Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee9717dc-d6b3-3346-aab9-1309c65eecee.roa
File:                     ee9717dc-d6b3-3346-aab9-1309c65eecee.roa (raw, json)
Hash identifier:          GyuZZx+E3lmMf8rsmFjH9uj/QW2ynG3qjS8XonO7ncQ=
Subject key identifier:   72:F0:83:2C:3A:9F:2A:AB:F1:66:B7:85:10:7A:3E:8D:5D:98:3D:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78F84EEF25388ADAEA01F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee9717dc-d6b3-3346-aab9-1309c65eecee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:1406:6400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:84:ee:f2:53:88:ad:ae:a0:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5f76c970-0c2c-426d-a44c-494f29923b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:f6:a0:a0:a2:53:a2:d1:41:c2:f7:9b:21:
                    cd:21:f2:48:fa:5c:37:89:75:be:f1:c9:7c:a4:ae:
                    53:59:bd:a4:a0:28:bd:c9:e1:02:48:10:07:ef:ea:
                    56:29:51:ae:5c:bf:92:4c:a9:63:11:78:16:8f:5b:
                    cf:29:f8:80:c2:e8:49:10:26:9d:ab:33:56:39:57:
                    64:0d:30:ff:9b:21:05:2d:5c:75:3c:b5:66:c7:90:
                    94:ec:17:da:06:4f:c5:a2:8a:85:99:0d:de:79:22:
                    ef:e8:5d:48:c4:14:e5:4a:7c:91:2e:11:65:49:d7:
                    64:38:7a:50:39:a2:b1:0b:86:08:e8:0f:f1:9e:fe:
                    79:ad:0b:c8:40:3d:46:30:02:ad:3b:c5:ca:63:92:
                    62:ff:ee:4a:65:aa:e4:d4:64:46:53:81:87:9e:29:
                    f5:fd:30:83:32:91:68:41:08:a3:cf:b1:d9:e0:db:
                    19:a8:70:25:da:12:54:de:4b:05:29:c2:b2:ff:a5:
                    e4:73:4f:8c:88:7a:4a:97:76:dd:78:41:85:84:c7:
                    e9:08:c3:15:77:87:25:dc:62:77:b7:06:10:a1:43:
                    d3:05:1f:71:fa:c0:35:9d:b1:2b:17:30:9e:39:53:
                    7c:34:fd:db:d7:0e:9a:55:8c:98:7f:d7:ee:2f:07:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:83:2C:3A:9F:2A:AB:F1:66:B7:85:10:7A:3E:8D:5D:98:3D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee9717dc-d6b3-3346-aab9-1309c65eecee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:6400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:58:27:04:d2:ba:67:53:d3:eb:ac:d0:eb:eb:34:f3:e5:
         97:37:48:a0:28:5d:c0:1b:9b:f1:18:37:63:30:bf:9b:f3:1c:
         be:e5:36:73:83:c3:11:c3:a3:f7:b9:6d:e7:d1:aa:a9:21:7f:
         81:4a:ec:cb:40:24:a3:df:0e:cc:8a:b1:ba:ff:72:21:4b:2b:
         01:7d:10:0b:c4:30:2a:7b:8a:a9:4b:7d:8c:75:f4:aa:a7:94:
         1e:63:05:40:e3:82:b4:c0:73:e4:36:88:1d:20:8d:af:bc:1d:
         09:30:d7:da:10:78:6f:23:db:f4:36:c2:99:4a:e6:f0:5e:4c:
         16:da:13:d0:ee:a5:9b:c7:b4:da:57:43:4c:0d:79:3d:d3:92:
         c1:9f:ac:71:b5:ef:92:0a:a7:01:13:22:2d:25:88:14:07:aa:
         8f:14:b9:9a:60:42:92:25:f6:62:f8:fc:d7:a7:6e:7d:fe:c3:
         f8:19:3f:5a:ff:f7:03:3f:b1:4b:33:49:fc:31:67:e6:c4:7f:
         f1:73:bb:c2:84:71:9d:3a:d0:d2:b6:45:8e:7e:87:91:5a:48:
         f8:d7:04:93:60:84:13:f2:2e:a2:9f:42:b9:31:21:8a:80:98:
         19:37:4d:a9:02:22:eb:b2:87:ca:e2:74:62:e8:e2:6f:0b:87:
         cb:0d:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:27:34 2026 by rpki-client