Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/224ef5c4-2033-340e-ba70-1c5648d880ac.roa
File:                     224ef5c4-2033-340e-ba70-1c5648d880ac.roa (raw, json)
Hash identifier:          YQJ2RVSvNqC9EQbJOzinRak2LEsft9E4RvIaE9xG+BE=
Subject key identifier:   AC:21:3A:78:F4:29:72:0E:00:18:E1:E7:FF:EA:75:DC:99:AF:BF:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4AEF31750A20872F8D403300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/224ef5c4-2033-340e-ba70-1c5648d880ac.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     20940
IP address blocks:        2600:140f:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:31:75:0a:20:87:2f:8d:40:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=c46f9b57-e34c-45ce-9f55-ceb8d147a902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:88:da:eb:b9:a8:c2:01:9b:ee:95:e9:af:
                    4f:dc:0c:91:80:49:67:fc:a9:1d:0d:a6:c1:63:cb:
                    41:77:bc:ec:63:62:05:7c:bc:68:42:1e:1c:02:1b:
                    72:90:64:ed:fb:b8:b4:c4:16:d7:ff:6e:0c:3e:ae:
                    24:68:6a:b1:59:ff:02:5b:a8:bf:ea:5f:78:1f:b8:
                    ef:cf:53:3e:9f:ac:f3:c9:41:84:63:12:2d:9b:4d:
                    e0:b7:49:fa:4d:06:d9:8f:41:64:9a:5d:01:a0:4a:
                    00:7c:8a:f7:a9:15:92:57:ef:2f:36:a5:13:5d:da:
                    5e:6c:70:e3:f2:d3:67:9a:92:32:36:02:88:62:a9:
                    f6:15:cf:2f:2d:94:d0:2c:56:cb:16:0a:43:a6:5d:
                    94:ab:47:9a:52:a5:97:1d:5f:02:a3:c9:97:fe:12:
                    90:75:79:a8:54:8c:4c:46:e5:a9:b8:bb:e5:18:ca:
                    68:f5:f6:52:18:13:be:f8:7c:ed:68:41:24:21:ee:
                    81:74:3f:c5:4c:5f:ac:66:fd:11:2c:35:8e:0f:ad:
                    18:60:8e:3b:36:83:86:49:59:3a:54:5e:72:bf:58:
                    d1:ba:36:1a:ea:ef:fe:82:70:0e:fb:7e:3b:76:ef:
                    c3:63:fd:bb:f0:01:ba:d9:e2:f3:31:98:5b:0d:22:
                    9e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:21:3A:78:F4:29:72:0E:00:18:E1:E7:FF:EA:75:DC:99:AF:BF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/224ef5c4-2033-340e-ba70-1c5648d880ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:1d:e0:2f:98:8c:f5:a0:39:62:8d:ab:31:88:2c:73:d5:
         4c:97:61:3a:b7:03:3c:62:e9:d5:bd:4d:08:af:75:e3:f8:ba:
         21:34:2f:73:78:3b:f8:05:88:5c:0f:d4:94:0e:7d:02:f0:03:
         fb:f5:5a:7e:f2:b7:f9:f1:8d:3c:0d:28:df:b5:be:cb:f7:16:
         9b:1a:8d:c7:09:97:27:d8:a7:e4:c2:13:f8:29:b1:97:6e:6c:
         10:26:b9:7c:90:ee:98:66:5f:91:c4:a6:87:1f:a2:20:e2:b5:
         24:1a:85:9b:0d:3c:5f:72:4f:da:be:c0:65:e1:e9:8d:64:db:
         ae:3d:95:dc:81:b2:7d:9c:fc:47:ed:e9:ed:47:66:20:b5:a4:
         a4:b3:e1:01:11:43:e9:51:ac:0b:95:1e:14:58:9a:ca:be:86:
         ed:7b:fe:4f:9c:bb:c5:7d:6f:ce:ae:c8:19:30:6e:b1:89:23:
         95:05:83:bd:89:d6:ca:b4:bf:90:6c:44:12:b9:6a:72:73:36:
         3c:e5:c3:7e:0c:f1:10:51:fe:2d:98:8c:53:c8:a6:6e:10:17:
         3d:94:21:63:2d:80:4f:ad:e1:64:2d:06:b7:60:51:c1:71:3c:
         6e:4a:8b:93:90:41:b7:10:bb:a6:80:75:94:0b:82:d6:27:dd:
         11:9d:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:02 2026 by rpki-client