Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58eb9883-ebd5-3919-a3e2-1b744af56a27.roa
File:                     58eb9883-ebd5-3919-a3e2-1b744af56a27.roa (raw, json)
Hash identifier:          lwbDynqtRUW2QWtexG91P1+qb7xNEN1QNPMj2Jy+53s=
Subject key identifier:   37:52:F2:54:76:59:D3:45:DA:D3:0E:9D:22:A6:9D:BD:AA:0A:DB:93
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C2ABDC33660D87F28DB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58eb9883-ebd5-3919-a3e2-1b744af56a27.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:141b:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:2a:bd:c3:36:60:d8:7f:28:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ed0baadf-70fd-46ea-9cd1-4164d5ff9a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:2e:df:49:95:d0:16:69:ba:0d:8d:ac:36:
                    81:e4:8f:a4:f6:dc:59:cd:89:82:c2:ed:36:c1:9a:
                    0d:83:63:28:1d:29:0e:63:a8:40:e3:ab:ed:65:da:
                    9f:bd:53:9b:2a:29:64:89:be:41:5f:92:79:51:99:
                    90:dc:e3:93:61:a1:67:e7:e4:d5:46:23:b1:03:77:
                    89:2d:af:7a:66:16:60:0f:98:cf:2c:29:46:52:60:
                    6b:75:bd:cb:4b:94:f6:46:67:1d:95:2c:5c:a2:d1:
                    6f:44:26:b6:bf:11:d8:7a:8c:70:a3:37:8c:97:d7:
                    81:53:ee:84:59:f6:85:10:f7:4f:c7:92:b2:43:49:
                    61:34:00:c5:85:3f:af:be:cf:2d:22:52:3a:aa:99:
                    bd:db:7b:49:9a:ea:5b:c8:6c:79:d8:e5:5e:f9:09:
                    03:db:6e:0b:ee:67:fc:e4:ff:08:8f:da:66:11:da:
                    1d:ab:ff:0b:db:96:37:cf:92:21:77:3b:db:7c:ed:
                    d2:d9:40:80:b6:5b:c1:1b:6a:6a:a3:b2:35:b5:25:
                    e7:79:03:75:05:3e:e8:8c:5b:54:28:42:b9:7b:37:
                    a4:17:ec:0a:11:08:e3:c7:5a:59:05:0d:98:c6:ac:
                    a6:06:13:9c:50:d5:94:b1:98:09:75:c5:ad:bc:78:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:F2:54:76:59:D3:45:DA:D3:0E:9D:22:A6:9D:BD:AA:0A:DB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58eb9883-ebd5-3919-a3e2-1b744af56a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:39:3d:83:38:37:dc:b5:f1:f4:77:1a:f3:94:a9:2b:d9:
         7e:fa:8d:5e:53:b5:4b:02:25:49:75:46:90:63:71:32:62:1c:
         79:0b:89:46:1d:77:a7:a5:1d:48:86:ba:61:eb:c1:d9:21:9e:
         05:8b:03:29:a3:49:fe:cc:f4:58:86:21:b8:52:5c:9f:e9:21:
         b6:75:ee:fa:6a:f0:66:8d:fd:b6:3c:21:d6:fe:06:ba:bf:ee:
         c8:12:9f:c3:c5:a0:d1:e7:09:14:ce:a3:39:36:69:36:01:45:
         6a:21:a7:8e:8f:78:e3:fe:65:ec:62:19:94:9c:28:a5:de:0e:
         87:3e:41:a7:71:ff:8e:78:f6:29:8b:a3:d3:0e:77:45:6e:95:
         2b:d5:10:6d:f7:14:03:d2:96:e4:89:64:2b:c3:68:31:f1:4b:
         64:18:e9:bf:98:f1:75:e4:0e:e3:7e:06:01:87:54:d6:d7:be:
         2f:56:e0:30:6d:f0:54:91:94:8b:f5:2b:33:45:20:02:d8:ed:
         52:87:34:77:91:c1:c2:cc:43:ae:f0:d6:ca:71:e5:e8:24:3b:
         48:9d:f5:39:28:76:86:d9:6a:6e:fb:41:58:56:f6:20:d4:83:
         9a:c4:9b:ef:20:54:ed:57:d8:1a:66:36:b2:30:4b:2d:ae:b9:
         da:66:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:31:23 2026 by rpki-client