Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40d84f2a-60b9-335f-8c36-1e988a49a073.roa
File:                     40d84f2a-60b9-335f-8c36-1e988a49a073.roa (raw, json)
Hash identifier:          YXr9NauxNmukmasXmxUjxM1NrDycWnT4g9HmxiPVAFU=
Subject key identifier:   26:A4:14:2B:CF:F6:AC:7C:6E:19:67:C3:84:23:06:59:1B:FB:79:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3E5F251F0C6646AE8428F290
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40d84f2a-60b9-335f-8c36-1e988a49a073.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:4063::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:25:1f:0c:66:46:ae:84:28:f2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=02d0edc6-5a43-4093-b630-c6b7f0833c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:fc:04:b7:db:be:3b:9b:74:83:1a:55:07:
                    8f:91:c8:e1:2b:85:9b:e6:eb:0e:7f:40:f5:41:f2:
                    ff:d0:db:11:c1:a0:7f:82:90:80:3a:20:98:6c:85:
                    87:5f:9c:72:06:45:de:f1:25:95:5c:a5:10:30:55:
                    d4:70:8a:bb:fa:c3:64:97:24:5d:58:f6:88:6b:f5:
                    93:7b:ec:0d:15:68:23:64:a4:5a:a4:90:ef:04:dc:
                    c1:c9:86:03:78:cb:16:97:b8:37:4b:6c:2a:a2:a4:
                    74:5b:c9:d5:f6:8b:bc:6a:3e:15:2d:bf:40:c8:02:
                    32:f3:69:b0:2c:9b:2e:6c:55:06:88:8d:bf:25:fb:
                    df:23:12:33:ea:a2:c2:20:7d:48:3b:2c:2d:eb:20:
                    e0:3e:48:88:4b:31:95:a4:ae:51:7b:e5:d5:e5:60:
                    f6:35:50:44:db:72:4e:f9:6e:2f:86:04:db:8f:69:
                    77:fe:8e:96:de:18:69:67:ca:43:db:16:c6:44:4e:
                    9f:26:d9:06:a5:b3:ee:29:9c:75:a4:d0:52:39:bf:
                    28:e5:26:c4:e2:2c:f1:aa:90:85:8e:4f:e7:c2:db:
                    f5:a8:3e:30:49:ba:1e:09:1b:13:88:48:3d:53:47:
                    58:6f:d9:21:1e:64:d4:0f:79:ec:8c:b7:ff:5c:f5:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A4:14:2B:CF:F6:AC:7C:6E:19:67:C3:84:23:06:59:1B:FB:79:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40d84f2a-60b9-335f-8c36-1e988a49a073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4063::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3b:a4:d6:79:54:ce:b8:69:2c:d0:d1:d4:ba:f6:d0:a7:61:
         63:d6:f5:d8:50:5a:e8:b0:70:00:22:30:85:8f:67:dd:69:f1:
         8d:5e:8d:53:b6:f4:93:47:ed:d4:02:04:bd:c1:b2:d8:8e:45:
         be:9b:d9:97:1d:13:76:8b:87:dd:6c:0c:8f:38:e4:f4:cf:8d:
         e2:14:88:3c:6d:04:b6:ef:8a:cb:83:14:64:35:06:60:68:78:
         0b:ec:4a:61:51:65:37:da:b0:4d:f4:76:3b:b8:dd:49:e4:16:
         9a:e9:2b:df:a4:43:84:40:ee:1d:4e:63:3a:65:cd:ef:53:f2:
         b7:5c:f2:d1:14:60:f8:88:a3:89:02:65:6e:e3:25:dc:e4:aa:
         af:02:2b:4a:1d:6e:7d:af:50:c1:7c:04:cc:3f:60:e6:5e:17:
         0c:dc:76:b4:a1:1a:72:36:f0:65:d7:bb:6f:be:97:24:a0:02:
         a5:30:df:cc:f8:6b:d5:ec:e6:c1:0e:f6:da:cc:9a:57:4c:3f:
         87:e2:d4:a4:c7:b9:23:eb:56:c6:4d:ea:19:49:65:2c:31:dc:
         b3:96:cf:e2:11:32:8b:df:d5:2f:7a:cc:c6:f2:f3:7e:1c:b7:
         53:d3:ae:97:ac:98:70:d8:c8:64:d8:bf:7e:19:79:67:cc:5c:
         98:5b:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:00:11 2026 by rpki-client