Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b8b8f25-77a0-3ae7-a0fc-e7f10de55254.roa
File:                     5b8b8f25-77a0-3ae7-a0fc-e7f10de55254.roa (raw, json)
Hash identifier:          XuzQzycAtRFVnemOV+sLfkVlYjTiuKihDXHbh6m0Nuw=
Subject key identifier:   7F:13:EC:84:F2:2F:31:2E:C2:F5:D4:59:4A:3C:C8:32:45:C5:97:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E0005EB15034EB9A341589280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b8b8f25-77a0-3ae7-a0fc-e7f10de55254.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        2600:1419:3e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:eb:15:03:4e:b9:a3:41:58:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=2f07be6d-0b05-43ae-b676-2c860eff9a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:0b:ac:fd:c4:92:4f:31:18:5e:48:a4:62:
                    04:9f:18:60:95:5c:04:63:bc:fd:16:be:6b:e7:77:
                    d0:0e:29:11:42:2c:b2:ef:c6:e6:a4:3c:c6:8c:99:
                    39:d7:aa:34:74:b7:02:51:10:0f:24:bb:62:f9:33:
                    60:d0:16:6b:41:fb:e1:28:ed:8c:21:4b:a8:e1:85:
                    8e:c0:b3:c9:26:77:65:fc:6c:c0:a0:80:88:21:e8:
                    6e:af:fa:dd:4a:03:66:50:01:d0:a4:40:50:c3:51:
                    02:0c:22:59:e3:fd:65:76:f9:08:f2:46:2d:99:b8:
                    0f:3e:7c:85:f2:ab:9e:9a:de:0b:56:a5:da:c7:6f:
                    21:ee:d3:e6:04:13:bb:bd:ec:9a:33:7a:be:57:eb:
                    0f:c2:2b:19:83:5a:8a:8f:48:52:ef:b5:f0:a7:e9:
                    1f:db:3e:37:2c:e6:40:db:50:d2:7e:32:ac:fc:43:
                    c7:79:85:06:5f:fa:7e:02:8f:62:e1:ff:cd:1c:9e:
                    7d:ac:22:3d:a6:f1:39:22:57:90:d8:76:30:3a:4b:
                    5a:bd:e6:02:67:c3:bd:71:b0:c0:8a:2b:79:c2:df:
                    cd:93:71:29:d7:a7:15:68:76:42:67:f2:06:4c:d3:
                    52:5d:5e:3e:d4:3d:21:24:15:8f:e9:f5:d4:1d:6a:
                    e6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:13:EC:84:F2:2F:31:2E:C2:F5:D4:59:4A:3C:C8:32:45:C5:97:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b8b8f25-77a0-3ae7-a0fc-e7f10de55254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:3e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:a1:85:5b:b8:ef:01:a4:f5:61:f4:34:f2:b0:49:0e:b7:
         47:87:e7:58:22:7d:dc:e0:e1:60:ce:55:a3:15:c8:00:70:01:
         58:91:71:2f:86:07:54:58:bf:0c:ac:bf:db:d9:e5:34:57:33:
         6e:92:33:21:0d:36:74:e9:19:41:7b:f6:6e:b7:7b:20:fe:2f:
         57:60:c9:bb:48:fb:f3:7c:9a:ae:c5:54:7e:0b:64:6d:1c:7e:
         e5:be:b3:18:5f:f7:2b:3f:bd:38:73:d2:52:96:72:95:d6:e3:
         1e:fb:a3:74:9f:ef:8c:0e:98:c8:77:86:2a:72:77:db:0e:18:
         61:d5:02:5b:ba:08:1f:3e:f6:e1:89:1f:e1:9c:0e:84:28:48:
         6b:90:a4:ad:6b:6f:4f:ea:c6:1b:c5:44:a4:00:92:2f:d7:28:
         bc:c3:3f:b4:61:44:fd:b1:10:98:e4:c1:f0:97:8b:e4:49:57:
         7d:42:5f:fd:8e:a8:14:18:b9:63:76:8a:d2:5d:61:9e:0b:5a:
         a1:fd:9b:1e:f4:e8:a5:a4:78:e4:f7:e7:4e:b9:1c:03:45:43:
         09:f0:0f:8a:51:59:23:36:d9:bc:ed:60:ad:7f:18:8d:21:d8:
         ca:e0:84:91:c3:d2:b9:7d:d8:91:af:07:24:c9:ca:20:09:17:
         1c:f7:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:32 2026 by rpki-client