Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc7562e6-697b-3e01-ab09-6ffa727fd232.roa
File:                     dc7562e6-697b-3e01-ab09-6ffa727fd232.roa (raw, json)
Hash identifier:          dsRbDJVzhvfl2bBftI5W500f2UBMt5i1JRM2nu2CXhQ=
Subject key identifier:   9E:E3:70:F3:44:A8:B6:AE:08:65:4F:33:C6:5E:38:EF:C2:4A:BB:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA794D80EA2753E8D9E06A380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc7562e6-697b-3e01-ab09-6ffa727fd232.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     35204
IP address blocks:        2600:1419:7c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:d8:0e:a2:75:3e:8d:9e:06:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c1808ef6-7f67-462e-84fd-56e141ac392a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:c8:cb:ce:85:e8:a8:1b:67:79:5a:78:a9:
                    b6:8b:3c:3f:49:90:d3:d5:10:96:3e:25:1a:da:d6:
                    57:07:45:7e:05:9a:89:2f:04:10:f8:1a:66:0a:64:
                    f2:d3:73:7c:6a:5d:39:94:59:ec:c4:1b:de:68:a9:
                    59:90:d9:a8:6a:34:44:7d:a2:5b:f3:b1:41:48:e5:
                    d1:c2:3f:78:5e:e3:74:84:06:99:16:8d:97:d7:e7:
                    de:30:88:47:39:a1:39:7f:4a:1a:9b:d1:07:99:25:
                    0b:bd:75:29:c2:7d:d3:3b:d6:8b:ba:4a:35:72:de:
                    1b:b5:b0:90:e3:06:b6:b5:f3:c6:c6:49:61:05:cb:
                    a4:93:39:40:de:40:66:ed:d8:b4:97:d8:36:af:a4:
                    56:19:b0:6b:9c:b6:fe:46:b6:b3:00:cb:b1:14:1b:
                    74:e2:86:86:7a:15:6e:32:70:9f:91:b8:7e:1c:56:
                    bf:1f:ee:56:b0:f5:d6:03:0f:2b:24:a6:0a:9f:6b:
                    9e:8a:34:7b:4b:fe:e8:07:6c:3a:1b:98:a8:a9:c2:
                    f5:a3:93:26:e8:db:e4:64:66:36:32:30:b2:b4:a8:
                    68:a4:c6:b2:b0:4f:d8:11:13:c6:80:42:b0:36:f1:
                    40:58:1b:67:89:4c:b0:89:bc:85:07:43:89:fb:1b:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:70:F3:44:A8:B6:AE:08:65:4F:33:C6:5E:38:EF:C2:4A:BB:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc7562e6-697b-3e01-ab09-6ffa727fd232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:7c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e7:b8:b0:92:c7:da:0a:98:3a:0e:d1:cf:c3:4c:d6:0b:12:
         8b:d8:5b:99:8f:bc:02:ac:a2:4f:76:4e:5f:12:76:a2:e7:6b:
         d4:29:0f:35:53:58:78:7f:03:c2:5b:e7:35:bf:07:27:e8:44:
         bd:94:50:1e:05:c5:82:df:38:3d:36:b0:14:48:1c:02:0b:2a:
         48:4a:f9:c8:3b:4b:98:f7:61:a4:60:b7:24:22:97:93:08:cf:
         be:5e:35:7c:34:82:3f:55:6c:ca:1c:54:27:a6:fc:74:00:d0:
         42:5e:f9:10:4f:0a:95:1e:9a:d0:38:7e:82:3d:fc:d9:18:52:
         f1:98:a6:f6:f9:f9:10:cd:12:80:ba:1f:87:cf:08:5b:b8:35:
         1f:a2:8a:3a:3b:3f:34:f1:53:26:36:9f:14:2a:5b:2a:d6:bc:
         91:6f:2d:2a:45:ff:1c:4d:be:58:06:40:8a:a9:81:ed:c6:5e:
         3b:94:2a:58:bb:bf:4e:75:d8:e8:8e:cd:dd:25:1c:00:33:23:
         a6:b4:4a:97:41:7f:64:f1:4c:bc:1d:13:4b:5b:00:59:d9:8c:
         fd:c1:3d:f2:d9:96:29:ab:01:26:92:2c:0e:bb:ef:3c:cd:9b:
         da:b4:be:fd:70:6d:99:27:2b:7d:70:cc:f6:fb:72:ed:0b:2c:
         2e:61:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:42:02 2026 by rpki-client