Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/016e19c0-45c1-359c-8039-f1c5c41ea4c2.roa
File:                     016e19c0-45c1-359c-8039-f1c5c41ea4c2.roa (raw, json)
Hash identifier:          3AOxc24tYFrGBfLbWCryw9NrrUcbYW3vDoTOsuJfvZY=
Subject key identifier:   8F:F6:09:5D:BF:A3:BF:30:71:5D:9B:DA:FF:79:BB:20:05:9F:28:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7944948875B2A4660CBA740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/016e19c0-45c1-359c-8039-f1c5c41ea4c2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9498
IP address blocks:        2600:1417:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:49:48:87:5b:2a:46:60:cb:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=577e34f1-7626-4eb0-99f7-d8c4818e106d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:cc:19:08:be:7f:da:9b:d7:e0:1e:35:20:
                    39:ef:d2:5c:c3:4d:6f:74:49:95:07:1e:d4:f3:72:
                    14:bb:73:00:d5:f9:91:ed:f5:74:d8:05:8e:14:51:
                    f2:ac:cc:04:5a:a3:44:d8:f3:66:b0:ce:4d:70:cb:
                    df:cb:41:5a:c7:5e:c2:6e:a7:b8:58:d0:63:28:c4:
                    d5:9a:74:7e:d5:9e:b1:de:a4:d5:49:fd:ec:6a:0b:
                    99:d1:eb:ce:89:a8:dc:63:24:c4:66:de:ad:2e:7f:
                    a1:03:11:ad:d4:0c:ee:af:1d:da:46:e3:d2:46:0a:
                    00:22:72:a8:85:07:da:02:fe:4a:4a:ea:f1:db:47:
                    c8:0c:d2:08:37:a2:ae:b1:f7:a8:da:75:4d:e6:7b:
                    60:b1:2a:bd:f1:1c:5b:06:40:6a:ee:77:0f:07:2d:
                    c5:d6:74:8e:de:ed:b2:2d:29:86:50:67:fb:68:24:
                    9b:03:28:93:ec:c7:4e:7c:a0:d1:c5:28:a5:e3:72:
                    e7:3e:c8:63:52:45:22:96:20:d0:ab:38:71:b5:9c:
                    32:f3:69:a8:ef:2a:06:48:fa:58:9a:2f:88:76:41:
                    86:e3:93:3c:84:c0:dc:2e:df:f8:b3:e9:88:4f:ec:
                    53:fc:fb:0c:bf:78:3e:69:84:e8:da:b9:6f:2a:97:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:09:5D:BF:A3:BF:30:71:5D:9B:DA:FF:79:BB:20:05:9F:28:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/016e19c0-45c1-359c-8039-f1c5c41ea4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:48:96:b1:79:e7:a6:bd:87:fa:41:ee:d6:af:7e:72:df:03:
         e6:69:dc:41:73:fb:be:81:d1:1c:e1:f0:4b:dd:f2:d1:92:7a:
         91:1d:ab:d6:4c:fe:13:83:1e:2c:f8:5d:e2:27:48:23:fc:0b:
         1c:e0:af:ee:c2:51:96:1d:e5:2d:04:6d:da:d6:71:66:f9:0a:
         10:e0:c5:54:ef:1c:7f:91:08:ef:df:45:c8:5a:62:b4:39:db:
         6a:22:04:5f:a4:a9:d7:ef:24:c9:7f:48:b9:02:e3:37:e8:3f:
         ca:91:58:54:16:0f:f8:1a:34:34:97:55:78:12:45:a3:85:bf:
         ab:11:a5:c3:f8:19:86:b3:f4:da:36:bb:df:d0:ad:2a:20:c1:
         82:57:bb:36:77:2c:31:1f:ab:d8:8a:fd:37:94:e4:92:7a:64:
         d0:7c:df:c6:52:68:d6:b5:12:0e:82:ff:13:53:f9:42:61:7e:
         60:78:6e:fc:2a:13:5c:70:f6:c0:d4:0c:a8:dd:a5:0a:39:b4:
         03:7a:bc:40:f2:5c:cc:a7:7d:c0:6f:4d:24:66:e2:ff:92:ce:
         e7:ec:e3:b4:58:05:eb:cf:97:85:da:58:e0:b3:5c:d5:72:e0:
         6b:a4:12:d1:26:53:31:f3:0b:ce:22:e2:1b:7b:11:db:59:0d:
         23:1b:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:48 2026 by rpki-client