Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa
File:                     7d641512-a933-3238-a070-f7808ba5e0f1.roa (raw, json)
Hash identifier:          jafDHNWBXwPzJ3reLNoYp8NET9fQMYWA5AXdogAnyz4=
Subject key identifier:   B4:1B:B5:ED:97:D1:E1:A4:DC:C5:52:2B:CF:1B:3B:25:9E:5C:A3:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE1509521897E40856B57C780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1402:a800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:95:21:89:7e:40:85:6b:57:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=3ef68b0c-d070-491c-95a8-034a4484bd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:07:d7:5f:cf:1c:76:ec:26:bf:24:ef:55:
                    94:8c:5b:b5:cc:71:6f:62:94:d1:33:c0:b3:2e:a0:
                    37:7e:00:42:ef:bb:9e:bd:fd:68:36:8f:0d:d0:3b:
                    f5:4f:4c:c3:1e:d1:c2:6d:32:01:69:09:b5:d3:d7:
                    9a:6d:a8:de:ce:38:35:28:8d:fc:82:d1:ac:19:eb:
                    92:32:b2:ce:a9:e5:6b:d9:23:82:0a:39:74:b5:fb:
                    ae:64:fd:94:c9:bd:62:13:ff:d9:11:91:3c:a3:2c:
                    66:b9:28:23:29:b8:a2:d9:f4:38:9b:56:53:6d:eb:
                    17:f9:27:a1:e7:bf:0e:f0:e3:3b:97:ac:89:dd:51:
                    d1:f4:e0:28:5d:16:42:f4:97:21:8e:10:1d:13:83:
                    67:92:8c:be:79:bb:80:c1:53:c6:e3:23:dc:fe:f7:
                    08:cc:56:39:43:fd:34:7c:73:6d:95:00:e3:fb:1c:
                    95:12:d8:3e:65:a5:07:d3:7f:89:30:2e:b8:4d:2a:
                    a1:03:18:27:87:c5:ce:e0:9a:74:52:4d:e6:3e:6d:
                    4f:ed:e9:17:14:66:4e:82:8a:18:31:67:e8:5b:9d:
                    15:1e:24:ff:54:3e:aa:86:df:d3:c0:9f:34:c2:d1:
                    13:96:bd:02:7f:77:66:b1:e7:f5:19:e2:d5:10:58:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:B5:ED:97:D1:E1:A4:DC:C5:52:2B:CF:1B:3B:25:9E:5C:A3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:a800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:36:e6:9d:28:dd:c8:7c:29:b2:0c:76:60:d4:5d:f4:8f:73:
         55:63:e9:4b:1d:53:f3:59:a4:87:69:c3:ea:33:80:be:3a:87:
         60:d5:27:b8:80:38:c4:3f:fa:76:32:01:01:af:ee:71:b0:9e:
         73:de:20:c9:cc:c9:2e:7c:2b:a9:9e:69:53:ea:b5:df:c0:7b:
         47:e0:a0:59:19:a0:32:03:4d:77:77:97:0b:7d:7a:b6:d2:e4:
         71:8d:d5:8e:d2:f1:be:ec:b7:3d:37:5f:b1:08:b9:8c:db:cc:
         84:4b:d2:97:df:52:c3:ae:45:d8:7e:50:bf:db:b6:03:d9:69:
         ff:a6:a0:66:36:9e:a7:4f:c2:c7:1d:88:52:aa:7e:f0:3e:74:
         90:a7:d3:df:ae:77:6e:62:94:3f:fc:22:d4:37:cc:9c:7d:1b:
         6b:3d:7f:ac:1e:d0:b4:2c:73:79:2f:de:2e:c5:a1:c1:dd:89:
         a6:4a:fe:a9:cc:ab:5f:f8:ae:b0:53:45:c6:4b:f6:fa:bd:52:
         10:79:26:f5:00:39:4e:59:90:cc:57:3c:35:bd:eb:dd:ad:02:
         1a:e8:d6:04:ee:c6:5d:2d:0f:f5:8e:b2:40:1b:f0:e0:91:1d:
         3d:90:ae:fd:b9:b2:92:e8:3b:82:b2:10:6c:96:5a:54:72:99:
         4c:7d:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:03:54 2026 by rpki-client