Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fbb6390-8a6f-3636-8b45-a60746838a77.roa
File:                     2fbb6390-8a6f-3636-8b45-a60746838a77.roa (raw, json)
Hash identifier:          36iR6LskSetlgEbH4XhLqgi69f7uB5rBnM9z/BWu4lU=
Subject key identifier:   ED:80:18:12:8D:F8:90:58:4C:68:50:22:23:C8:E4:3E:4C:8F:9F:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0D4271F45E09295F83D0F000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fbb6390-8a6f-3636-8b45-a60746838a77.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     9498
IP address blocks:        2600:140f:2800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:71:f4:5e:09:29:5f:83:d0:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=2e80ce27-86e1-44e1-b1fb-1b1c8926845f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:7d:0d:9b:aa:5b:87:c9:68:39:c9:b6:ea:
                    56:63:e4:7f:df:65:d4:33:08:26:34:45:bd:b0:54:
                    09:80:f4:a9:66:96:81:2c:7f:6a:1c:bf:94:6d:2b:
                    0d:ef:37:48:f3:b4:6c:a5:8e:59:6e:0a:51:81:b3:
                    ed:fe:90:69:9a:df:60:71:2e:dc:82:4a:74:d1:d0:
                    eb:42:58:a0:fb:dd:71:c6:e2:cf:93:f5:5f:fa:7d:
                    28:c0:e3:d3:d8:28:fb:d2:28:b8:c7:16:81:b7:5a:
                    54:5d:2f:55:2a:2c:2e:41:b9:70:e3:85:e7:fb:77:
                    fa:82:3f:ba:ff:43:3e:4e:33:85:d7:e5:64:6d:ee:
                    a6:0a:2a:37:78:27:71:c3:56:d4:2c:2e:a1:9d:19:
                    40:50:56:29:85:c9:65:ce:de:6b:50:ee:b9:75:42:
                    54:55:0e:c0:9c:60:51:1c:1b:3e:1c:46:69:2f:ad:
                    f0:23:e9:68:ab:b1:3b:42:7e:0a:86:b7:1c:85:e2:
                    22:61:c1:7c:7f:84:a8:1a:fb:f0:90:47:48:2e:1d:
                    b0:f5:78:c7:9c:9c:87:94:32:31:0b:7c:1d:8d:ac:
                    bd:ef:53:48:a7:80:7f:c0:6b:5a:2f:01:81:08:ac:
                    b9:32:04:70:b6:ce:4d:79:96:9a:4f:e1:39:76:a3:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:18:12:8D:F8:90:58:4C:68:50:22:23:C8:E4:3E:4C:8F:9F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fbb6390-8a6f-3636-8b45-a60746838a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:2800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:d5:5b:8c:d5:14:b6:88:e5:c3:9b:42:21:62:2f:15:fb:
         73:3b:66:04:93:ef:0a:37:22:d6:93:7f:31:c9:26:f5:43:d5:
         b3:33:61:72:db:b5:b9:40:c7:62:14:58:69:3b:3b:5b:00:bd:
         94:9b:de:4a:c1:11:97:1b:fd:c9:83:ec:00:08:ae:42:71:fb:
         b6:9f:70:54:2a:28:f4:9e:c3:00:d6:7e:67:0b:2b:8f:6d:80:
         73:5f:eb:81:02:bb:50:5a:a7:bb:cb:44:2e:f5:b7:eb:ba:ad:
         39:86:41:33:18:ee:97:ce:ae:3f:f3:ac:be:1b:82:0f:eb:1b:
         8c:15:5f:97:08:67:ac:1d:b2:a8:b6:c1:43:5c:91:16:36:22:
         05:35:22:40:5d:54:df:b2:95:57:db:14:21:e2:30:e2:e1:f1:
         67:ba:ab:3f:8b:fd:46:97:b4:db:04:87:4a:5b:21:49:a0:1f:
         14:4f:9b:98:69:4f:be:b2:ac:25:f5:f4:ed:d2:35:7b:91:18:
         8b:51:3c:8e:be:63:1b:76:46:1a:31:e1:5d:81:69:9f:f8:af:
         96:58:71:7f:39:a7:04:34:69:a9:d4:3e:83:4c:6f:a8:f7:04:
         bd:e0:4f:fd:8e:1b:7e:99:76:d7:64:b8:f2:55:96:c7:5b:c6:
         79:20:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:55:24 2026 by rpki-client