Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa
File:                     6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa (raw, json)
Hash identifier:          x0jZy/YUpAmZZgDWKWgYLf+7B0g6WGacR8heb45c6JM=
Subject key identifier:   F7:C5:69:A3:BD:B7:1F:DA:41:01:D4:48:D1:18:0A:0C:04:37:C1:3B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE15098FC30931FE687C3E680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1417:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:98:fc:30:93:1f:e6:87:c3:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=05b6c48e-fe2f-48f4-908f-13bfa53d6fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:68:00:9b:64:e6:1d:2d:fc:4b:db:f0:a0:
                    96:95:ae:e5:91:6c:a0:e4:42:ba:64:e8:cc:96:de:
                    9a:f6:c2:7d:c7:25:51:e8:7a:a5:32:ed:91:ed:ca:
                    52:22:23:5b:5a:b9:70:ce:fc:c5:65:a3:ca:3c:8c:
                    9d:7f:de:e4:cf:a0:c6:71:07:c6:a3:86:56:6b:84:
                    64:44:af:66:08:cd:9e:4b:2f:db:ad:ec:c8:28:5d:
                    f9:22:0a:54:21:65:23:3b:a0:29:55:4c:45:f7:cc:
                    05:f8:fe:33:6f:1d:09:29:b4:1a:3d:99:79:75:de:
                    99:ec:05:ab:91:a3:c9:80:e2:d5:4e:3e:8a:e8:da:
                    0c:67:31:0c:62:d6:2d:d3:3b:7c:8e:e5:12:85:8a:
                    34:72:a0:92:27:72:04:6b:1a:45:87:ba:51:b8:4b:
                    5a:c1:3c:e9:5e:04:e8:61:d5:5e:de:54:0a:a5:2a:
                    3b:2f:92:b5:d7:be:16:e7:78:9c:b0:76:42:23:a3:
                    62:d2:5a:d8:b6:3d:81:36:77:78:51:1c:81:02:84:
                    d4:22:bb:89:ee:1a:d0:bd:70:20:c3:df:0a:a9:8a:
                    11:ab:b8:2b:9c:fa:fd:c8:98:a2:62:b1:51:44:62:
                    92:38:f5:f0:6f:a9:df:e2:ff:80:0d:79:52:3d:a1:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C5:69:A3:BD:B7:1F:DA:41:01:D4:48:D1:18:0A:0C:04:37:C1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:56:86:19:e5:3f:28:09:10:c5:88:27:0a:5e:c9:23:08:
         7b:bb:11:f0:b4:3c:4b:c2:0c:e8:c2:1b:f0:a1:99:05:25:21:
         fa:7e:7c:e6:9d:40:d2:28:fe:c9:c4:fb:70:e9:1f:a8:74:ac:
         8f:b0:8a:b3:6b:f4:7f:ce:ba:02:af:37:e6:ae:47:cd:cd:a9:
         87:e3:ad:4e:e1:17:aa:7f:8d:f4:8f:f7:0e:08:3a:45:31:ee:
         64:94:52:62:0b:42:bd:cc:76:3a:71:2d:3d:16:ea:dd:20:1d:
         67:fc:a4:6f:75:73:ea:e7:f2:ca:90:5c:64:5f:cf:79:a2:55:
         4f:16:4b:8b:36:5a:48:81:ea:ed:33:a8:98:97:96:63:be:d5:
         04:84:61:d6:2c:6b:90:7b:83:50:a9:61:c4:39:f9:d4:2c:95:
         08:a4:ee:db:20:72:09:53:47:39:5c:d1:fb:b6:b0:1a:d7:a6:
         ba:64:d0:bb:d6:7d:81:0d:a7:63:a8:da:58:0c:72:50:9d:04:
         e0:00:99:2d:e7:5a:bd:0f:80:70:ac:03:bc:b3:6f:77:f8:82:
         54:76:d9:a9:e7:3f:78:fb:c2:e9:39:37:e9:c2:cf:70:54:d7:
         07:92:8d:58:51:c5:77:86:6a:e6:07:07:fa:26:1e:21:13:f1:
         7a:4a:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:28:17 2026 by rpki-client