Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa
File:                     0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa (raw, json)
Hash identifier:          aOUvsNbll8qcemTgTyAYnTjMsxs/k2Cw0iOiS+4Uxj8=
Subject key identifier:   CB:FA:85:1D:C9:D0:4A:B3:93:12:99:A8:4D:9C:40:D0:F2:EB:4E:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C55DD19C8FC185FDD7180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     24319
IP address blocks:        2600:1417:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:55:dd:19:c8:fc:18:5f:dd:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=711950a3-90e2-4cf9-a6e6-df57a97e61e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:16:5c:02:77:15:c2:34:91:a2:52:4e:87:
                    e0:2e:dc:f5:5b:95:91:70:2f:1d:19:53:71:3a:b4:
                    72:c3:b3:38:a1:5f:08:e8:eb:ea:ad:71:9b:3e:d8:
                    60:4e:56:24:45:f0:a6:05:8a:dd:66:cf:6e:18:0e:
                    aa:7e:e9:fe:b1:06:5c:7d:a7:f1:1f:aa:5d:bc:05:
                    7d:03:05:61:a7:bb:43:73:99:25:73:4f:14:02:8b:
                    a3:7f:86:28:48:23:f4:fc:49:c3:5c:a4:fb:d1:d0:
                    fd:77:8a:b3:b1:21:b0:7e:08:7d:1a:4d:d5:a9:49:
                    b0:ac:b0:58:d8:c7:27:c9:ae:7c:4b:88:e2:e7:29:
                    1c:f6:3f:81:5c:56:4b:9f:31:a2:9d:32:52:31:b7:
                    f5:7e:bd:77:f1:87:68:7e:c9:d1:d2:41:80:0b:99:
                    c3:be:66:e6:59:ea:7a:a4:74:8e:1f:7c:0f:e2:2a:
                    d0:62:3a:f5:5a:a4:a5:d8:b3:ea:25:d5:42:c2:04:
                    5d:2f:73:19:e6:2a:8b:39:a8:46:19:b2:10:45:31:
                    ec:36:13:25:99:74:2a:f9:55:5f:d1:bc:2d:70:7d:
                    d1:7b:0a:38:28:e1:45:f5:0c:29:ba:ca:d7:17:76:
                    74:10:19:bb:e3:41:68:e4:8d:f6:43:3c:f4:fb:70:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FA:85:1D:C9:D0:4A:B3:93:12:99:A8:4D:9C:40:D0:F2:EB:4E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:c6:a1:27:a2:50:c8:90:20:3d:35:0a:b5:f9:89:1b:cd:
         93:b1:b0:38:4b:a7:0b:59:52:cb:1c:73:ca:77:49:e4:50:cc:
         81:6c:ae:48:ce:30:c7:53:07:89:8b:87:9c:64:75:23:9c:d7:
         57:17:f8:f1:5d:30:71:bd:d6:bf:49:7e:00:31:57:77:fd:dd:
         99:7b:8a:bb:e9:dc:f1:56:30:22:61:28:40:75:93:17:e2:ca:
         2f:18:07:c1:58:71:69:d3:61:ee:91:55:39:a9:eb:ae:c9:09:
         b6:88:3a:82:81:a5:7e:9c:58:44:7e:bf:da:40:3d:f4:b9:2b:
         ac:46:a7:87:ae:af:04:b3:5b:80:08:0e:8c:86:a9:f6:55:25:
         a2:4c:04:59:f9:1a:3d:6f:9f:8a:cc:63:af:52:52:46:ca:8b:
         5c:f2:66:36:10:77:2f:d5:8e:c3:e0:d1:a9:e5:15:b3:a8:9a:
         78:65:b7:91:cc:18:17:52:4b:51:45:55:8f:4f:e9:d0:3e:c0:
         db:a6:8b:14:79:9c:af:d8:3a:b1:10:b6:92:a4:56:86:33:c2:
         3e:a2:5d:8f:84:24:45:0e:a3:ff:be:21:8b:0b:59:64:93:46:
         8d:49:28:fa:80:3c:24:ae:0a:d5:9d:ba:74:3f:1c:c6:21:cb:
         c8:f0:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:49:13 2026 by rpki-client