Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa
File:                     915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa (raw, json)
Hash identifier:          R1Er+PrbgQjWCyiQ8knzkKqM647dd72nIG9K6F13Amw=
Subject key identifier:   24:BF:CB:5A:20:90:CD:5D:6E:F9:EE:BE:AF:E4:68:A0:EA:9E:84:C1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3A2F214E25BFFD76A4326200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     33905
IP address blocks:        2600:1480:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:21:4e:25:bf:fd:76:a4:32:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=27e4c76e-cb0a-4767-9cdc-ab3136bbb947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:ff:f1:c5:7a:48:0c:d2:d3:72:81:31:e5:
                    97:1e:09:b6:a4:fd:71:31:f8:56:58:4d:7a:96:b8:
                    bb:19:a3:e1:4a:12:67:5f:80:b0:88:28:11:3d:f6:
                    f9:69:6b:bd:9f:3a:41:27:40:53:60:28:92:22:aa:
                    7f:24:dd:ca:d8:a6:da:8c:86:4e:e0:88:55:69:52:
                    b5:6f:b5:75:49:6a:68:c6:ee:d8:f8:c5:c9:e0:b9:
                    31:13:b3:61:89:e0:f6:53:09:6d:7f:58:c8:b6:44:
                    fb:7f:60:3f:b8:36:bd:bc:c3:8b:a0:98:48:af:5d:
                    37:2e:5e:59:d3:a6:eb:da:b2:08:40:ce:46:c7:c3:
                    5b:57:8e:63:b0:28:8b:a8:1f:2a:61:2e:3c:62:9c:
                    63:6a:b8:f9:40:12:4c:ad:58:f9:eb:af:07:bf:4a:
                    e2:87:73:f6:fe:ea:56:a6:4f:f1:c6:7b:c2:67:32:
                    40:b5:74:e4:ea:f4:cd:f4:df:84:2c:67:c2:d5:5e:
                    64:ba:fd:d5:a1:91:70:96:bd:a7:72:e0:23:b7:c8:
                    8b:7f:56:b1:9c:1c:cc:5e:cd:49:e1:d4:79:6d:9e:
                    6d:5d:29:3d:51:73:3f:f3:46:60:8b:73:c2:68:58:
                    0a:f2:83:aa:03:30:e6:bf:4a:09:50:13:fd:b8:43:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BF:CB:5A:20:90:CD:5D:6E:F9:EE:BE:AF:E4:68:A0:EA:9E:84:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:da:5e:33:9a:1c:14:01:8b:19:ff:ce:e2:33:27:e9:38:
         04:62:0e:be:71:69:e5:77:43:66:53:07:db:ae:95:ec:8c:20:
         56:c5:f7:70:3f:07:03:6a:c6:88:a1:66:26:13:63:df:b0:94:
         9d:2c:1a:50:90:bf:01:47:35:1d:d2:3d:6c:b3:4d:d2:35:44:
         36:33:ac:42:b2:ba:1f:7d:a3:56:90:17:58:61:ff:36:a5:8f:
         8a:ad:a4:ed:b8:1c:ce:40:12:11:85:d5:40:81:b5:55:e5:40:
         28:7b:bf:0b:1a:df:78:f2:c2:0e:25:35:54:0a:85:29:e7:3b:
         96:51:23:43:ee:99:d8:a4:30:b7:ce:f9:6f:9e:ec:a0:4e:30:
         9e:a0:43:7d:fe:f2:49:3a:5f:c8:d2:84:36:b4:ce:1b:e5:fc:
         5e:24:76:84:c6:f2:15:a2:29:d5:36:10:3d:ee:26:d7:d7:8e:
         20:f8:45:18:7d:66:68:fe:06:a6:69:b4:b2:60:3d:c5:42:87:
         89:0e:ec:d0:d4:5c:9b:7b:fe:54:c1:88:68:22:fe:5a:8c:ab:
         32:55:72:f1:07:97:cb:fd:15:20:44:85:79:34:10:45:d3:3f:
         3b:29:d4:7a:a8:52:63:97:13:53:92:b6:35:2b:3e:c4:c6:c3:
         8c:84:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:33:19 2026 by rpki-client