Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa
File:                     4f55854f-54cf-3a71-8f91-226fede7eaa0.roa (raw, json)
Hash identifier:          khIaklJAZ+w0XDEUpWLq5d+AOZPHG8NRTWyNgWUK4Zs=
Subject key identifier:   49:A9:C2:2E:07:79:FD:06:B5:D2:AD:F2:45:04:9F:8B:1B:C2:8C:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE15096A63BF36C920E45ADC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1408:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:96:a6:3b:f3:6c:92:0e:45:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=5d6f03ee-5cf5-4d18-9b08-e90ed6535649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:9b:31:8d:dd:69:51:54:e3:40:0f:86:ea:
                    40:33:fb:b0:9a:87:1f:66:19:76:c2:7e:68:5c:f2:
                    08:86:8d:dd:0e:13:3e:1c:7b:53:c9:21:28:d5:f3:
                    30:b1:55:af:fe:a5:71:2e:a5:97:3f:b1:3c:e7:55:
                    f1:81:a6:22:07:23:6e:3d:5f:45:59:d4:be:74:b5:
                    24:ab:be:4d:86:2e:a1:5d:bb:e3:09:60:8f:41:55:
                    44:f9:8b:ab:13:d5:75:b9:1f:ca:71:23:93:0e:ed:
                    95:d2:aa:b8:dd:69:e8:eb:a8:18:fa:d2:78:da:eb:
                    ef:c6:b7:ac:e8:2d:63:fe:7e:7e:dd:93:eb:9f:2c:
                    03:ec:54:e3:b8:3d:9b:88:b5:ee:b6:ce:83:6f:d1:
                    b2:32:83:c2:18:d8:8e:e6:3a:ba:81:30:77:79:d7:
                    58:59:e7:6d:09:5d:e4:c6:d3:23:a8:0a:5b:78:15:
                    ee:0b:d1:ad:87:27:e9:d6:dc:27:be:9a:4c:16:41:
                    73:86:b5:5d:69:48:f4:a5:06:73:bc:3c:7a:86:07:
                    e8:8c:2f:dc:35:1f:53:45:8a:b6:e3:22:cc:bd:e8:
                    04:96:63:9b:8f:04:66:93:88:a7:c5:21:0e:95:31:
                    0a:86:3b:3a:4b:e3:ae:bd:a3:67:ac:52:19:55:18:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:C2:2E:07:79:FD:06:B5:D2:AD:F2:45:04:9F:8B:1B:C2:8C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:4b:82:68:75:72:ae:81:a4:c6:5a:ee:fe:85:bb:8d:04:
         91:f6:f5:3d:a9:bd:28:04:ce:67:de:7b:4f:44:74:ff:63:30:
         d7:b4:a2:b6:9d:0f:2b:f8:61:f1:ae:12:41:0e:b1:f4:06:5d:
         b8:ee:96:a1:fc:2e:ac:03:8b:92:ee:dc:76:2b:1c:ab:0f:6a:
         c9:db:a0:3e:2c:d9:19:dc:a4:03:81:90:f3:23:13:12:8f:1d:
         5f:c8:f6:95:17:fe:c5:92:ab:92:74:2f:8e:3c:a1:e1:55:03:
         f6:06:3b:dd:f6:7b:fa:ec:74:95:0f:a2:b4:4a:da:88:5b:c6:
         f5:d8:b9:7f:7c:5f:f8:44:e1:1f:e9:d3:0f:12:08:51:41:01:
         c3:43:14:50:46:d1:02:5d:ba:82:fb:95:00:99:55:1a:f2:2c:
         b7:6d:c7:82:34:96:65:aa:82:0f:3a:64:e4:62:6a:d7:e7:30:
         b4:d8:25:cf:55:cd:e9:8f:2e:97:a6:81:84:22:ae:31:90:e8:
         27:e5:d2:5b:9d:92:35:63:ab:5d:49:11:8e:05:d3:43:a7:49:
         17:dd:01:58:a9:04:e4:2a:86:40:29:2e:ad:22:ba:08:b9:4d:
         5c:34:14:87:b4:f7:44:82:e6:0b:ed:e9:6b:61:aa:b1:39:ad:
         92:2b:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:43:14 2026 by rpki-client