00:20:ec:af:14:8f:18:e9:a3:e6:1d:
         ed:36:7c:2b:d6:93:cc:a6:fa:97:13:7f:14:f0:df:da:32:fe:
         77:bb:4f:6f:06:06:92:b3:2a:62:66:d6:8c:6e:7f:fa:15:18:
         42:7c:63:f6:a3:77:d6:bd:92:f2:ee:c7:b9:cc:34:eb:12:82:
         d4:75:e5:1a:7b:90:4e:8a:d7:70:07:48:91:c2:23:74:8f:b2:
         a0:53:d9:88:e8:ba:62:39:80:07:24:2e:04:40:d3:d0:b0:29:
         e4:66:7b:8d:c2:f2:aa:6a:6f:68:62:f3:05:53:00:6e:86:a2:
         fe:38:a6:13:51:1a:d7:01:0f:bf:4f:3c:d0:31:2d:09:56:fa:
         8e:be:71:4d:dc:e8:13:78:32:16:39:f9:97:48:ab:f6:4a:3b:
         b9:36:2e:1e:0d:d0:f5:54:48:cd:5d:88:5f:21:7f:19:28:82:
         fb:c9:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:38 2026 by rpki-client