Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49f4b088-a8c4-37f1-8c45-b3c82316bb00.roa
File:                     49f4b088-a8c4-37f1-8c45-b3c82316bb00.roa (raw, json)
Hash identifier:          KizWVQ0DP1FZzDIfUDCEyjVVnKWYcv6IJKpH/VLcTcI=
Subject key identifier:   D5:C4:20:DB:5C:7E:49:87:66:E2:53:40:A9:47:59:71:31:30:5A:B2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0D427330F4787E39E7550E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49f4b088-a8c4-37f1-8c45-b3c82316bb00.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     55836
IP address blocks:        2600:140f:dc00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:73:30:f4:78:7e:39:e7:55:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=7b3f6712-5ae8-45cd-988a-eee888a26274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0e:32:6e:95:2b:cc:62:98:52:1b:30:86:99:
                    05:2e:15:94:29:3a:83:5f:30:d7:ea:9e:ac:ee:dc:
                    70:58:e9:e7:68:2d:e0:47:03:6f:da:03:61:1b:41:
                    d4:1e:3b:50:90:41:ab:4c:b2:5f:7d:45:e1:a0:d2:
                    9b:2b:92:52:3a:61:c3:3a:ab:36:17:4e:3e:52:04:
                    73:92:0e:bb:67:a2:65:d8:e8:13:54:85:15:10:e1:
                    47:5f:26:f4:8c:12:2d:7a:ae:b2:c0:ae:d6:61:2f:
                    ea:d2:73:8e:07:eb:3f:50:19:4d:7e:1c:67:81:7f:
                    2f:3d:29:3a:b6:20:d5:d7:1e:56:77:9c:0f:71:15:
                    57:4b:88:ad:f2:c4:34:e8:f5:d1:ee:27:b8:77:f4:
                    d0:76:58:c4:32:ca:e5:d1:ee:f1:1d:26:54:99:2b:
                    44:24:05:8e:86:64:e0:15:02:0e:c7:92:e5:40:c3:
                    33:19:e9:05:5f:41:58:c0:8b:c2:be:6b:0b:6d:06:
                    f8:84:cc:64:41:b9:15:94:e6:db:2c:8e:e3:eb:d6:
                    bf:c4:da:3b:a9:39:39:f7:25:29:c8:52:91:eb:11:
                    62:4a:3d:e5:0a:e4:49:0e:26:ef:20:39:9c:2d:be:
                    10:fd:2c:00:f8:c7:36:df:5e:3a:09:3e:b5:06:72:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:20:DB:5C:7E:49:87:66:E2:53:40:A9:47:59:71:31:30:5A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49f4b088-a8c4-37f1-8c45-b3c82316bb00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:dc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:b3:3d:85:4c:f2:c7:63:d7:ac:64:be:1b:11:6b:e4:b6:
         77:cf:bd:a6:db:b7:c5:f9:91:06:57:21:b8:0b:73:2e:84:dd:
         99:41:2e:ef:52:39:02:6d:b3:dd:a1:37:4d:34:1f:8b:ba:88:
         3f:68:4f:aa:f0:86:20:56:f7:82:c3:1c:dc:9e:80:5d:7c:5c:
         21:e2:87:78:f3:f1:a7:54:7e:e6:d4:7d:2e:cf:9a:85:10:d8:
         70:d5:77:dd:93:5a:b3:20:2b:bb:52:7f:f1:61:8b:7d:c1:6d:
         ef:e4:87:62:ac:86:10:03:6b:08:40:81:89:bb:5c:d9:54:3f:
         51:17:6d:96:79:8a:39:f4:5a:db:a1:65:04:b4:4d:72:20:c3:
         92:2a:be:f8:f7:cf:11:78:a7:fe:06:72:c8:e6:51:07:1d:2a:
         b7:d3:91:a0:99:04:ae:a0:91:a9:23:92:cd:28:f6:e7:df:db:
         05:93:21:be:e5:98:6b:9b:4a:15:0d:0c:05:b5:8e:94:57:31:
         b4:dc:94:c7:45:2f:e9:6b:2f:8b:1a:d0:49:19:bf:ca:2d:1e:
         bb:4c:14:73:ba:98:39:1d:7b:fa:04:5a:d7:ce:cf:bf:11:1c:
         60:cd:d0:d4:43:64:bf:89:32:f5:86:18:4b:48:88:08:a1:18:
         39:90:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:30:42 2026 by rpki-client