Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aedda7a9-bfda-37bd-ade0-bdc3af81af0c.roa
File:                     aedda7a9-bfda-37bd-ade0-bdc3af81af0c.roa (raw, json)
Hash identifier:          YDtD1g8690UUNTW1tyJ5QLqHr0lvk4AxMJGc7Y/3a2w=
Subject key identifier:   FA:DD:D7:F6:86:8D:87:69:73:6B:F2:9E:95:1D:A3:B8:4A:66:7A:CD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4984ADF310D8C157DBFCAD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aedda7a9-bfda-37bd-ade0-bdc3af81af0c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1419:4200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:ad:f3:10:d8:c1:57:db:fc:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f56d28dd-508d-47dd-997f-109a068c5e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:f1:95:23:13:e7:5c:1d:d6:9a:30:fc:ac:
                    5b:b2:3a:63:e4:29:0c:85:7d:20:aa:ef:74:35:97:
                    d0:23:f0:1c:7a:8f:ed:c8:26:b5:a9:8b:c8:ed:77:
                    71:67:e7:0b:10:9a:53:9b:7d:c6:ef:1c:14:0d:52:
                    e6:4f:c8:e2:19:32:7b:0d:f7:41:d1:28:b4:1d:e9:
                    34:97:41:2e:1d:e1:40:90:0b:6e:80:02:72:26:71:
                    dd:de:30:36:75:c6:89:6f:a7:0f:1a:48:66:d8:a8:
                    73:9c:fc:74:3b:c8:38:d7:b1:91:6b:c9:00:b1:4c:
                    b8:f5:2f:04:19:c0:b6:6e:2c:78:f1:97:39:bc:7c:
                    ff:84:0c:58:5b:82:68:21:be:4e:d5:79:db:ee:9f:
                    29:b3:3c:9d:3d:66:a4:e4:45:21:a6:1f:18:b9:04:
                    b3:a3:25:80:09:1c:4a:2f:9c:54:4f:29:60:24:38:
                    56:dc:aa:80:f9:53:5f:6c:b0:74:46:c0:28:2b:05:
                    6e:ec:ef:70:ca:c8:8d:a6:82:78:5c:35:ab:59:2f:
                    3d:a8:8c:45:88:a7:ba:76:67:66:b5:8b:60:fb:0e:
                    6e:0e:78:67:a2:72:9a:a9:93:d1:be:e7:0e:45:a3:
                    41:51:f0:1c:46:14:d6:cf:3a:ff:e2:d7:ee:36:3a:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:D7:F6:86:8D:87:69:73:6B:F2:9E:95:1D:A3:B8:4A:66:7A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aedda7a9-bfda-37bd-ade0-bdc3af81af0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:4200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0b:fb:21:94:16:07:41:5a:42:fb:78:98:6d:3d:e5:16:61:
         4c:6b:b0:d1:b1:bb:a7:c9:1f:94:b5:02:3b:f5:bc:78:5e:2c:
         f5:c0:0f:70:be:52:c5:5c:5b:08:72:f8:2b:a8:82:a4:ec:4a:
         26:fb:d5:87:fe:8c:8a:84:4a:42:83:5a:c7:5d:10:66:df:8d:
         0b:09:8c:0e:fe:0e:73:86:34:f3:31:8b:e3:c6:7f:1c:c9:01:
         25:df:05:d0:3d:33:43:04:e3:34:09:20:c2:fc:c1:f3:49:d5:
         85:d5:ad:9b:3d:41:f7:34:cc:23:14:66:7c:72:fd:17:f0:e9:
         7e:dd:68:4b:32:b0:38:f1:65:77:b3:be:a4:b9:a0:12:c3:88:
         2b:7a:7d:ed:99:08:f7:88:4e:dc:1c:ef:c8:ec:5c:49:a7:56:
         e5:45:03:b1:61:e2:bd:66:95:8d:65:c1:de:9a:8a:e2:69:0e:
         83:b9:e3:eb:ef:34:bd:68:38:47:c7:7a:de:fb:e5:45:f2:ae:
         da:35:91:2b:1d:b6:b4:ae:18:ac:c6:fe:45:13:c0:66:cd:a0:
         93:0e:3d:db:a5:1a:e1:c6:a4:6e:b7:5d:95:c3:92:04:75:1b:
         8b:59:6d:07:df:53:44:0c:d1:d3:67:fd:f1:84:75:03:d9:62:
         fd:d4:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:16:33 2026 by rpki-client