Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4141e9-4043-3db5-8690-5f4b32caab0f.roa
File:                     0f4141e9-4043-3db5-8690-5f4b32caab0f.roa (raw, json)
Hash identifier:          VIKzcdH5vM7GYNPMPWo/Nf3fzuLSllJoZgav3cjuaWI=
Subject key identifier:   0E:F0:0F:3F:03:15:FE:94:A3:EA:BD:1E:80:ED:80:62:10:CB:DD:E9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F89A860B12547247669019000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4141e9-4043-3db5-8690-5f4b32caab0f.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     35994
IP address blocks:        2600:1404:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:60:b1:25:47:24:76:69:01:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=8043d02d-f25c-497b-9e6e-e7d10fe66466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:3c:52:73:92:ed:0d:71:d6:8f:07:a6:4e:
                    86:e1:4a:77:90:92:51:4a:31:6f:a9:fb:b3:5b:17:
                    6a:f2:09:ed:96:7c:25:63:3e:56:0c:04:5a:4d:b8:
                    b7:d6:a8:d8:64:62:c6:d1:54:6a:0f:63:81:5a:d4:
                    1c:0d:77:a3:c8:42:8d:e5:87:ee:f2:4b:62:8b:93:
                    78:c2:df:d8:e8:9e:c0:53:ff:c8:3a:49:4a:97:22:
                    7c:cf:35:4f:44:83:3f:3d:9c:46:6a:aa:30:6c:db:
                    b6:a8:c0:5c:94:55:31:f5:20:47:45:8a:3e:9d:31:
                    ac:28:49:8a:81:0c:f9:5a:af:87:71:74:91:76:06:
                    da:b0:9d:b3:43:04:12:fe:16:da:56:c0:e8:d5:6a:
                    e7:14:45:06:e9:ae:f5:e3:1d:98:32:ab:88:ca:0b:
                    c6:77:dd:65:87:e8:98:cc:75:d1:29:9e:72:56:5c:
                    f4:12:04:9c:9e:0c:43:b2:20:8c:d1:8c:ec:c1:6b:
                    9b:0f:1a:7e:be:e2:ce:d2:f0:0c:5f:6f:79:c5:70:
                    c6:4f:61:54:d2:c6:a6:d4:58:65:7e:2f:45:cd:75:
                    22:0f:cc:60:ec:9d:2c:c8:df:9e:27:aa:f9:30:0d:
                    9e:11:6e:7b:09:dd:ef:77:c5:8b:32:67:51:5e:9f:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F0:0F:3F:03:15:FE:94:A3:EA:BD:1E:80:ED:80:62:10:CB:DD:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4141e9-4043-3db5-8690-5f4b32caab0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:41:eb:32:e6:94:f4:6f:de:ad:66:91:01:57:7a:5e:0d:4a:
         51:19:57:7a:04:ae:36:43:18:2b:bd:16:0d:00:95:2d:35:2d:
         ce:94:bf:d6:3b:67:08:37:1f:b4:a2:9e:0d:14:22:da:42:1c:
         07:1b:a0:c7:76:f9:8b:9f:86:cc:be:cc:13:ea:28:98:f9:e4:
         00:0e:26:6e:3c:4a:ab:f5:81:b8:58:c0:84:fb:18:10:8d:59:
         20:bc:d1:71:86:76:df:33:95:ea:14:4a:8f:54:a8:da:1c:67:
         55:22:39:33:89:8e:b0:c8:03:7d:f8:f3:02:1c:2e:a8:29:07:
         bd:be:ec:f4:57:af:39:06:c2:b4:6e:5d:16:cd:0c:79:77:69:
         b1:07:c5:13:b2:72:e0:88:de:fe:13:ba:36:1a:f2:ce:34:cb:
         a7:7b:16:60:ed:ab:1d:c9:ce:18:a0:81:be:cb:0e:a1:17:c7:
         b6:ba:b6:39:00:c4:8a:cd:e0:03:22:6b:9d:f9:4c:74:0f:f1:
         95:fd:5d:59:c6:ff:3f:b8:5f:21:0a:d2:ee:4b:fd:19:a6:24:
         0a:6e:b9:6f:db:f5:fe:36:9f:16:b6:0c:d4:ef:9f:5c:a6:2e:
         b1:b3:de:12:fc:ac:f1:72:9e:27:b7:e3:b1:18:57:71:1c:3e:
         4d:52:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:57:48 2026 by rpki-client