Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b69c1c4-f955-331a-bfe4-369c94ddf3ce.roa
File:                     9b69c1c4-f955-331a-bfe4-369c94ddf3ce.roa (raw, json)
Hash identifier:          3XIU6H8rhKQLb5tSQfPTbO9LLUo3JTNCC6UN3KCVs10=
Subject key identifier:   39:C7:C6:AA:F9:8C:08:30:E3:CF:10:47:47:76:52:15:79:32:3E:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BE1EE4440B0B45BEA540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b69c1c4-f955-331a-bfe4-369c94ddf3ce.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:140f:3400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:be:1e:e4:44:0b:0b:45:be:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=e5a3521b-3952-4be4-91ad-cd612ad944a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:8a:4a:c7:c1:37:25:d5:12:a9:9a:64:b1:
                    86:b0:ac:02:10:df:23:66:d9:df:d2:6e:3f:e7:e9:
                    8d:eb:00:05:91:fd:50:50:0c:d1:d5:39:f3:fe:4b:
                    a5:b7:eb:b7:f3:59:3a:46:06:ae:fd:ea:af:ec:86:
                    01:5b:15:58:bf:61:32:a5:d6:8b:c5:5c:28:f3:e0:
                    bb:77:0d:58:ae:c7:72:d8:4f:8c:0b:4a:ee:41:6f:
                    c8:18:a7:5b:c9:87:79:92:82:cd:e2:37:6c:e7:6f:
                    6a:b5:8d:80:04:92:93:52:d3:59:30:d6:5f:bb:6b:
                    12:4b:fe:44:69:2f:5e:2c:f3:90:c8:f5:28:2c:36:
                    6f:f1:3f:7c:3f:dd:b8:2e:ca:b4:50:0c:28:11:2d:
                    52:e6:30:6f:f3:7f:90:0c:d8:d1:b8:43:be:43:d2:
                    a8:16:8d:65:5e:d9:4f:27:93:15:47:94:f1:6a:d9:
                    9e:4c:a2:8d:09:b4:1c:db:77:50:af:6a:63:8f:f1:
                    a5:51:e3:22:6e:0b:71:97:1a:ed:f9:73:56:2a:f9:
                    47:84:6f:65:a6:34:c9:0e:dc:1d:41:87:57:79:c4:
                    74:a1:3b:b9:c0:93:61:80:94:ef:d6:e0:0a:81:3d:
                    9c:77:d4:e5:c1:6d:07:84:47:49:f8:ce:79:cb:c5:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C7:C6:AA:F9:8C:08:30:E3:CF:10:47:47:76:52:15:79:32:3E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b69c1c4-f955-331a-bfe4-369c94ddf3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:3400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:8c:c4:1d:78:27:fe:37:f5:87:12:fe:0c:a3:b5:02:ab:
         40:f7:09:86:d9:02:0c:7e:95:57:4b:0b:dc:13:4c:65:22:cf:
         43:3d:45:5e:e9:f2:45:cb:23:b6:4f:16:4b:e0:a0:8e:5d:bf:
         7e:0c:c4:a7:e4:c3:38:95:42:58:45:e3:86:c5:cf:bd:a4:67:
         21:31:87:5e:3b:78:86:88:ab:dd:a4:6d:a6:96:8f:7c:2d:33:
         12:2d:a0:93:95:63:d2:f7:3d:07:75:e9:a8:bf:fd:83:e8:63:
         97:7a:ae:bc:d1:c7:e1:57:4a:0c:3d:ec:3f:e6:4a:84:7b:5f:
         dd:7e:c1:f6:98:ce:9b:8f:de:48:e1:38:a1:6a:5b:b0:9a:e9:
         52:41:c1:0d:cd:7a:b4:20:a6:07:00:59:9b:b6:10:55:8f:1a:
         f9:d0:c0:b9:13:dc:7e:89:db:e4:06:31:25:8f:19:73:aa:ca:
         c4:d7:ad:13:e8:c5:ba:6e:5e:a7:99:df:bf:f1:cc:02:2f:d7:
         50:c0:28:c8:e7:ad:ef:8e:44:74:d0:7f:d5:9c:0a:9f:97:a4:
         57:14:4c:86:3f:ef:a9:4d:56:b4:d2:15:8b:1e:61:6f:b1:96:
         24:1d:e9:02:e6:8d:b3:81:46:45:2c:78:c1:f5:c6:4b:3a:ef:
         c1:7f:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:31 2026 by rpki-client