Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/946a58c9-5b75-3722-b2c3-2cb9ce666058.roa
File:                     946a58c9-5b75-3722-b2c3-2cb9ce666058.roa (raw, json)
Hash identifier:          6UagndBySHpbL5IqgJms4+s708kwuvfsO1gmPNIcdOk=
Subject key identifier:   06:52:C2:74:FE:9A:65:24:C6:53:65:63:7E:0C:6F:CA:7C:74:13:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B08BB215972851BED19F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/946a58c9-5b75-3722-b2c3-2cb9ce666058.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1488:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:8b:b2:15:97:28:51:be:d1:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=e76229a4-3e2d-414c-8445-6eba25da8873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:44:fa:0a:25:fd:0c:4a:05:cf:67:64:0c:
                    e8:6f:2a:e7:29:1f:ae:77:36:ca:b7:e3:49:b9:9d:
                    03:0c:22:c6:72:86:d3:b0:0a:c9:84:92:c0:81:0a:
                    37:f4:c3:1d:f3:09:c7:98:00:5b:5a:43:76:a8:82:
                    cf:cf:6a:18:3e:33:f0:85:67:d4:84:33:03:23:58:
                    71:f7:68:fc:28:88:d3:28:f2:ab:ce:ef:dd:b1:c3:
                    47:80:1b:39:67:70:fa:16:c8:3c:86:c2:3b:b9:58:
                    f9:f6:c8:1e:6d:64:d4:1b:80:52:54:85:a3:30:f5:
                    4f:ef:21:3a:0a:49:06:78:7d:00:30:98:a8:6d:2b:
                    35:71:ad:69:89:e1:da:f7:f3:34:1a:e5:e7:70:94:
                    fd:73:0f:9b:71:ca:1d:46:20:33:4f:ba:d8:7a:5c:
                    76:b0:99:99:ce:5f:eb:f0:f5:e7:88:5f:e3:84:36:
                    3c:19:e9:0f:3d:da:b4:ba:05:a8:6f:b2:42:7f:92:
                    eb:d5:20:79:93:22:05:6b:d4:95:ad:8a:b5:d9:65:
                    e4:b2:5f:96:5a:6d:68:c2:7e:19:02:5d:fb:c8:02:
                    18:23:81:42:3c:cf:ba:71:3a:7f:64:13:77:b7:c9:
                    3d:b7:1b:1d:c2:a3:49:84:2b:41:3e:6c:2a:54:8c:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:52:C2:74:FE:9A:65:24:C6:53:65:63:7E:0C:6F:CA:7C:74:13:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/946a58c9-5b75-3722-b2c3-2cb9ce666058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:98:6a:a4:d4:a9:f7:be:46:8f:42:b3:e9:9b:bd:05:34:
         b6:0f:c4:d0:18:b5:29:0f:e0:bd:fc:57:09:f7:47:60:e8:cc:
         b2:ab:a1:2d:62:d7:33:c6:b2:a6:99:a7:5c:c1:d9:bc:f9:cf:
         e4:f3:79:42:fd:7f:fa:38:60:61:45:be:cf:db:43:7e:44:0a:
         a7:12:a8:b6:0f:c2:a5:e6:56:86:9f:cd:bf:43:bf:90:ca:6e:
         40:55:cd:88:d8:9b:5e:85:1e:a3:1c:c5:24:14:ef:f7:29:19:
         de:40:cc:f8:f3:db:f1:3a:6c:21:a1:6d:b7:af:32:cb:40:ea:
         13:b4:b5:f5:87:c8:6e:73:5e:22:11:2d:3f:6a:29:ea:97:2a:
         cd:ab:c6:8b:50:f6:d1:16:33:22:fe:8d:2c:ae:a6:69:db:aa:
         2c:db:f0:0a:5a:24:8f:8a:6d:f7:63:75:9b:ee:3c:df:9e:2a:
         68:05:46:cc:48:eb:39:45:99:69:01:c0:90:76:b8:df:21:94:
         27:93:f6:3b:42:f5:8d:1d:4d:6b:b0:b4:3c:9b:07:83:0d:be:
         b6:4e:56:93:5e:94:72:0e:4c:17:ce:9c:dd:90:6c:43:92:d8:
         8b:ac:43:d8:a0:ca:8f:e1:d6:ba:18:9d:06:15:fa:5c:bf:7c:
         37:15:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:26 2026 by rpki-client