Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/211195b9-1cbe-383e-a394-fcae097d8649.roa
File:                     211195b9-1cbe-383e-a394-fcae097d8649.roa (raw, json)
Hash identifier:          Xsq+yZs6MoCiI//ac+BalYNHLVNJw7kVQy9vo/n3M8c=
Subject key identifier:   A8:B6:0A:6B:94:59:07:CA:42:F8:F2:FD:DD:74:CE:36:38:6E:19:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0D427593E807E7F6C6B27680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/211195b9-1cbe-383e-a394-fcae097d8649.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     8966
IP address blocks:        2600:1417:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:75:93:e8:07:e7:f6:c6:b2:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=f0cb2747-5fa5-4bf1-882e-510963dfd969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:e3:c3:f8:c8:8f:01:3f:c0:05:72:76:93:
                    99:61:35:c5:13:2d:72:ad:9f:12:49:12:3b:57:7f:
                    fb:d8:25:71:29:e2:89:ca:2b:81:9d:5f:98:aa:f1:
                    77:1b:5b:b5:08:45:c0:28:2e:ac:91:9a:21:f3:45:
                    41:67:d6:bb:ad:ed:d8:5c:97:07:01:86:db:24:c1:
                    f3:6a:f6:c0:15:b8:39:c4:b1:5e:7f:50:3b:3a:a5:
                    62:ed:88:a4:c0:0e:43:b2:3b:f1:f3:42:30:5e:b8:
                    b6:2b:42:5c:f0:b0:56:7f:c8:9f:3f:d4:9c:4a:1c:
                    c9:30:5b:47:bc:37:a5:e8:e4:f0:e0:de:dc:08:44:
                    64:e5:0b:20:75:6b:54:e0:0a:7c:6d:41:04:a2:71:
                    2c:17:ff:32:ba:97:c9:2d:32:f4:9c:b8:6f:dd:b7:
                    94:b6:b1:dc:4b:49:18:76:9a:a4:4e:6e:86:58:62:
                    29:5e:e7:3d:20:16:40:29:c5:fd:99:eb:3d:16:ac:
                    39:ad:09:f9:19:06:29:e9:02:cf:70:1f:e4:00:f5:
                    a3:a8:28:c3:07:ff:90:1f:f9:95:a4:cb:33:dc:de:
                    e8:88:8e:15:82:1d:1a:c5:79:cf:8a:6e:f7:82:94:
                    53:10:09:14:4d:53:08:cd:d7:34:34:59:5b:c0:88:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:0A:6B:94:59:07:CA:42:F8:F2:FD:DD:74:CE:36:38:6E:19:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/211195b9-1cbe-383e-a394-fcae097d8649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:85:4f:e0:f4:89:69:50:ed:06:ce:62:1a:b2:77:cd:8c:3b:
         28:74:b3:09:83:ae:24:8f:ce:70:ee:e5:6e:df:89:92:a1:13:
         df:72:90:f6:ae:2b:77:fe:ea:92:26:6d:97:e4:c5:ec:2c:b2:
         fd:a1:9c:6b:d9:dd:f6:bc:c3:e5:14:3e:a7:70:fb:1e:3a:f2:
         37:b5:0a:bf:90:e0:df:1b:07:56:13:2d:e7:a6:f3:6d:32:a5:
         50:cc:16:99:7b:ea:4e:03:94:7f:ff:ec:4f:19:56:49:ef:d7:
         fb:61:3d:aa:53:8c:27:20:2d:35:ba:bb:01:3a:9c:69:f4:fa:
         8a:cb:22:86:fe:ce:f5:05:df:a7:4f:aa:13:a1:0a:32:93:62:
         fb:3e:a5:f7:43:de:03:5a:d8:6d:c5:22:c7:e9:23:c1:a0:19:
         b0:00:b5:51:b5:52:2a:70:74:0e:b1:9a:c0:99:b3:4b:5d:a7:
         73:38:36:6b:77:69:f4:ae:90:5f:0e:ee:35:4d:ac:92:27:4f:
         81:ef:d7:c6:4f:39:0c:3f:68:64:a3:fc:8e:3c:f2:85:ed:23:
         d0:b6:e8:57:93:31:08:11:03:c0:53:c1:3d:c1:f2:f4:e7:7f:
         d6:5e:a4:6b:e7:d2:7b:30:2b:dd:d4:fe:b1:65:81:1e:c6:e4:
         c9:87:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:04:05 2026 by rpki-client