Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85636a31-66ba-36b5-afab-7e4228b33754.roa
File:                     85636a31-66ba-36b5-afab-7e4228b33754.roa (raw, json)
Hash identifier:          RHnphpb9bO8w8JNFUB2KZtfEhh+WjT8czinIYT2nCYA=
Subject key identifier:   F4:8D:A1:58:FE:40:AB:49:79:4C:15:8D:B7:8B:FA:E8:A8:A5:57:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F7E7DC6496D7EEE1492E02360
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85636a31-66ba-36b5-afab-7e4228b33754.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     63949
IP address blocks:        2600:3c12:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c6:49:6d:7e:ee:14:92:e0:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=7cf376ed-b624-484b-a756-456e4e8d6422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:ff:90:53:b2:9f:4d:16:8a:f8:10:e6:e8:
                    66:9a:ab:ea:82:61:04:a0:62:39:f9:52:94:cf:ec:
                    d7:d7:7d:86:5f:fd:28:e4:df:dc:bc:24:2b:b7:d8:
                    b9:e0:5b:bd:13:88:8f:f9:a6:c7:31:54:2c:1e:f7:
                    3a:da:8f:da:cc:87:6c:f7:21:72:09:92:e5:1e:47:
                    01:b3:b3:5c:48:02:22:9a:2c:0b:d6:48:8c:26:35:
                    de:b3:8a:be:32:89:f3:53:87:df:77:00:61:ee:74:
                    83:1d:60:a0:14:59:44:0c:26:77:6a:58:7c:ef:c2:
                    21:22:d7:ab:de:16:75:69:97:81:62:d8:9b:1a:48:
                    42:b0:27:7e:4b:68:91:d2:55:7e:24:64:dd:c9:ea:
                    1a:d5:7a:d2:a9:9d:aa:e9:2f:a2:4e:21:50:51:ff:
                    0c:8b:b5:aa:93:f4:9b:66:66:f9:b5:52:0f:0b:4f:
                    ca:d4:b3:9c:da:a4:1e:23:be:e3:bc:54:99:c0:8f:
                    8c:82:43:a2:6f:5c:49:30:2e:2c:67:99:72:0a:fd:
                    2e:1c:c1:5a:29:20:30:67:e2:8e:0f:5a:49:92:bc:
                    f3:4e:1c:ea:42:64:d3:a3:f6:77:ac:1e:71:8b:e6:
                    4e:44:48:d5:78:1a:3d:25:42:27:05:ab:37:77:03:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8D:A1:58:FE:40:AB:49:79:4C:15:8D:B7:8B:FA:E8:A8:A5:57:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85636a31-66ba-36b5-afab-7e4228b33754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:db:43:9d:fe:ac:d3:6c:b2:4e:b0:ca:af:33:f3:b9:3a:64:
         52:1c:a3:b3:70:c4:46:20:ed:af:1c:90:1d:d6:ce:d5:9c:dc:
         c6:f6:ee:91:b2:22:7f:a3:46:1d:3f:f6:03:b7:89:b6:8e:8b:
         ef:a3:e3:3f:b2:62:f5:05:e4:73:d4:ac:c1:9c:b2:ce:88:c8:
         40:74:a3:c1:9f:96:bf:76:30:f2:b7:c8:68:a2:2e:d1:1d:3a:
         a8:31:24:ef:63:80:02:02:26:2d:3f:1a:de:69:e6:af:c5:d1:
         22:8e:e2:90:42:ec:e8:ce:2f:93:13:1b:f4:4a:f2:34:b7:eb:
         62:ef:03:75:c5:89:14:be:23:7b:aa:06:c5:aa:58:6c:f8:51:
         3a:a8:53:76:8a:ca:22:1e:44:e0:19:81:10:2a:27:69:7e:30:
         5b:82:bc:0d:71:cc:42:48:91:a5:d7:f0:39:47:84:8c:54:32:
         94:68:6f:f1:34:15:d6:74:d5:f5:bc:53:76:12:62:e6:bd:9c:
         9d:b2:c6:fe:96:cf:6a:84:f9:63:f4:23:8f:c7:26:8a:d4:a3:
         19:8b:92:e4:41:63:9e:5b:fd:df:a6:d0:9d:67:b8:16:42:30:
         22:4b:91:6c:93:e5:c7:6a:87:fe:df:00:82:94:c7:63:5b:42:
         ee:a2:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 15:25:29 2026 by rpki-client