Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eddf22d0-8e20-3dc8-8e7f-df38aecd8b1a.roa
File:                     eddf22d0-8e20-3dc8-8e7f-df38aecd8b1a.roa (raw, json)
Hash identifier:          cGCYKdClMMc0XQLk0JnMK53/3hyAiCl6o5ZSuNvC2VA=
Subject key identifier:   BC:45:94:01:FE:E0:92:6B:8D:AD:BC:F9:E0:F8:6F:6F:E0:A2:69:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA793CA396BCFCBE9F42BB380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eddf22d0-8e20-3dc8-8e7f-df38aecd8b1a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     35994
IP address blocks:        2600:1409:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:ca:39:6b:cf:cb:e9:f4:2b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e063e834-4455-4082-b247-435265ca053f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:68:57:4e:a2:56:dd:43:91:6d:c6:66:9d:
                    bb:29:74:86:d1:41:dc:4f:17:2f:8a:cc:5c:ed:9b:
                    51:88:78:38:be:5d:b6:6c:4b:81:f2:0b:3f:a9:c1:
                    15:41:23:7b:c2:77:4e:a5:86:b7:43:0c:66:2f:81:
                    ae:57:4c:f7:f9:16:f9:d0:4c:d1:91:20:34:47:a0:
                    3c:2b:8d:19:67:ed:b9:2b:d3:9d:d0:55:d3:10:7b:
                    52:c5:5b:c2:b2:a7:8d:a8:03:4c:a0:36:71:73:41:
                    0e:35:bf:28:5d:46:90:a8:71:40:d2:3c:3c:61:54:
                    36:a4:ff:b8:4d:06:53:35:e2:d8:fe:18:8c:c9:7c:
                    63:75:b4:18:cd:dd:1e:33:58:7f:14:0d:8d:28:66:
                    d9:5e:24:d7:06:a7:44:d0:2e:36:2c:b9:1e:ff:73:
                    37:c5:da:13:a2:aa:71:14:0b:9f:4d:0c:08:bf:f3:
                    8b:12:ea:b1:b9:36:89:0e:5f:6a:4d:85:e6:3b:5c:
                    14:b8:a9:58:0b:38:ae:aa:32:95:ac:3e:d3:51:a8:
                    9a:94:6d:81:69:a7:23:ae:a1:20:ff:0c:bc:3c:c3:
                    fc:a2:8a:01:8e:b9:96:59:a4:3f:cc:eb:ec:97:ef:
                    a5:2d:21:34:7f:d9:10:44:e3:8b:98:37:03:38:00:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:45:94:01:FE:E0:92:6B:8D:AD:BC:F9:E0:F8:6F:6F:E0:A2:69:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eddf22d0-8e20-3dc8-8e7f-df38aecd8b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:a2:42:d3:6b:17:5d:71:8d:54:59:2c:c1:84:c8:3d:7f:
         17:c3:b6:db:d7:ab:65:fe:ce:99:b8:b8:26:b7:4a:6e:b4:88:
         34:bc:ed:5b:cb:5d:12:39:93:d4:f0:23:ce:5b:24:98:1e:94:
         50:39:74:bf:33:8f:1a:0e:58:e1:a8:69:b6:1c:25:b6:86:cc:
         5e:38:ad:4c:f5:0c:d4:ba:c0:35:fd:8b:c5:29:48:d0:49:f2:
         8d:d9:01:0d:23:c4:d2:2d:12:f9:43:ea:8c:9d:97:f0:50:6a:
         95:f2:96:3b:2c:d2:af:48:43:ee:57:45:fe:e8:d1:91:1c:c7:
         c4:5d:dd:ba:f5:09:96:ca:93:30:dd:6b:e1:30:fe:44:15:f2:
         aa:d6:58:9c:a6:c6:53:93:0a:3b:9a:14:b0:69:22:04:f3:ab:
         44:13:dc:34:e9:21:24:c3:58:45:bc:38:b6:00:06:6a:4c:ef:
         28:3f:64:7f:15:3d:c2:fb:32:45:ff:d5:05:3b:4b:fa:62:26:
         2d:8c:cf:10:2f:fc:0f:7b:b3:56:95:37:0d:67:4e:9e:1e:ed:
         a4:bb:97:77:a3:05:bd:4d:83:6d:5d:e3:00:e1:39:c3:8f:fb:
         06:54:0c:fb:f0:61:c4:6e:18:01:a0:99:0c:fd:e6:bf:01:cd:
         eb:cf:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:22:51 2026 by rpki-client