Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9150a6b5-f161-30bf-ab8a-6aa8e21fa97f.roa
File:                     9150a6b5-f161-30bf-ab8a-6aa8e21fa97f.roa (raw, json)
Hash identifier:          ySnWTfRehRtJkOAVHQyBcvTMARAesMWCYbJ57FUUfnk=
Subject key identifier:   A5:8F:AF:5D:A8:79:19:A4:78:51:48:04:0B:0D:DC:5C:AC:7D:CE:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DEC7B2E25A39998B880009480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9150a6b5-f161-30bf-ab8a-6aa8e21fa97f.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     24319
IP address blocks:        2600:140b:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2e:25:a3:99:98:b8:80:00:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=4a551db7-6447-4da0-bc5d-3d0f30a77cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:76:e6:90:a8:73:3f:85:b1:31:4f:c6:be:
                    d7:9a:9f:8c:c3:8f:55:3e:85:ec:cf:d5:9f:1b:22:
                    8d:23:69:57:c3:64:2e:d2:51:e8:6b:7e:2c:be:10:
                    bd:7e:0c:09:d6:cb:ef:24:3d:20:b6:e6:a8:5b:38:
                    f5:27:ee:ad:19:05:21:33:95:4d:dd:23:6f:ee:f3:
                    e1:1f:60:c1:57:1f:62:aa:1c:28:1c:fb:f7:07:56:
                    54:e7:36:57:e5:c0:9b:87:0c:4b:76:96:85:53:d5:
                    f1:b4:00:16:d4:1b:60:0b:30:42:f6:fd:63:cf:88:
                    7d:60:6e:5e:c8:5f:d3:6a:2c:41:41:4c:89:a4:01:
                    f0:21:30:6e:41:cc:9f:af:43:a0:5d:61:93:77:5b:
                    57:5c:98:44:09:94:2a:10:82:98:7e:6f:29:0e:97:
                    69:9e:1f:7c:2c:15:6a:f3:90:67:f0:6c:77:69:80:
                    4b:c6:56:11:53:c1:02:c7:19:2d:d2:f2:53:23:27:
                    78:86:11:c5:b7:28:e0:2f:94:a7:bd:0c:97:cc:53:
                    eb:7f:5f:e5:ba:8a:8e:b3:6b:73:b5:a3:f8:ad:da:
                    3e:3a:17:62:1e:4c:01:5b:b2:dc:5d:ad:88:f8:6f:
                    a3:87:f9:86:0b:14:14:ad:c5:59:a7:cb:3f:94:d8:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:AF:5D:A8:79:19:A4:78:51:48:04:0B:0D:DC:5C:AC:7D:CE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9150a6b5-f161-30bf-ab8a-6aa8e21fa97f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e9:95:f6:c3:d1:96:6c:f4:28:9f:6a:2e:84:b2:7a:9f:6f:
         34:c0:1b:8b:fd:60:3f:64:aa:30:40:09:a9:07:6f:f4:ff:50:
         d6:16:4c:75:ad:4c:f6:41:d9:17:f2:b7:2c:c9:c6:1e:6b:97:
         bc:80:e5:40:d3:92:31:b2:08:e1:d7:49:09:61:5f:81:94:ad:
         8b:5b:20:25:bf:77:a6:08:0c:19:a4:44:d2:cb:fb:39:c0:05:
         19:88:09:5e:23:9d:57:86:e9:61:12:64:7d:e6:95:5c:b1:ed:
         ba:69:66:99:e2:a8:37:e9:7e:16:d7:7a:6e:86:f9:35:9c:50:
         06:d3:7c:75:b2:d8:9d:dc:e8:33:4f:ef:41:b0:40:f8:65:a9:
         08:d7:e0:ba:d1:50:e4:d4:b3:1f:12:11:db:3e:b7:e4:56:f8:
         da:be:79:37:17:26:12:31:6d:a7:f7:ed:cd:d6:a2:bb:ab:85:
         a0:16:f0:37:49:f4:f9:df:58:e1:4e:23:87:40:7a:11:2a:97:
         fb:6a:cd:a4:8c:9b:e1:39:9e:92:e4:f1:3e:2c:6c:7d:9b:7c:
         fe:df:8a:13:f5:45:50:69:28:64:43:ed:cf:5d:b6:27:33:b4:
         cd:00:95:2c:b3:fa:c7:f9:35:0f:69:fd:45:d2:4b:99:37:79:
         40:85:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:06 2026 by rpki-client