Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa
File:                     5211d599-1fc2-37b7-aa91-fc2f454ed870.roa (raw, json)
Hash identifier:          MTY3RZV2CNvFvQT9xgwGVXRSAd/voqrUoEqpgF3P7fw=
Subject key identifier:   A9:F4:80:CE:9D:CB:D0:59:75:21:F9:E2:45:D2:61:B1:38:E2:69:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4559D833CD4EF5EFA552AE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     35994
IP address blocks:        2600:1408:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d8:33:cd:4e:f5:ef:a5:52:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=b4414091-b054-459c-abb2-0e87208c6418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:56:27:8f:df:5c:1d:23:b1:31:84:03:f1:
                    00:18:4a:06:6d:fd:de:00:97:78:91:a9:a1:d5:bc:
                    e9:08:79:67:a9:3d:ef:2f:7f:f3:51:c2:82:d8:51:
                    c6:39:ae:f7:78:ec:f4:1b:92:28:c9:83:ac:7d:d6:
                    83:f8:63:ed:7a:45:cc:1b:03:04:e3:de:39:ed:56:
                    c8:85:d6:bb:3f:b0:2a:77:1a:1a:31:bd:74:c2:98:
                    a1:2b:5f:a0:c0:6f:65:af:32:fb:24:63:01:69:8d:
                    0b:ef:72:29:be:73:78:76:fd:90:25:63:9d:2d:88:
                    07:d1:6b:ef:f5:25:b1:2e:67:eb:92:76:07:d3:95:
                    ea:29:7e:63:60:5e:e4:11:63:b8:1c:94:67:96:7e:
                    57:5c:5d:b0:b7:67:5f:8d:2b:4d:b4:28:d4:31:e3:
                    d4:08:79:5d:9a:6d:7a:41:93:7f:6d:09:41:59:5f:
                    f9:bd:a6:d2:81:c8:8a:be:26:52:1b:02:2e:6a:a8:
                    e8:1e:4d:d7:51:4d:d9:7f:a0:1a:ac:1c:15:47:b4:
                    2b:e0:c1:15:cc:3b:2e:71:e2:6b:db:9a:13:3f:45:
                    43:cd:5d:c7:02:29:65:7d:ee:d2:bd:d6:3c:df:df:
                    06:e6:e2:3a:da:57:af:fc:8e:49:a5:c0:60:bb:0f:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F4:80:CE:9D:CB:D0:59:75:21:F9:E2:45:D2:61:B1:38:E2:69:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:d4:ea:91:0e:93:6b:3e:a2:03:84:6d:2c:8d:8c:3b:46:
         f7:28:38:f5:49:ac:ce:5e:30:a1:02:d9:be:8f:68:f1:75:a0:
         7a:da:9b:59:42:58:a7:14:d1:0b:59:80:48:67:0e:c0:be:d8:
         3c:03:d8:51:9f:84:d5:29:15:70:f7:0b:a5:4a:37:81:44:7f:
         f0:1f:08:4e:9b:1e:82:b9:b8:7e:dc:fe:c9:33:e0:2f:4c:78:
         a0:50:38:13:ec:20:78:b2:a8:78:90:f9:ac:24:e4:93:89:75:
         c8:3f:c4:6d:89:68:cb:d7:75:9a:6a:10:3f:df:3d:07:3a:ae:
         98:9c:80:4f:5c:d0:48:37:d1:68:a3:56:3e:6f:09:ff:ac:11:
         07:d0:76:9c:c1:ba:ab:68:62:e7:d0:ea:bc:c4:23:13:1c:c8:
         0d:93:c3:21:f6:7f:82:b4:3d:c1:58:e7:d6:8c:b7:14:f0:e2:
         60:8d:a3:fa:09:72:d4:bf:8a:b5:20:38:85:36:54:99:18:6c:
         60:c7:90:e1:73:3f:03:57:80:04:89:f8:ac:76:4c:b5:9c:2c:
         db:fc:6a:ae:f2:86:55:ca:86:d1:e0:66:80:bb:54:5d:7e:50:
         7c:c6:11:29:b1:81:5a:37:f9:e5:f7:6b:86:45:01:e6:7b:33:
         71:f6:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:50:04 2026 by rpki-client