Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeee308b-57bb-301c-9e1b-6f27c3914edc.roa
File:                     aeee308b-57bb-301c-9e1b-6f27c3914edc.roa (raw, json)
Hash identifier:          UhC9vjStB2HSDBEtQOBblr31rFukyfyFthvijgbgAGg=
Subject key identifier:   AC:B4:6F:C5:D4:CD:41:33:DE:0E:D4:D6:CF:39:99:C7:92:2B:1C:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4129CD6BE11D6570076318E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeee308b-57bb-301c-9e1b-6f27c3914edc.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     35994
IP address blocks:        2001:4878:81e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:cd:6b:e1:1d:65:70:07:63:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=a194e4f5-696d-4a03-a272-a781b4da1053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:a8:f5:e1:9e:70:a6:90:46:4c:2c:26:7c:
                    ba:58:2e:df:0e:70:8f:3e:2d:47:fe:d0:01:1a:a4:
                    5a:1c:26:4e:00:ba:9b:d9:46:84:5a:bc:aa:ab:2a:
                    63:6c:78:47:4f:e0:df:43:b0:77:98:31:b0:d4:b0:
                    04:7c:33:bb:b3:0c:e0:f4:78:de:0c:94:58:75:45:
                    98:0d:e4:63:5f:e3:af:5d:d6:e2:16:a4:fc:19:9c:
                    94:33:4a:37:f3:e7:c3:79:a2:a5:d9:53:99:bb:43:
                    3c:4a:f8:57:57:2d:9e:b5:22:b9:d7:5c:1f:c4:b8:
                    b3:bb:2a:31:5c:33:26:b1:6e:21:bc:72:c4:69:d8:
                    e7:79:b3:f3:ce:37:97:f2:d4:e8:70:20:c5:86:81:
                    fb:85:a5:d3:97:26:dd:21:ec:1f:09:32:b1:c0:e1:
                    57:3b:03:05:b8:45:49:55:db:ed:b9:1e:32:99:cc:
                    66:42:ca:bd:a8:e7:10:94:e4:e2:57:c1:eb:59:98:
                    a6:eb:6e:98:c2:0b:b5:a2:be:73:e1:4d:e9:67:07:
                    1e:b3:b6:71:38:9b:af:3c:a7:21:b2:7d:a6:c9:56:
                    1d:6f:cc:40:e1:e0:87:dc:a9:f2:db:fd:8b:38:5d:
                    c4:ed:9a:43:32:92:de:1c:ad:b9:ed:a1:21:aa:9e:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B4:6F:C5:D4:CD:41:33:DE:0E:D4:D6:CF:39:99:C7:92:2B:1C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeee308b-57bb-301c-9e1b-6f27c3914edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:81e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:40:34:93:1c:93:57:af:c5:50:cb:3c:a4:7f:3d:1b:6b:1c:
         4d:92:66:a6:38:31:b8:7b:b7:f5:b3:f5:cd:88:38:6f:60:58:
         3e:cf:1d:46:82:01:b8:e4:7f:16:b5:1c:41:ef:e3:12:53:8f:
         62:c8:ab:3e:84:e8:cc:69:f8:ee:fd:a5:62:a0:c0:5b:f2:5b:
         00:09:f7:ff:0f:b9:02:4c:2a:9c:91:bc:12:f8:27:ec:38:ec:
         76:4e:8b:92:bb:eb:ff:2a:59:aa:5d:05:5c:13:8f:b1:8d:7b:
         7b:7c:2f:a9:90:1a:2b:35:ed:78:38:39:fd:db:79:31:47:52:
         7b:ea:dc:1e:7d:f8:5b:ad:25:7e:a9:35:b3:3b:57:ce:be:9f:
         cf:f0:5a:5d:ed:31:4c:5f:09:d3:bc:f6:09:f0:e5:d1:f9:2c:
         2f:16:81:3c:2b:e3:cf:00:f8:35:e1:bb:2f:41:38:da:c5:8f:
         93:6d:25:29:22:31:de:45:b9:dd:0a:43:4b:f0:ae:96:c6:29:
         81:4e:cf:ca:22:01:c2:45:3e:9b:72:64:11:83:28:22:0c:26:
         83:15:7f:76:98:82:1d:9a:09:fc:55:e0:ce:ea:bb:01:3e:ee:
         b1:13:7a:e2:e3:a9:31:aa:c7:1d:ca:47:2f:6d:56:ef:e6:09:
         c7:0d:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:41:50 2026 by rpki-client