Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3fc8c7-ce85-3c18-b61e-7fff13d849b4.roa
File:                     3c3fc8c7-ce85-3c18-b61e-7fff13d849b4.roa (raw, json)
Hash identifier:          oP3NZOCVGaqWcDgojC6LlBdp5Fu9LUixrXQ0rZDXjlc=
Subject key identifier:   B3:AD:DE:5B:48:90:D9:FA:7E:EB:3E:77:62:AB:3B:2A:ED:A0:3A:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8DD851F6E7177D78CB592080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3fc8c7-ce85-3c18-b61e-7fff13d849b4.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     35994
IP address blocks:        2600:1406:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:51:f6:e7:17:7d:78:cb:59:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=405b376e-ee28-4c11-a953-2045ed5e87b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:f0:ec:87:6d:30:9e:b2:d3:26:0a:87:33:
                    c0:4a:95:7c:0c:d7:0e:29:18:18:6c:09:0c:2f:19:
                    f9:a4:96:3a:d0:6f:d0:8a:05:60:f4:35:a7:ef:88:
                    73:31:a5:57:99:c7:3b:78:03:7c:8d:97:8f:02:55:
                    fb:a7:95:c2:38:5f:45:42:8b:d0:47:ba:4c:aa:fb:
                    83:3f:f5:3b:24:0b:31:05:cb:b4:ae:72:dc:4e:f8:
                    69:73:72:39:36:1c:01:98:33:9e:6e:fd:1b:9d:49:
                    1c:75:ad:20:e9:77:8c:55:93:c4:7b:a1:75:d8:f2:
                    f1:ac:17:2c:e8:1f:83:8f:d1:95:8e:08:11:3b:ef:
                    50:33:8a:5e:d3:ef:1b:4d:ca:07:fb:4f:95:ec:47:
                    9c:45:7e:15:a9:31:46:d9:05:7e:8e:de:0b:fd:a3:
                    ca:e0:73:ab:7a:e5:05:df:73:35:7d:45:cd:38:de:
                    02:19:74:27:33:3b:56:d4:29:40:af:ad:5b:08:49:
                    cf:66:a7:18:e2:68:ca:8b:32:e4:1d:a9:42:29:49:
                    d6:db:1a:ef:73:19:b3:f6:07:c9:62:42:a2:85:94:
                    b7:2f:94:59:d7:1d:82:1a:62:53:93:ed:13:56:46:
                    37:47:c9:7f:b0:df:a5:0c:b9:4e:52:a6:e2:ba:fc:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:DE:5B:48:90:D9:FA:7E:EB:3E:77:62:AB:3B:2A:ED:A0:3A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3fc8c7-ce85-3c18-b61e-7fff13d849b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:42:e0:dc:06:8d:0a:53:f7:44:0f:41:d2:45:ae:14:90:
         ab:60:ae:66:cf:6d:f8:2c:64:2e:f8:b6:ca:1f:68:23:6e:de:
         86:8f:3e:0d:6a:45:04:6e:25:4d:43:4d:d3:5c:b8:8b:c8:ca:
         0e:fe:37:a0:bb:5d:0d:dc:be:6a:e9:55:3f:ca:a2:a2:19:06:
         ce:1b:41:27:b1:e9:59:da:eb:3f:76:1d:9b:c8:07:e4:0f:af:
         7b:ae:8e:1e:1a:68:3b:4d:94:74:8a:f5:8b:3f:df:50:d9:ae:
         ee:65:3c:57:7e:bb:a8:4b:97:0f:82:66:23:b8:cd:6a:5e:be:
         d6:90:68:13:ea:1c:b8:7b:82:4d:c9:45:a3:24:92:82:b9:96:
         be:92:69:b3:a0:4e:ef:1e:44:f6:82:30:e4:3b:0a:8b:5b:0e:
         91:b2:63:d1:f5:06:73:a2:2d:c8:b0:29:76:45:51:47:3f:cf:
         35:82:41:d4:cc:ef:4f:a5:40:48:0f:f6:96:b1:da:47:99:93:
         1a:05:78:41:4a:7f:6b:0d:55:ec:b8:ed:99:ac:ac:47:8b:21:
         3d:21:71:2d:d2:69:1a:6f:23:6a:8e:97:9f:9d:55:99:95:e8:
         9a:f5:33:b5:59:45:ad:64:57:2a:2e:3c:e9:21:3d:06:cf:c0:
         31:e8:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 11:08:11 2026 by rpki-client