Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d417e185-dfd2-34a6-8ffb-3db83acf4f68.roa
File:                     d417e185-dfd2-34a6-8ffb-3db83acf4f68.roa (raw, json)
Hash identifier:          a9eNL8B5jDN9EfhrKmgjPAHsPIjGv/Xs2ekdrCvvpDI=
Subject key identifier:   88:67:59:6C:17:FA:AE:E0:15:F5:2C:57:67:10:DC:6D:1B:0C:C3:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7874025B588AD3D9C3A7680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d417e185-dfd2-34a6-8ffb-3db83acf4f68.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:1404:dc00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:40:25:b5:88:ad:3d:9c:3a:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=84e146e9-b963-4e38-a8d6-80eb7a5b6318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:ab:fe:5e:6b:60:9c:2f:58:2e:53:cc:fe:
                    5d:ba:d8:fc:10:b8:c4:d3:c2:ba:c6:5d:99:ee:af:
                    a2:31:65:4a:3b:d1:be:52:f2:31:1e:d9:e0:7d:0f:
                    34:0f:cb:5a:2f:89:ac:39:8a:ab:7a:d0:45:dc:f6:
                    b7:7f:06:23:23:78:d2:ec:b7:b7:a1:84:5c:97:91:
                    9e:d8:66:27:17:05:3a:f7:75:50:82:49:55:97:8e:
                    41:a3:2b:f9:34:9a:90:43:ed:4c:8f:c2:8d:d7:b9:
                    7a:8f:f7:4e:b7:dc:f6:61:b1:b6:46:04:71:1b:e4:
                    70:cf:cf:0e:2a:b4:29:25:9d:79:8d:d8:05:72:e4:
                    37:71:d4:a0:8c:70:ed:7b:91:60:e1:33:16:a2:d6:
                    e8:71:20:6c:fd:0e:26:94:76:77:47:d7:71:1a:83:
                    44:95:10:9c:e1:15:e8:06:a5:1f:c2:ce:73:91:a0:
                    80:e1:0a:1c:05:be:4f:b0:69:bb:11:11:8b:cd:73:
                    94:a1:1f:7b:d4:fb:64:17:ea:fd:98:56:4b:ed:57:
                    ac:98:f2:ec:87:93:8d:d1:8f:d9:31:8d:5c:81:79:
                    36:34:73:68:67:db:27:fc:43:e6:98:e6:b2:59:99:
                    50:67:45:1b:ed:b0:4d:5a:4d:b0:88:25:cd:6a:3e:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:67:59:6C:17:FA:AE:E0:15:F5:2C:57:67:10:DC:6D:1B:0C:C3:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d417e185-dfd2-34a6-8ffb-3db83acf4f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:dc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:34:c2:f8:f8:88:7d:b9:05:ce:f7:ba:c1:57:86:97:48:54:
         af:fc:74:2b:82:f2:a2:b2:39:2c:4f:ab:5a:3b:81:30:ce:3c:
         e9:72:30:dd:12:25:8c:a7:86:3d:50:cb:36:ec:b2:36:61:03:
         25:c5:8b:0e:8c:c3:de:1d:1e:58:a2:2e:36:99:76:31:4d:76:
         36:02:c1:98:c3:b0:38:48:fe:5e:87:80:38:52:e8:b6:e3:e4:
         c7:ab:ee:47:16:8e:28:c9:e9:da:04:55:97:8c:60:09:1c:b7:
         5b:17:69:e6:f4:2c:39:7d:8a:86:2a:34:3f:b4:8e:18:30:fa:
         eb:34:b7:c5:db:00:39:f5:01:20:ae:0e:dc:ea:00:83:ad:7e:
         96:6d:e1:b7:23:8c:ff:b7:dd:bb:46:bb:b6:84:96:22:5c:05:
         1f:a4:17:76:d0:46:a5:84:a8:07:82:e8:2e:67:3b:3e:27:7a:
         c3:71:90:9d:da:a0:d8:8b:9b:6a:63:27:81:25:16:4b:f0:e8:
         32:f8:38:5c:c3:32:2a:0d:fb:fe:e5:0e:56:19:4c:b1:5d:7d:
         5e:d1:61:2e:08:f7:e8:4f:a0:55:50:61:25:08:44:44:9f:36:
         e2:8f:d2:a4:69:ef:16:f2:b9:06:fd:79:4c:eb:40:d1:19:e9:
         1e:89:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:42:28 2026 by rpki-client