Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e98050a-8268-38fe-9550-76441b8533c4.roa
File:                     3e98050a-8268-38fe-9550-76441b8533c4.roa (raw, json)
Hash identifier:          3Z16KbrOUv5z1temjhOjJpreafU/ZzaJQOUJWtSNnxQ=
Subject key identifier:   F0:58:CD:B9:EA:C2:2D:06:FE:29:CC:70:F4:AA:24:C9:E1:12:68:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0BDD0BB5F55D38455086C940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e98050a-8268-38fe-9550-76441b8533c4.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     35994
IP address blocks:        2600:1407:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:0b:b5:f5:5d:38:45:50:86:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=4e634f4a-f428-4602-8e74-7c5b2e261390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:ef:6c:9f:21:dc:21:f6:37:6c:c0:54:61:
                    84:63:c6:63:ff:5b:a4:a5:d3:9d:f2:d8:6b:3b:e4:
                    13:ef:83:b6:ac:be:04:93:91:c2:66:ab:02:44:f9:
                    06:b9:f1:8a:c1:db:09:c9:22:fb:5a:b2:3d:29:ce:
                    8d:3b:22:df:d9:7e:78:d1:02:d7:97:3c:e3:81:13:
                    5f:23:38:8d:c1:90:79:b7:bf:6e:d1:b6:45:8e:c4:
                    eb:9f:8d:9b:88:1e:12:e9:ac:11:e8:6b:75:91:6e:
                    9e:86:d6:c4:1b:5d:c3:6d:82:53:c9:11:b6:b8:b5:
                    28:cb:1c:5c:64:2d:d0:0a:ca:4f:79:79:e0:d7:82:
                    dc:ff:0a:ed:5d:e6:a6:5b:c7:47:00:1e:81:19:60:
                    59:87:2d:32:be:f4:c7:73:0f:48:b5:09:4d:62:bb:
                    a4:fa:61:d9:b3:cc:e4:a9:68:44:ad:10:b8:f5:fc:
                    92:94:50:ba:45:27:4e:ab:c3:4f:1d:ff:e0:f8:bc:
                    53:c8:94:15:9a:b9:23:f2:a2:07:27:33:09:93:db:
                    d9:27:3f:02:43:63:db:7f:21:e8:6b:75:94:6a:30:
                    64:0e:31:33:cf:22:0e:1e:97:bf:c1:2e:cb:40:b5:
                    cb:b6:c3:49:b7:83:03:c6:6a:85:61:7b:47:fd:fd:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:58:CD:B9:EA:C2:2D:06:FE:29:CC:70:F4:AA:24:C9:E1:12:68:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e98050a-8268-38fe-9550-76441b8533c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:6800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:70:3e:99:98:af:80:cc:e5:03:13:96:99:ce:ed:3e:85:
         54:ff:4a:9d:9f:95:28:c5:0b:2b:60:df:a9:ed:1b:b0:fe:32:
         bb:ed:4c:94:ee:d9:eb:a0:56:ab:47:75:a7:f8:4b:55:04:dc:
         25:37:4e:45:83:ce:ed:c5:89:79:19:94:cc:06:bc:25:ce:93:
         49:d5:05:60:55:c9:4f:33:a3:f8:40:b5:87:79:bf:af:b4:10:
         d6:ef:3c:67:61:34:8d:a6:d1:62:f1:19:8a:d5:b2:9c:dc:03:
         23:4e:fe:18:4a:fc:68:ec:61:61:f7:09:61:50:9a:05:0e:39:
         a8:32:43:31:95:e1:9d:21:7d:2b:a3:79:a0:6a:77:86:98:8f:
         c4:85:78:66:df:54:99:a3:b9:54:44:dc:2d:9f:1c:6d:72:a2:
         f3:50:48:0e:24:79:3a:90:a8:2a:4f:ca:39:ee:b3:70:06:58:
         1a:68:93:0e:d3:8e:8b:bd:7d:13:54:04:ad:f8:e1:6c:70:1b:
         b4:bd:23:14:be:a1:4e:24:28:e0:9e:23:de:07:d1:d5:1f:09:
         2a:7c:01:a6:2a:e1:04:47:b8:da:f6:90:50:05:84:86:92:54:
         57:94:d2:83:5b:8b:f5:ab:3e:e3:be:07:e1:e0:a0:7f:c6:c3:
         dc:82:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:00:59 2026 by rpki-client