Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b41b5e8d-a95d-3e1b-97d2-8f5b3f9c7421.roa
File:                     b41b5e8d-a95d-3e1b-97d2-8f5b3f9c7421.roa (raw, json)
Hash identifier:          TTb2CAU/ryUIlN74nZZz64CHcXJ26hVYY9l/9Q8WDc0=
Subject key identifier:   67:39:F8:88:9E:9F:B8:E0:78:17:3A:62:71:08:D1:F4:E7:42:AF:59
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE15098D974BAF2914F48E7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b41b5e8d-a95d-3e1b-97d2-8f5b3f9c7421.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1417:7c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:98:d9:74:ba:f2:91:4f:48:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=4adb41d8-ce69-473d-bba4-5c6f721416b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:5e:4f:a9:a9:f9:4e:06:12:49:0c:cc:be:
                    70:79:27:f7:d1:f7:9b:f6:85:ae:60:40:9f:7a:d4:
                    0b:30:37:6b:93:5f:ac:0e:7d:ef:3e:8a:23:3b:1b:
                    6f:8d:be:6c:77:18:c2:13:ab:37:69:54:3b:43:ab:
                    f3:cc:36:c9:86:25:b2:b6:59:f1:86:03:60:db:86:
                    f1:82:6f:58:a5:51:38:04:c8:e9:26:7d:f9:a4:76:
                    0a:32:57:96:37:f3:ce:5f:f9:a5:67:0b:f9:c6:7b:
                    68:c4:22:00:82:3f:38:2e:6b:94:52:61:21:26:dc:
                    ee:c8:f9:25:8f:ea:45:60:d0:ad:c8:d1:e7:97:f1:
                    e5:f3:91:ec:ed:67:3f:5d:2a:7d:76:b7:b0:9d:76:
                    84:0c:16:e7:b8:70:43:eb:02:c0:f9:2b:9d:35:8e:
                    cf:2e:f3:54:91:98:88:65:64:b6:7b:20:49:05:6a:
                    57:b3:d9:3c:72:26:b8:f3:bf:fc:a1:46:ca:2f:9b:
                    c6:8c:74:a4:bc:9d:0d:92:e5:44:19:fc:53:aa:2f:
                    81:94:54:62:8c:78:85:f0:6b:46:bd:b6:6f:af:2d:
                    b4:8e:cf:7c:2a:2b:75:39:c6:75:df:0a:2d:63:f8:
                    ae:f3:8a:ad:6d:da:67:69:9c:ba:40:d2:a7:e3:ae:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:39:F8:88:9E:9F:B8:E0:78:17:3A:62:71:08:D1:F4:E7:42:AF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b41b5e8d-a95d-3e1b-97d2-8f5b3f9c7421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:7c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:5f:09:3e:3d:d1:df:91:31:7d:cf:73:74:b7:a4:fd:07:
         b6:1e:a3:6d:c3:38:72:ed:67:8e:bd:d0:91:67:3f:24:56:3e:
         0f:29:2c:da:56:1e:5e:ec:6e:35:01:c5:6e:df:1e:fd:3f:b0:
         89:74:97:b6:f3:76:e0:2e:bd:fb:24:7e:44:e7:c6:b9:90:dd:
         52:4e:3e:ae:9f:e3:2c:0b:b8:e4:1b:b8:13:63:63:4d:6f:a3:
         0f:d4:5f:85:d8:6b:e5:4c:01:cd:98:e4:9a:9c:32:9c:3c:da:
         47:93:3a:cb:15:0a:d6:0b:61:c4:b1:df:47:db:bf:98:5c:2d:
         19:29:6a:ac:11:a9:98:79:a9:38:9a:02:e8:da:5c:5e:06:e8:
         2a:8d:0e:e5:a2:9b:a0:6e:83:f4:35:48:19:f0:12:c7:9a:6a:
         e0:f0:cd:6f:01:c4:f6:e6:1b:78:fe:70:89:f0:c8:51:c0:9c:
         af:4c:41:c7:c8:da:b8:ea:24:6a:7e:cf:cf:2b:6a:96:f8:17:
         fa:cd:fa:fb:98:7e:51:5b:e0:a2:0f:92:d9:6c:7e:da:6a:6a:
         4a:9f:0a:b1:ec:fe:fc:35:f5:ff:43:99:cb:de:31:95:c5:e4:
         69:1b:31:ee:32:de:57:fb:fd:8b:f1:a0:2c:db:b2:92:18:dd:
         19:f5:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:02 2026 by rpki-client