Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa
File:                     dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa (raw, json)
Hash identifier:          2sXOxn/H2yBsTmtiE7jpZehhfAP4+Zk8omH8XWzs+Ac=
Subject key identifier:   71:10:BC:D7:80:62:28:85:EC:00:69:30:20:86:3A:13:D4:36:60:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79441265448BB320F40ED00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     55836
IP address blocks:        2600:140f:d800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:41:26:54:48:bb:32:0f:40:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bcc36957-6475-4fae-a242-18ede29c358d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:07:5e:f4:57:8f:0f:c3:79:2e:4c:ca:36:
                    32:fe:79:81:b2:ec:26:00:aa:d9:d7:f2:8d:48:e5:
                    c7:d8:a5:84:23:8c:71:46:f2:34:ad:73:3a:c4:1f:
                    29:a8:46:d0:7b:c1:b6:bf:fb:47:a2:76:bd:ac:d4:
                    24:f1:12:8e:78:49:d7:d6:cf:aa:0e:6c:2c:69:02:
                    15:a5:2a:ca:83:1f:1e:1f:d4:78:f7:59:03:c4:b5:
                    46:55:59:da:28:48:e4:b2:c4:7c:25:b8:1a:eb:b0:
                    8a:aa:3f:44:71:8d:ba:a3:97:10:e8:de:dc:c3:b0:
                    70:c6:4e:ab:b0:6c:99:3a:35:28:5b:27:b8:6d:6d:
                    b2:99:55:a9:42:58:b9:39:55:3f:2a:e7:9e:12:60:
                    c3:29:84:15:0b:b6:b8:bc:c3:5b:a3:76:6a:90:4f:
                    39:0e:89:92:32:3d:c0:75:fd:af:a5:2b:4a:af:11:
                    ec:24:e3:a2:57:fb:f0:b6:ac:99:56:8e:f4:9d:81:
                    50:53:9f:38:e5:e3:ab:f1:0a:e5:07:c9:80:14:b5:
                    f2:20:bd:07:87:38:ba:1d:ca:23:ec:53:38:57:1f:
                    8f:40:8f:ab:06:14:80:c0:6b:79:50:13:8a:38:16:
                    08:31:d5:d4:a4:5c:26:64:8c:7a:73:97:41:c1:1b:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:10:BC:D7:80:62:28:85:EC:00:69:30:20:86:3A:13:D4:36:60:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:d800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7a:b0:65:d2:14:c2:84:55:72:0d:da:68:06:7f:1e:d8:30:
         bf:0b:6e:8a:f6:fa:08:d2:ab:a0:0f:c1:20:7a:2e:81:53:8e:
         dd:79:ad:03:05:e9:4f:e2:51:44:fe:a4:23:68:1d:96:af:d5:
         27:26:bb:de:8c:35:27:21:32:55:53:99:aa:53:7d:6e:9d:25:
         93:16:87:c1:ea:4f:e8:b5:3f:60:45:6a:8f:ef:1d:21:d2:27:
         4d:27:93:c3:6a:58:82:1b:ef:e1:2c:46:20:0d:e8:43:6b:a5:
         b6:9f:7f:7e:a9:92:16:3a:df:75:c2:c0:91:fe:cc:3a:c5:93:
         07:9d:1b:94:7c:9e:0e:1a:5d:3e:69:45:bb:1e:12:54:07:a0:
         24:25:a5:a6:5a:d0:c5:f1:88:92:36:f0:80:e8:53:1a:f9:35:
         db:5b:da:c0:5c:42:38:d9:d1:83:5a:6e:d0:10:61:ce:29:92:
         bb:67:a5:de:65:8a:b6:6a:96:38:e2:51:29:57:09:fa:de:4e:
         d0:21:42:33:90:87:58:85:7f:7d:d9:18:bb:31:7f:78:78:ad:
         2f:5a:53:a2:07:b2:8e:8c:d9:c1:ca:07:19:fd:36:3f:85:2f:
         4f:2f:2b:99:1e:7a:5d:80:51:06:55:f9:d5:d1:99:4f:59:32:
         91:e2:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:46:56 2026 by rpki-client