Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/118ccd40-d75e-3bdc-8a25-42505086ee45.roa
File:                     118ccd40-d75e-3bdc-8a25-42505086ee45.roa (raw, json)
Hash identifier:          dtemSfMF/++A/1qnqmn4N4RomX4nDwgEGe1jpDA0fn8=
Subject key identifier:   9C:85:4D:01:80:D2:39:67:73:C3:E9:B3:BF:0F:EA:BE:7E:7E:03:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE150942A564512BD6D490D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/118ccd40-d75e-3bdc-8a25-42505086ee45.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1409:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:94:2a:56:45:12:bd:6d:49:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=cd9c8c6e-0b75-4822-b59d-4fadbdc12cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:fb:94:8d:a9:a4:73:13:83:73:c4:2f:1d:
                    dc:d2:7b:b0:a5:b5:c5:26:dc:d1:89:0a:92:94:50:
                    44:1d:91:55:47:71:ba:8e:c7:e7:e7:28:dc:57:fa:
                    76:85:80:3f:94:47:1f:f5:21:89:18:29:c2:59:1b:
                    2d:8e:e4:2b:67:fc:32:2d:88:10:ea:5d:b2:a3:28:
                    ce:38:de:4b:15:ed:ac:19:7c:cf:10:dd:78:ee:11:
                    a6:32:9a:63:b1:8b:00:e4:9a:ee:92:50:74:f1:b1:
                    68:03:63:3f:ae:46:b1:b0:71:99:0d:61:c0:a6:95:
                    95:d4:1c:96:d7:72:33:28:87:57:55:d8:b2:92:d8:
                    28:65:5f:58:c6:11:d9:35:83:30:50:29:7d:e1:a1:
                    56:45:42:da:6b:3c:9f:21:35:01:4e:1e:44:d5:bf:
                    3b:04:dc:08:ff:fa:d7:e3:99:de:5f:15:2a:2b:6e:
                    3f:04:67:10:a9:c0:52:ad:18:ec:55:2c:51:41:b9:
                    cf:9c:6a:22:b1:8c:d8:4d:0a:71:35:c2:91:6a:9f:
                    ef:42:da:15:8e:6d:72:58:b1:cd:48:09:eb:ea:84:
                    9d:2a:01:19:99:37:19:74:89:62:cd:0e:46:c3:ce:
                    06:2c:92:e0:66:b6:25:9c:3f:24:7a:0f:d1:14:96:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:4D:01:80:D2:39:67:73:C3:E9:B3:BF:0F:EA:BE:7E:7E:03:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/118ccd40-d75e-3bdc-8a25-42505086ee45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:9800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:66:73:a3:07:8b:a7:60:d2:b4:86:c2:12:ad:15:98:4e:
         f8:2d:ab:59:fe:ed:df:ba:19:20:db:90:9a:2d:c0:26:ae:45:
         a1:f8:e3:22:93:89:c4:5f:2c:f3:29:97:29:b9:7e:c3:a7:4e:
         81:77:36:a0:87:12:e8:06:f0:27:81:af:24:85:97:0e:41:2f:
         0c:01:44:51:71:07:36:ea:5d:36:30:a6:bd:5f:c2:39:e2:d8:
         36:9f:2c:30:45:53:c8:72:67:3c:24:a7:3e:0b:b2:60:59:27:
         87:fa:21:f8:8f:78:da:f7:77:ef:a0:3d:0f:5e:e5:4c:ac:a5:
         e7:07:ad:ee:ba:42:4b:63:88:7b:1e:30:6e:22:90:03:24:02:
         32:69:26:cf:f0:68:cd:68:09:c5:66:fc:46:e4:03:95:7e:bd:
         77:b4:d6:08:1d:2d:fb:76:a9:16:a8:7f:7c:82:af:a4:50:fe:
         d9:c3:40:a2:2e:1a:a7:14:71:8f:ca:8c:e4:2c:d9:1a:cb:4a:
         eb:89:38:06:71:e1:ed:72:63:05:36:5a:0c:43:37:72:4f:93:
         e9:dd:92:a3:39:f8:49:48:23:fd:4a:42:53:4c:f8:74:67:76:
         f8:a0:65:b5:ec:93:3e:f9:95:bc:95:0a:59:12:aa:61:96:f2:
         1a:a5:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:12:09 2026 by rpki-client