Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa
File:                     494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa (raw, json)
Hash identifier:          mFln2JdorAIM2E50+GMgJ8ZMCtB7iljSlrYz9YD5j/s=
Subject key identifier:   D5:64:9D:18:0E:58:EE:F8:B5:02:58:ED:81:25:A3:B0:FD:4A:CD:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD8F072E1FE5FA26B6631F140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     20940
IP address blocks:        2600:141c:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:72:e1:fe:5f:a2:6b:66:31:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=d0f3d784-8ed4-406e-9668-ed271f5c22b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2b:c7:29:0d:fb:6d:4e:80:6c:7e:d2:6c:5d:
                    d2:a5:7c:73:28:06:86:f3:07:3f:ae:9c:7d:17:69:
                    2d:3c:b7:12:df:b4:1f:5a:1b:c4:2d:f2:eb:d1:e7:
                    88:44:15:8e:93:51:fd:99:3d:4e:8f:49:e8:c4:f6:
                    90:57:16:49:3c:f1:23:3b:42:21:d0:85:8e:cd:96:
                    9d:2f:a0:da:d6:60:58:a9:13:69:43:59:93:cc:75:
                    a0:d4:9b:f6:f5:97:7d:48:cb:d8:f5:b8:73:93:69:
                    47:75:94:46:02:ab:9e:c1:68:ab:ba:ad:69:42:e1:
                    22:1d:93:b9:5f:37:a2:fe:3f:6e:38:7f:b8:10:71:
                    5c:2f:6e:45:0f:8d:39:78:76:0d:09:55:b5:fa:a3:
                    0d:f5:c2:a4:f8:67:2f:b5:18:57:1d:d8:49:9d:71:
                    25:9f:4d:cd:6e:16:44:64:f9:ba:cc:24:01:b6:f3:
                    40:ea:06:b6:57:c8:1e:fd:f1:44:df:ea:4b:b0:5a:
                    7d:f6:5e:5d:4e:a2:60:1e:7c:66:52:53:eb:86:a4:
                    a8:8d:27:4d:77:31:88:18:91:bb:06:a2:4f:0d:f8:
                    ef:65:5a:c2:e3:f5:c4:63:87:23:19:1f:87:a5:48:
                    ef:4c:19:8e:5f:14:12:bc:70:a4:d3:19:6c:4d:78:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:64:9D:18:0E:58:EE:F8:B5:02:58:ED:81:25:A3:B0:FD:4A:CD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:9a:6c:44:07:5f:59:27:37:d8:e1:27:45:fa:01:06:5f:
         57:36:26:bc:11:91:7b:2b:57:ba:6b:fb:3b:5f:36:db:ff:3f:
         98:1e:a7:3d:d4:07:23:95:72:d8:37:c6:cd:31:c9:1c:c3:e3:
         92:e4:db:64:03:26:69:9f:74:3b:46:76:36:60:c8:8d:eb:59:
         7a:6d:13:38:85:97:71:f7:96:56:d5:36:c2:fc:9e:75:3b:3b:
         ab:85:c6:7e:08:4c:fa:c1:cd:a8:bd:40:a8:66:4a:20:a5:b7:
         fe:cd:ac:b9:46:93:c9:7f:76:8a:bd:19:4c:ac:ee:e0:7a:75:
         7f:e4:65:d5:3d:cc:26:01:f9:7d:4d:7c:70:f4:52:21:d6:be:
         de:9a:38:ee:24:2d:e3:27:36:c9:8d:15:1a:de:2a:22:f7:9d:
         e2:ef:97:6f:a3:ab:f2:50:54:c0:cb:ac:dd:48:0f:3d:ac:5c:
         19:a5:f1:8d:6d:99:f4:2a:dc:8b:95:42:9a:64:58:2f:61:9a:
         8d:5f:99:98:57:75:74:52:86:5e:5a:b7:e2:f7:59:cd:c9:59:
         5b:79:43:94:64:f4:c8:52:c4:d3:f7:1c:32:cd:22:4d:78:c4:
         e3:5d:c5:f4:94:ef:28:36:ed:0b:1d:ef:c7:cd:13:97:18:e7:
         1f:67:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:28 2026 by rpki-client