Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34257086-3372-3a60-8e2b-cb8087e9b873.roa
File:                     34257086-3372-3a60-8e2b-cb8087e9b873.roa (raw, json)
Hash identifier:          Nj6dYRWfgTy1daEfGrfyK5OxjQZDVs84/NaOJupa4fI=
Subject key identifier:   34:3A:DE:4F:17:E8:64:F9:FE:67:A7:3D:E9:19:AD:F8:79:B7:BE:A3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B08D304322285534BCE1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34257086-3372-3a60-8e2b-cb8087e9b873.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     35994
IP address blocks:        2600:1404:c800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:8d:30:43:22:28:55:34:bc:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=41c32c23-5ca4-4b08-9997-dbba4b8fdebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:25:c7:35:74:42:4c:7b:43:20:f7:12:9d:
                    ed:46:bb:86:99:f9:34:a3:81:b9:d6:fc:cf:67:42:
                    ed:3a:b4:fa:77:ae:6e:2e:18:03:d4:02:ef:9e:1d:
                    76:cf:60:eb:f8:40:7a:2f:43:49:88:ed:c5:c3:f8:
                    3c:70:3c:95:77:74:72:70:5d:0a:17:a9:4d:ef:98:
                    30:76:89:13:c7:23:94:88:b7:b2:6d:37:ff:87:4b:
                    e4:fb:df:7d:9b:b5:39:be:4a:19:cd:24:1c:2c:e2:
                    e1:95:e6:be:c9:33:26:c8:b0:80:e4:e9:f3:2a:e2:
                    24:04:ff:1e:5c:45:22:10:8e:95:c0:d4:f2:bd:d0:
                    4a:27:0e:6f:38:c2:59:b0:8d:56:08:97:84:c7:96:
                    d7:f7:04:22:78:e9:e1:0c:05:74:03:81:af:e4:1a:
                    33:d4:e5:87:45:49:14:66:2c:f4:ea:66:36:37:10:
                    67:8c:27:95:4b:38:8a:df:ae:12:44:81:ac:dc:f4:
                    1c:80:e3:e0:c1:b9:2f:52:9f:00:ff:38:5d:d9:5d:
                    6f:a0:2d:31:27:41:c6:93:fd:6e:c4:0f:26:bf:19:
                    52:5a:a3:e3:ce:c0:7c:87:21:e4:c8:33:ba:3f:be:
                    1c:d0:91:29:b1:1b:04:3d:ed:2b:91:ec:2b:2e:04:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3A:DE:4F:17:E8:64:F9:FE:67:A7:3D:E9:19:AD:F8:79:B7:BE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34257086-3372-3a60-8e2b-cb8087e9b873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:c800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:13:a7:66:78:61:78:bc:f7:6d:ce:9f:c8:83:f3:b7:ab:eb:
         4a:72:3d:f3:59:00:f9:1e:8c:dc:e8:f2:2c:81:7b:ff:21:7e:
         a7:8b:08:b2:39:2f:c3:06:bb:3c:9a:86:41:03:8b:cc:26:3b:
         48:9f:62:c1:9b:b8:ac:08:e3:49:1e:69:a0:1f:ff:45:d3:e7:
         c8:dc:9b:97:97:e3:82:0a:3b:7d:5a:16:48:9d:23:6b:3a:3a:
         13:7a:c4:a9:6d:e5:2f:fd:14:67:71:dc:5f:54:4c:f4:4a:50:
         9c:bb:c4:e5:a4:bc:39:ea:c4:f8:54:5b:b6:73:6d:2b:6c:31:
         7b:b5:fd:5a:82:c4:39:ad:94:d5:90:e8:55:93:8a:20:7b:b7:
         d9:b3:eb:f9:fc:73:df:b6:b1:43:4b:24:ca:8f:c5:78:75:12:
         3d:1b:8a:85:2e:ac:b1:30:69:f9:dd:6a:69:1b:02:93:e2:13:
         47:0f:7b:73:ee:b1:bb:bf:59:48:aa:3e:fc:35:0c:a3:5b:bc:
         7b:ee:5e:90:bb:77:b0:2b:26:f1:ea:1e:b0:61:a5:74:81:9d:
         62:d7:47:68:af:ec:7e:50:57:79:00:38:c2:5e:d1:60:bd:0f:
         c7:a5:4f:3c:a1:1d:b1:a5:a6:f0:76:66:36:e1:5d:b5:92:51:
         b7:f8:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:01:13 2026 by rpki-client