Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa
File:                     ae290034-ca5f-35e8-93ce-18407f143586.roa (raw, json)
Hash identifier:          GE8dK5VqqWK1S7JsCx85rm14rhdPV5bfVgtdaD2vP+w=
Subject key identifier:   5F:86:98:09:8C:B0:D8:CA:7D:39:A2:42:44:80:EC:CD:C0:A7:FF:AE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BDBAA23B5372B6C60980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:140b:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:bd:ba:a2:3b:53:72:b6:c6:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=bdd31324-0ec8-4a08-b432-c7065755d75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:96:4a:bb:dd:18:29:8e:8e:41:c2:6a:b2:3e:
                    62:f5:01:c8:14:12:5a:a8:74:b4:7c:21:27:e8:a6:
                    8e:72:1c:e5:99:a0:dd:84:3c:f7:7a:d3:d1:7e:fd:
                    80:67:79:e1:0e:bd:ba:0e:06:74:d8:23:3c:05:52:
                    08:4b:0e:2a:c1:d9:bd:4b:bf:ed:54:6e:1f:44:ca:
                    83:59:5e:e9:d9:3e:01:cf:cd:55:bd:79:87:8d:74:
                    4d:99:33:f1:04:97:c8:13:5b:4f:9b:f2:82:a5:96:
                    b6:d6:c0:a6:06:12:96:ff:59:7d:88:84:4c:ca:33:
                    98:7a:47:cd:c9:18:be:2b:5b:96:9b:e5:e0:c5:fc:
                    9e:51:a4:d8:06:ac:bf:2f:25:fe:38:0e:07:65:49:
                    ad:73:5d:3e:74:1d:43:45:b3:66:54:5e:e1:9f:67:
                    e1:d8:12:b6:c7:42:2c:0b:54:c8:67:c0:f9:52:50:
                    43:be:03:9b:7d:85:32:67:61:0f:bf:55:75:a5:b1:
                    e2:cb:ce:89:c6:a4:4d:63:6e:6a:fd:34:13:ef:cd:
                    94:1d:51:be:92:d3:15:0a:d7:e3:1a:69:c1:69:b0:
                    aa:73:1f:3a:e2:99:51:08:f2:fb:62:98:20:b3:6c:
                    72:5c:a5:50:62:17:c9:2d:18:6d:c5:29:71:d6:3b:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:86:98:09:8C:B0:D8:CA:7D:39:A2:42:44:80:EC:CD:C0:A7:FF:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:59:31:bf:af:de:f4:c8:7f:bb:de:a0:0e:67:39:c0:5e:46:
         11:dd:5d:61:5a:01:1a:39:41:2d:45:fc:aa:af:f5:ff:40:a6:
         f6:92:9d:ac:7c:84:22:6d:1c:af:42:e2:a5:2a:ca:46:e9:83:
         19:36:6e:2f:8a:8a:0e:90:19:dd:9b:e4:6f:97:d9:cf:78:c9:
         cf:fe:de:a1:05:ee:49:e9:4f:81:a9:8b:8b:1d:c9:8c:d4:b7:
         b8:25:10:ad:2a:ac:ac:68:92:7a:c3:c8:ce:35:69:9c:3a:b2:
         e4:f0:6b:2a:40:69:59:5b:df:ed:cf:a9:54:2a:69:eb:8d:25:
         b9:35:e6:51:6c:65:ab:99:1b:aa:88:36:b9:30:7c:e9:d3:66:
         a8:34:d0:ac:eb:20:86:cc:f2:56:48:d7:b2:fe:dd:1c:5e:64:
         27:52:90:a3:31:26:ab:6c:e5:79:44:fb:3f:9e:69:aa:5d:88:
         e2:bc:f4:39:c3:79:13:3a:bb:6c:3a:e2:00:f2:4f:62:50:14:
         ca:40:4d:40:ee:e3:a9:3c:40:51:bd:11:ef:cf:c2:df:6b:39:
         db:f3:28:f9:2b:ec:d4:1d:79:2d:c2:94:1b:7a:65:86:8c:94:
         59:62:5d:41:d8:23:19:0d:28:7e:be:3d:4c:9f:99:4a:a5:b3:
         98:eb:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:19:15 2026 by rpki-client