Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa
File:                     a37d3462-f756-3b6b-a807-22c3f937f7a5.roa (raw, json)
Hash identifier:          PDcN9jUinZAvvjLg1t1zSatM8U9Efp3yCUSoWubzNvM=
Subject key identifier:   78:90:ED:81:97:2F:8F:FE:13:28:E0:25:15:8C:80:78:AA:A7:B4:37
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE1508F261E2EC484195AB880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:140b:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:8f:26:1e:2e:c4:84:19:5a:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=0feadfdb-7386-4fc9-b34c-34c9d2ed2b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:2a:16:fe:38:33:2e:32:f3:ad:fa:58:34:
                    7b:c1:e7:14:b5:24:77:d2:7d:d9:2e:43:bf:17:63:
                    63:84:90:31:d0:0d:a6:80:7b:29:e9:be:90:bd:d7:
                    e8:36:2e:54:af:66:c1:61:7a:b1:81:f9:30:fe:39:
                    99:fa:11:86:4c:da:fc:9d:22:b2:e8:09:63:b4:68:
                    9d:19:70:1b:a7:8f:fe:5c:15:43:07:05:03:23:8e:
                    f8:d0:68:f4:1a:cc:b0:7c:c2:2f:4d:c6:d6:19:15:
                    9c:b3:02:d7:18:48:37:62:1c:59:f3:a5:78:60:a8:
                    8c:0a:7e:0e:2a:40:34:ed:9f:9d:94:08:43:f7:ba:
                    49:40:77:7b:ae:ad:18:fe:50:45:cf:68:81:09:61:
                    bd:fd:c6:ec:27:cc:6f:44:0d:48:17:a0:13:2f:ec:
                    8f:bb:28:82:71:16:34:42:af:8b:87:f4:e1:b1:69:
                    3f:d5:9a:5a:a7:71:54:1a:59:14:a3:52:bf:e9:60:
                    bf:1a:1c:2d:dc:b5:76:8a:22:08:13:3f:e3:2d:bb:
                    77:37:24:c1:b1:ee:b0:b4:49:c4:52:04:19:95:14:
                    53:37:d8:d3:62:19:5e:23:70:43:58:fb:1f:ad:28:
                    86:c2:eb:51:76:02:44:c6:89:3c:4a:53:54:d3:16:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:90:ED:81:97:2F:8F:FE:13:28:E0:25:15:8C:80:78:AA:A7:B4:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:1d:e0:2d:fd:8a:77:9a:48:92:78:ef:f9:23:cb:0e:8e:
         5b:ce:52:53:a0:68:9b:83:f1:62:76:c5:d7:e4:c2:ab:1d:1c:
         53:73:d7:8b:ad:74:6d:30:9c:fe:d7:29:e1:5e:b3:d9:05:d1:
         e9:86:61:59:80:02:d0:19:0f:eb:b5:7b:ea:a1:66:bb:27:10:
         8e:52:c6:60:38:dd:12:b8:8e:7d:7c:0c:2d:4e:16:bd:c6:e5:
         f2:f7:04:00:99:dd:ab:b2:88:21:d7:71:ba:5c:6e:26:f8:97:
         4f:e1:16:66:d5:2f:e4:b6:08:f9:f7:3f:3a:f6:56:a5:72:10:
         1a:05:73:fd:ff:73:34:c1:4e:05:64:eb:c8:2d:c4:73:67:e2:
         35:0d:a1:da:8f:79:8a:53:f7:f0:df:4e:37:75:a1:ff:00:2d:
         0a:dc:22:fe:8f:8b:dc:1b:f8:5d:a2:7c:e6:5c:5e:41:e9:de:
         83:a8:ec:02:02:89:19:2d:52:43:ec:7c:a1:a2:1e:6c:c1:e7:
         a7:91:05:7c:b4:01:9e:24:1d:ae:26:57:aa:5c:fb:55:50:91:
         bb:d4:0a:25:55:68:5c:59:3d:5a:d1:db:7e:f7:38:75:08:7d:
         95:9a:fd:83:76:5b:c3:82:b8:3b:30:5f:33:ae:1e:f3:2f:fb:
         77:43:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:30 2026 by rpki-client