Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b2fca62-6066-31df-84e9-49d8742ee3ab.roa
File:                     3b2fca62-6066-31df-84e9-49d8742ee3ab.roa (raw, json)
Hash identifier:          JP4ERikpYaArZSZUV++YYviLvQdAWNbJQXln8mEXLSM=
Subject key identifier:   65:6B:F7:72:57:E5:8D:F6:7F:24:6F:83:16:2D:25:E7:49:2C:4D:D6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6F740B4EA96BA81E4F400900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b2fca62-6066-31df-84e9-49d8742ee3ab.roa
Signing time:             Wed 08 Jul 2026 22:57:03 +0000
ROA not before:           Wed 08 Jul 2026 22:57:03 +0000
ROA not after:            Tue 06 Oct 2026 22:57:03 +0000
asID:                     20940
IP address blocks:        2600:1415:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:74:0b:4e:a9:6b:a8:1e:4f:40:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  8 22:57:03 2026 GMT
            Not After : Oct  6 22:57:03 2026 GMT
        Subject: CN=45fd1ba8-c1db-4d18-bb85-e09f68ff5530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:25:62:ae:69:0e:f8:9b:df:04:c0:cb:01:
                    05:ba:bd:de:05:c7:47:c2:33:08:65:34:a3:ed:05:
                    ed:df:76:41:5d:65:a6:c5:56:53:ee:24:af:42:1d:
                    ff:48:0b:e2:c3:0d:90:7a:2c:cb:f1:ba:cd:26:dc:
                    6e:3f:d6:87:00:64:e0:4e:6b:9b:92:ec:da:2c:78:
                    3d:ca:e6:de:96:bb:23:25:6f:e6:d6:40:e9:16:4f:
                    f0:c2:d7:ee:53:2a:97:dc:63:f3:f4:a4:82:6a:97:
                    86:69:f2:d4:24:be:f6:6e:d6:40:c1:5f:4f:e8:66:
                    a3:9a:cc:f0:87:6d:35:f9:9c:76:28:3a:fd:04:55:
                    7a:cc:01:9a:a4:8f:e5:78:1f:a2:a0:0c:6f:c3:aa:
                    3f:fd:3b:84:be:61:d1:a2:c0:d1:38:b2:56:34:a4:
                    e2:d1:c2:86:74:db:b9:99:c3:d8:f6:c7:e4:50:55:
                    fe:a6:85:04:a4:c7:85:b1:85:fb:61:39:85:f0:cb:
                    5f:1d:37:8b:00:49:6a:94:d0:de:6c:bf:76:50:58:
                    fc:13:a3:e0:f2:a6:c2:6b:53:89:f8:a2:47:3d:d1:
                    dd:2a:5d:85:c4:b5:4c:7b:04:c9:2d:da:56:b5:37:
                    33:d3:23:2d:47:5d:ec:6a:b3:db:63:66:a2:ab:f9:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6B:F7:72:57:E5:8D:F6:7F:24:6F:83:16:2D:25:E7:49:2C:4D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b2fca62-6066-31df-84e9-49d8742ee3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:86:85:64:62:6b:2b:63:6e:b0:c0:64:f2:66:0d:a4:e5:5b:
         c8:5c:32:00:35:5b:48:eb:66:a9:cb:55:2b:0a:23:4a:41:f6:
         05:91:ff:d9:03:f6:9a:06:12:0d:05:4f:97:89:11:a6:0b:da:
         13:92:86:53:33:75:e1:1b:18:52:fd:45:7a:80:ef:99:bf:af:
         0a:ac:09:9f:87:ae:b9:32:3f:fe:20:f3:83:01:96:27:a9:80:
         ca:23:39:a6:cd:7f:7b:58:9d:4d:dd:bc:05:7c:d5:7a:af:13:
         2a:a5:99:45:79:1e:00:5b:8d:e0:bc:21:4a:2a:d2:63:50:d6:
         e0:29:43:67:e5:f0:59:48:d7:57:59:41:6b:67:e6:ee:16:70:
         5b:83:1d:87:55:50:bd:15:ab:c2:61:63:9e:f8:ae:c2:b1:a9:
         a7:4f:e3:2f:ed:2c:64:e4:38:74:7f:cc:97:cf:3d:b2:a3:1e:
         0a:a2:d2:e1:37:e2:94:09:19:1c:ac:73:65:d0:72:6a:5b:e2:
         9e:e6:5c:0f:3c:17:20:17:6e:05:17:bc:fb:5a:70:6c:7e:b8:
         f8:df:45:63:3b:0f:5a:28:54:ab:f1:16:bf:3e:40:f1:33:c5:
         22:eb:ee:34:6b:30:92:17:9c:3f:17:6d:5a:61:e1:db:fb:d2:
         4d:50:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:57:48 2026 by rpki-client