Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e8144f1-5e3c-3d15-993e-a4b1333f0825.roa
File:                     4e8144f1-5e3c-3d15-993e-a4b1333f0825.roa (raw, json)
Hash identifier:          R8yvWKfFV7QrllumBq9UIqYpjEvS0NBG7sMpXTLq2p8=
Subject key identifier:   A3:B8:BC:70:3E:B0:FA:5E:EB:83:C3:54:EA:4A:A3:70:1D:B9:3B:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F498475D4D7B52FFCD4F389C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e8144f1-5e3c-3d15-993e-a4b1333f0825.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1400:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:75:d4:d7:b5:2f:fc:d4:f3:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f9f45e57-2855-44dc-9766-c280da75d767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:d4:9c:a8:f4:07:c7:0e:4f:57:92:5d:6e:
                    f8:b5:1e:2b:f3:3a:44:2e:e0:7c:8a:c5:89:c9:5a:
                    56:29:ac:9c:6b:99:f6:cb:f3:7d:17:0f:13:f0:d5:
                    5f:5b:11:d2:e1:1e:c2:67:de:9d:78:97:4d:b5:8f:
                    18:ac:44:85:30:55:f3:2f:13:51:e6:80:85:ae:f0:
                    23:bb:25:89:17:34:aa:c6:71:7d:d5:78:54:32:a1:
                    b7:d2:ba:48:bf:09:97:ec:ae:75:ee:8c:74:a4:78:
                    e2:7a:54:f1:d4:fc:dc:a0:ca:60:21:e5:51:88:e0:
                    91:71:b0:bd:18:e3:62:4d:51:f7:63:72:bd:75:25:
                    74:ce:b8:af:5b:64:d3:00:8d:1e:70:54:f0:3b:b7:
                    28:a9:0a:fb:31:7c:63:d8:bb:a7:28:bf:9a:b6:32:
                    e0:aa:86:b2:b2:e7:e0:a5:a7:df:6f:eb:e3:9a:ed:
                    5a:f4:27:98:93:f7:90:29:86:30:60:02:d2:5d:75:
                    d1:dd:b6:72:dc:9c:7d:a9:68:53:e8:3b:51:f1:24:
                    39:8f:eb:3d:fb:98:1e:68:e3:3e:89:1a:97:bc:58:
                    25:f8:cd:38:6b:f2:94:57:d8:05:9b:55:4e:14:da:
                    7f:ad:b2:c1:2f:db:9a:0f:a9:3d:8a:40:03:47:0f:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B8:BC:70:3E:B0:FA:5E:EB:83:C3:54:EA:4A:A3:70:1D:B9:3B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e8144f1-5e3c-3d15-993e-a4b1333f0825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1400:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:71:00:55:a2:1e:2a:4f:99:dd:29:f3:52:7d:2b:b2:19:
         7f:cf:c6:a4:c0:1c:50:b0:57:19:c5:38:54:82:a7:d7:da:01:
         85:23:77:b4:1e:4c:ea:14:c4:f4:f4:57:d1:21:a9:9e:2c:55:
         27:3a:36:b8:43:eb:c1:a2:5f:af:8b:13:8f:29:c7:03:ce:3f:
         2e:cb:0b:88:fe:50:99:c1:fe:b6:25:d7:a1:51:88:3b:57:69:
         ab:38:46:a9:ca:4c:c0:74:6d:6c:ac:7b:79:c8:3d:be:d9:0a:
         f9:15:00:7b:eb:fc:2b:a3:50:af:57:78:8e:fb:3b:ff:31:21:
         b6:43:ff:93:ee:06:e6:50:dd:54:b0:a4:e2:03:ea:18:98:d8:
         dc:15:d8:09:9a:4f:25:76:5e:eb:80:3d:9c:37:7d:33:3c:fb:
         71:a9:b5:93:1b:ad:ac:2b:e0:e2:a5:2c:bb:b8:64:00:67:86:
         21:50:fe:a3:67:ab:ab:70:ee:3e:40:62:1e:62:d5:57:68:62:
         e4:7f:13:f5:b7:ee:96:db:86:03:26:d0:1f:bf:5f:ac:bb:af:
         20:9e:43:7b:a2:7b:82:1b:c1:44:b5:9b:8d:fa:86:cd:7d:ae:
         84:0f:8a:d2:2d:47:ef:d8:9c:17:f4:ef:62:0a:74:64:f7:5a:
         4b:43:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:42:40 2026 by rpki-client