Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c29cc643-e633-33d3-8878-82632ef5c701.roa
File:                     c29cc643-e633-33d3-8878-82632ef5c701.roa (raw, json)
Hash identifier:          47vKWCcY/KONW119vwk7w5VZZvF/05fiiaXnukTFxqo=
Subject key identifier:   55:89:8A:82:B6:19:57:20:7B:9E:2E:0D:9E:72:89:B1:8A:41:52:37
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4129CD867348E13959159340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c29cc643-e633-33d3-8878-82632ef5c701.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     12222
IP address blocks:        2001:4878:8158::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:cd:86:73:48:e1:39:59:15:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=1be9145e-8b88-45e1-a086-4870fa956279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:ea:7a:32:2d:e6:25:e4:a1:cf:fe:6c:38:
                    6f:1f:7b:80:84:7a:64:e8:1e:91:4e:b8:37:65:d8:
                    d4:ba:f3:9c:f7:cd:20:db:44:97:8a:6b:4e:ef:6c:
                    96:cb:03:af:a7:4f:27:70:db:64:72:e4:6b:f1:3c:
                    b9:4f:f4:ce:4c:a4:4b:28:b7:10:21:64:ae:75:c8:
                    a0:74:c2:9c:6f:d5:60:ed:b8:10:05:d7:4c:10:0c:
                    21:ff:69:27:a9:69:54:6f:87:55:fe:4e:9f:80:a0:
                    88:a1:42:a6:e2:92:27:6b:22:f6:1e:0b:49:6b:79:
                    ef:1c:66:12:0b:72:7b:35:6e:a9:6c:42:d0:c6:4f:
                    2d:8a:15:d3:8b:7e:46:d8:63:dd:3e:e4:d6:c1:09:
                    cb:d4:cd:bc:db:e4:9c:78:0c:77:59:c5:67:46:b4:
                    fb:97:50:4b:35:80:88:38:58:d7:3c:da:e5:4b:79:
                    58:76:1a:c2:30:91:b4:33:50:31:41:42:0f:83:e0:
                    40:9c:72:30:d5:f9:cd:53:56:94:07:b5:9f:2e:00:
                    a4:bf:cd:42:a3:c2:f6:b3:53:00:c0:f8:3b:5b:08:
                    7d:8d:79:3f:ad:71:84:b2:c5:13:9f:60:8d:11:4b:
                    69:db:5e:11:15:e4:69:3d:75:57:3a:f2:9e:c7:0a:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:8A:82:B6:19:57:20:7B:9E:2E:0D:9E:72:89:B1:8A:41:52:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c29cc643-e633-33d3-8878-82632ef5c701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8158::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:f1:2b:99:9e:74:8a:4f:d8:16:b1:f4:8c:da:53:59:ff:
         8e:d6:71:a5:f9:8a:6f:c3:9a:55:aa:55:4c:22:e7:70:07:fe:
         2f:07:77:76:1e:5b:65:66:1b:5b:44:47:d3:f9:95:fe:2f:6d:
         f4:6f:3d:f2:7a:19:d8:b5:e1:80:33:fc:e6:b7:c7:9e:0c:52:
         49:10:45:22:97:9b:51:54:ca:ae:b8:ad:da:d7:4b:d0:14:fb:
         93:fe:db:1d:07:e2:ef:9c:ef:88:44:cf:ec:84:c5:25:f6:5a:
         8d:da:c6:a8:41:db:98:af:1e:d4:8a:17:35:dc:21:27:41:99:
         fd:0c:cb:51:4c:d3:4a:a2:58:1e:fa:3a:c6:bf:de:1c:53:50:
         21:3a:9d:2e:4a:d3:dd:57:72:17:99:0e:a2:a1:f5:4b:d7:9e:
         cf:75:17:81:7e:cc:89:f3:85:b6:40:0d:4e:1e:ff:23:9a:a9:
         78:2c:a4:9c:b9:20:0f:2d:59:db:76:de:d6:44:79:8d:c2:e2:
         3a:25:3e:8b:f8:14:04:f8:c8:da:68:b1:67:25:82:7f:b8:b7:
         4b:2f:26:3c:a1:b4:8a:7f:c1:a3:e6:bf:f9:08:43:d6:f9:ed:
         f1:1a:06:5d:2a:1e:19:5d:07:a7:68:f2:ab:d7:11:e0:5d:e4:
         fd:26:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:41:41 2026 by rpki-client