Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/819300c3-ad06-3ba8-8676-463fdbc76986.roa
File:                     819300c3-ad06-3ba8-8676-463fdbc76986.roa (raw, json)
Hash identifier:          INnbxXnZdFNwLgN5/rKBu/bCtFLPjmst3IK+ww9DvUU=
Subject key identifier:   13:68:FE:DB:C2:67:E8:F0:3E:F4:4B:8D:EA:FC:BB:4F:D7:77:CB:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD8F0727E3B9F408FE9937E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/819300c3-ad06-3ba8-8676-463fdbc76986.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     20940
IP address blocks:        2600:1419:cc00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:72:7e:3b:9f:40:8f:e9:93:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=c68ef461-957b-4872-ad72-48ceb230ca72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:61:b3:eb:ed:85:30:40:f9:36:cb:17:d9:
                    0d:65:e5:7b:fc:c6:a8:ea:ab:88:29:8a:f5:a3:4a:
                    d3:cb:2f:15:c8:42:be:3b:e4:38:4a:e7:e6:ec:91:
                    7b:8e:7f:58:ab:9b:c7:c0:95:6c:b4:3e:d7:6b:47:
                    90:15:2d:24:55:c9:71:cf:4a:d8:f4:13:74:7d:e8:
                    fb:dc:26:9e:67:ae:aa:d0:5c:d1:0e:79:bc:93:cc:
                    f7:f4:41:00:29:2c:64:16:f6:c7:b1:bd:9a:7d:87:
                    1d:06:d9:cf:99:ce:36:33:77:2d:92:00:4e:50:b3:
                    d9:0f:a9:2c:99:fa:00:7c:c2:dd:85:df:c3:40:c3:
                    92:83:36:72:60:87:e2:b7:9b:e7:82:fe:19:3d:dd:
                    73:55:81:3a:b2:4f:a7:b5:a9:f9:f0:f0:4f:62:90:
                    47:7b:7b:10:62:da:08:8d:f6:75:2a:ea:ca:8d:7e:
                    38:d3:3d:21:1c:73:27:eb:67:14:c7:15:90:5d:d8:
                    6b:18:1f:26:5c:8f:1c:47:d0:65:f9:3c:21:20:43:
                    a7:87:23:be:f3:72:18:aa:e6:cc:6c:36:72:af:77:
                    5d:42:65:f6:19:5b:49:27:40:a3:61:07:a4:38:f9:
                    c1:1c:eb:62:3e:b1:b2:6a:43:29:c9:ed:c2:b4:fc:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:FE:DB:C2:67:E8:F0:3E:F4:4B:8D:EA:FC:BB:4F:D7:77:CB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/819300c3-ad06-3ba8-8676-463fdbc76986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:cc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:89:94:9f:f7:b4:7c:a3:67:f8:0e:c4:66:0f:9b:6e:c4:88:
         34:fa:13:98:a1:ad:94:a3:b6:54:66:84:72:4e:c6:9f:f3:7b:
         5a:20:39:12:9a:78:ea:32:66:fc:44:e6:ea:36:03:04:4c:7c:
         2f:6a:8e:6d:33:2d:26:86:ed:af:bc:99:e9:71:4f:ea:ad:7d:
         fc:3c:ba:cc:d8:d5:d3:c6:64:34:40:c3:c2:16:01:f1:27:a0:
         5f:98:4c:74:25:42:f6:79:8c:83:01:dd:f6:0a:76:18:be:99:
         c7:4f:3b:44:a6:2c:a6:b9:3e:e9:89:8c:44:1d:34:d3:23:2c:
         39:e3:86:6c:b4:fb:24:0a:73:45:53:c8:cf:45:64:d2:7d:0e:
         e6:3d:f0:8d:57:93:3a:d0:57:8c:3e:b0:0a:a1:a6:92:0a:40:
         86:e3:b5:5a:cf:ff:60:30:65:82:49:b0:28:b8:51:7e:2e:b1:
         a4:12:62:c0:80:46:53:30:bf:7e:86:19:b8:8e:55:df:5c:e1:
         46:6e:bc:39:ef:01:bc:52:95:82:19:0f:e7:d8:d9:5a:a7:b5:
         91:27:ae:95:1f:40:2f:e6:75:9d:16:44:20:67:c7:b6:26:88:
         8c:7e:00:fe:89:88:eb:72:91:79:7a:f6:8c:52:09:0f:f5:c6:
         dc:81:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:40 2026 by rpki-client