Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54418c4f-9eb7-3325-86ae-46b7005b6e18.roa
File:                     54418c4f-9eb7-3325-86ae-46b7005b6e18.roa (raw, json)
Hash identifier:          a1MpMWK55k/JcTdO1lP1dYsGK9JRhPzTPu4ORTqyMf4=
Subject key identifier:   60:57:61:77:05:BE:3E:B6:9F:38:77:50:85:F2:8A:2D:2F:F4:E0:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE15098E4D60C05C7E44F0CE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54418c4f-9eb7-3325-86ae-46b7005b6e18.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1417:8400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:98:e4:d6:0c:05:c7:e4:4f:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=887950c6-ae5b-4398-912b-d51e70f1b174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:b2:68:8a:a4:15:d4:53:f5:59:9b:78:72:
                    db:33:ec:fc:67:29:66:d1:de:18:c3:31:66:29:5f:
                    5b:44:4c:be:f0:92:ea:99:5b:b6:e8:89:ab:50:81:
                    5a:93:b6:80:ac:05:6d:d9:71:1f:05:c0:4c:c6:75:
                    16:ba:e3:ed:72:15:7f:12:c5:29:f7:cf:16:8c:c0:
                    71:d8:52:52:cd:38:78:91:64:2a:42:6f:44:fd:36:
                    56:62:cd:c7:32:3b:70:66:8a:47:81:6f:78:47:cd:
                    b0:9b:d3:4a:77:89:2e:14:46:e6:2b:a9:f1:14:f2:
                    24:15:7a:06:74:58:4b:a0:02:b5:c7:fd:5e:82:d6:
                    12:3b:ed:fc:38:8f:94:c4:f8:a6:4c:e9:2a:df:60:
                    74:56:eb:be:76:40:97:c1:42:bb:fc:e5:fb:1a:f2:
                    62:8d:e3:e4:83:68:d5:ac:87:f7:9b:73:2a:bf:69:
                    84:e2:40:de:7f:2c:da:4e:36:3f:ad:59:79:8d:b7:
                    03:13:e1:76:a8:02:ff:9b:6d:0a:9a:4e:7c:80:f8:
                    31:52:40:f4:b3:7a:e6:1f:35:af:9f:15:dd:01:6e:
                    73:23:cb:7b:9a:aa:da:87:fc:6a:5a:bc:7c:c5:a3:
                    6f:5a:d7:f4:37:95:dd:b9:11:05:75:e7:94:bf:a6:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:61:77:05:BE:3E:B6:9F:38:77:50:85:F2:8A:2D:2F:F4:E0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54418c4f-9eb7-3325-86ae-46b7005b6e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:8400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:5e:26:f1:cf:c1:c7:49:05:8d:6a:de:e4:15:51:1c:b0:
         ac:b3:36:12:f6:70:cc:1d:4c:97:c7:cb:f5:c9:6e:61:e0:14:
         74:fa:d6:46:9e:3f:24:64:2a:dd:41:37:a3:f3:fd:28:b1:93:
         af:f4:49:01:69:6d:9f:ce:ac:37:a7:2a:df:76:7f:69:bd:c8:
         fe:25:c8:a8:f6:df:df:92:11:3c:6e:20:8c:d0:0a:12:a8:b9:
         87:f6:13:a3:ad:c1:40:b3:93:5a:08:08:6b:5c:cb:7c:2b:6c:
         b5:db:3e:e4:1b:45:0b:36:db:d1:a8:9b:74:54:37:fb:71:21:
         04:44:42:26:25:bf:3a:59:29:8a:77:eb:aa:2c:1a:d8:cf:f6:
         7b:5c:48:34:03:c2:9a:bf:4f:4d:8b:5f:8b:6a:79:9a:0a:7d:
         9e:d5:a7:5f:db:75:a0:b7:4d:1f:87:c7:da:70:05:d4:02:c5:
         11:28:b4:30:c9:f2:7c:8c:56:c4:aa:6a:78:1f:35:38:d2:e2:
         04:ab:7c:89:b5:a9:29:23:d8:01:fd:11:b2:42:98:3b:bb:3c:
         0b:97:26:e9:f7:34:b0:11:8e:40:33:49:4f:99:33:bd:f7:36:
         a4:3f:2e:67:58:d5:66:9a:55:2a:c0:63:1b:85:97:a9:93:de:
         7b:26:cc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:40 2026 by rpki-client