Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6babb-581b-3419-846e-6fbcb75d3ac7.roa
File:                     3ef6babb-581b-3419-846e-6fbcb75d3ac7.roa (raw, json)
Hash identifier:          M5EEEWGyt2cw7cEGlPGa/LSFPaNqF0Yz23SPjDUox80=
Subject key identifier:   1C:2A:F3:18:89:37:E2:6E:D3:2B:60:09:2D:5E:57:83:59:C4:B4:C0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE1508CCE869BCFD55EC347E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6babb-581b-3419-846e-6fbcb75d3ac7.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1402:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:8c:ce:86:9b:cf:d5:5e:c3:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=6b8413a1-f1b5-4d1a-9908-1328415ffe69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:b1:13:50:29:b4:c8:89:41:9b:1e:54:bb:
                    f4:25:4a:3f:74:f8:34:63:f0:75:0f:e2:e3:f9:9d:
                    84:f1:37:a7:89:83:37:73:03:e9:11:55:1c:ba:e4:
                    15:ce:d4:4d:0a:1e:8b:6d:26:3a:17:88:60:e5:84:
                    40:4a:7d:8c:e7:27:9f:52:56:b8:c0:31:f6:3c:1c:
                    1a:4e:b1:2f:1d:31:7c:db:89:b3:09:c9:a9:45:da:
                    85:74:5d:91:f4:bc:fa:fb:d3:a0:da:4d:19:b8:c4:
                    07:04:90:e7:ad:b6:db:44:7c:ca:4c:d8:94:e2:f5:
                    5e:7b:53:b9:c5:e1:bc:3e:d5:09:6d:ba:2a:b5:20:
                    31:ed:33:89:ea:d4:84:af:ad:a9:64:cf:c8:fd:eb:
                    8c:13:ff:eb:ef:8e:d8:80:6f:96:a7:c7:82:18:6a:
                    f0:aa:68:97:e0:09:59:05:55:28:38:ea:10:4d:5e:
                    f8:7f:33:cb:fb:52:5f:26:eb:ba:37:c6:e7:0e:8e:
                    c2:cb:9c:8e:3f:ff:a8:49:6b:e1:67:8e:4b:86:f8:
                    d2:c0:d0:8a:23:c6:f5:b9:e5:b6:f8:a7:46:8c:50:
                    0b:49:5e:34:cf:4b:f6:30:5d:3b:ea:3d:ce:9d:8f:
                    38:16:c9:94:32:66:24:d8:4a:80:29:19:88:d2:5b:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2A:F3:18:89:37:E2:6E:D3:2B:60:09:2D:5E:57:83:59:C4:B4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6babb-581b-3419-846e-6fbcb75d3ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:3000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:f0:60:49:d7:94:b3:f3:f5:ff:fc:57:75:7f:98:61:63:
         d1:e4:fc:30:da:fa:6a:86:56:83:67:f6:00:86:dc:b6:5e:7a:
         7a:2b:19:35:50:34:bb:02:76:bd:9f:d6:52:f2:83:de:a4:cc:
         7f:22:d2:13:e9:3d:03:4a:19:b9:33:27:ea:c2:e3:3e:69:42:
         a9:9d:1b:aa:ed:e4:e6:f3:66:d1:b4:d9:e1:ef:6d:75:43:09:
         4f:10:e8:d5:f8:bf:a6:3b:3f:9d:45:a7:ab:f4:e2:01:5e:71:
         3f:2b:7f:0b:62:79:5b:7e:d0:61:78:7c:fa:24:e9:bc:14:df:
         f5:60:b6:d2:b5:32:75:cb:bd:0a:aa:8b:1f:22:7b:c8:92:9f:
         0c:f0:39:d8:e2:dc:fb:c2:31:15:4e:35:9b:6c:d7:6d:e8:4e:
         a0:26:87:ca:ac:d4:6a:5c:2d:e4:90:45:48:c9:5b:d6:81:76:
         e0:af:bf:5b:9e:a8:7d:bc:df:6f:3a:66:5f:e9:41:7d:e6:6e:
         70:80:7e:20:1c:cf:12:72:1d:a1:76:71:8a:f5:87:b3:d9:c9:
         7c:73:81:f0:ba:be:ba:53:93:4d:af:59:ea:7d:77:d3:c9:8a:
         54:8c:33:87:40:45:9a:3b:8f:b7:bb:b2:5b:db:f8:c0:b2:ce:
         06:f1:93:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:26:36 2026 by rpki-client