Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c400f95a-ebbc-30c0-a3de-3ca2ce3ac3ea.roa
File:                     c400f95a-ebbc-30c0-a3de-3ca2ce3ac3ea.roa (raw, json)
Hash identifier:          69OOr8n2TY+syupEGoBksUtU5JXXN4kdoVu6b9U7mIc=
Subject key identifier:   AB:1C:D6:14:78:63:C6:C4:8C:6D:87:E9:15:6A:62:33:4A:1C:52:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7944E4F7EDF386640E0EF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c400f95a-ebbc-30c0-a3de-3ca2ce3ac3ea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     24319
IP address blocks:        2600:1417:38::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:4e:4f:7e:df:38:66:40:e0:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8613ac97-980f-4914-bd49-f4cdfea097ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:c4:fb:06:c6:f9:28:15:69:9d:fc:b3:73:
                    8d:fb:3f:24:4f:a5:aa:93:7b:5d:47:e7:25:2c:bb:
                    5e:23:40:0d:9c:44:2a:96:6e:67:a2:ae:ee:cb:63:
                    b7:24:eb:a9:a0:c3:4f:0e:9a:a9:fe:7b:31:2b:57:
                    d2:e7:dd:f7:60:05:5a:9e:a6:2e:fb:2d:24:96:58:
                    cc:3d:92:70:0b:e7:af:cb:80:52:17:12:88:5f:0b:
                    25:39:cf:4f:38:ca:0c:52:54:7b:d0:ab:87:95:69:
                    39:0c:99:d7:bd:88:2f:3c:8b:1f:ee:c6:33:4e:af:
                    ad:59:aa:cf:69:39:70:57:30:09:99:a9:0d:ac:78:
                    94:3b:00:92:fe:de:3d:0e:1d:74:b7:0c:18:7d:fa:
                    37:89:e8:4a:f4:0d:c9:ab:68:2d:41:cc:89:43:f0:
                    0a:b0:84:0f:1f:1f:40:6c:72:6a:51:63:45:61:f9:
                    09:b1:9d:ba:ac:3f:bc:8c:61:1a:92:9b:9b:19:d0:
                    43:c0:d1:43:2b:c0:a9:5a:d0:4c:ce:b4:74:ec:6c:
                    00:8f:01:fa:fb:e3:78:dc:45:9e:62:d5:77:31:9b:
                    ff:af:2f:b9:dd:5a:c0:74:30:50:77:09:9e:d5:1d:
                    44:6f:e9:2b:ff:66:63:d9:a1:32:9a:41:fe:57:6b:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1C:D6:14:78:63:C6:C4:8C:6D:87:E9:15:6A:62:33:4A:1C:52:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c400f95a-ebbc-30c0-a3de-3ca2ce3ac3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:2b:7e:b9:7b:e6:1f:2b:d1:6f:90:5c:53:eb:37:a8:40:
         67:3d:f0:55:ba:96:f1:85:ef:1f:58:6c:10:7a:e8:0e:bc:b4:
         f1:39:0c:f9:b6:c4:91:5e:a8:04:13:10:e9:45:2c:29:d1:17:
         ce:38:8f:34:f9:b9:da:1f:07:26:d4:a6:f0:62:98:45:6f:27:
         aa:f5:e4:ed:bc:d2:a5:3f:db:d4:c1:c1:dd:70:f6:b3:99:56:
         d9:0e:4b:7c:67:2b:a4:e7:3e:53:5f:5c:55:34:7e:ac:7d:f3:
         20:0e:14:bf:1d:db:71:d2:4d:9c:c4:74:f3:d8:61:ef:0d:61:
         3a:57:cb:4e:19:d8:ff:ae:af:cb:de:f7:19:2e:b0:57:e1:5c:
         41:e7:72:b6:81:fb:b3:01:bc:d1:fd:20:3c:9e:57:88:1e:a4:
         05:76:9c:81:f9:a8:3f:9f:34:ff:c9:c2:9c:ae:6c:46:a9:69:
         5c:16:8a:0c:c7:23:9e:9a:e8:b0:74:b4:64:c2:fb:d9:25:51:
         ce:dc:40:cb:a2:a7:0e:4c:98:91:fe:74:9e:76:d6:1a:e1:01:
         8a:60:a6:0e:f1:4c:bf:db:97:db:c2:13:77:53:38:32:9e:d6:
         35:82:df:a5:6f:f1:b4:2f:c0:1d:a3:56:74:a0:31:37:69:71:
         a5:b2:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:23:11 2026 by rpki-client