Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c403fc80-3489-3e51-8fa2-015a0fabd0df.roa
File:                     c403fc80-3489-3e51-8fa2-015a0fabd0df.roa (raw, json)
Hash identifier:          k7iJT7bCBVYFzuAc3KS2ymRe3SrMBPGWh23xDzbtLEQ=
Subject key identifier:   DA:75:49:E8:20:31:5F:79:AB:BF:81:2A:13:F6:41:C9:29:46:8A:90
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E929F5C451FFD4D4F6B737C70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c403fc80-3489-3e51-8fa2-015a0fabd0df.roa
Signing time:             Tue 21 Jul 2026 13:17:37 +0000
ROA not before:           Tue 21 Jul 2026 13:17:37 +0000
ROA not after:            Mon 19 Oct 2026 13:17:37 +0000
asID:                     33905
IP address blocks:        2600:14e1:8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:9f:5c:45:1f:fd:4d:4f:6b:73:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 21 13:17:37 2026 GMT
            Not After : Oct 19 13:17:37 2026 GMT
        Subject: CN=7e217c0e-8528-4133-a717-6876676ce75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:6a:ee:4f:44:23:b1:4c:b4:f3:1d:0c:98:
                    d0:92:cb:d8:c9:a9:c6:f0:c2:cc:6a:70:ee:ef:7e:
                    6e:f8:51:d4:fc:0b:e5:e5:35:da:6f:8a:00:f5:14:
                    0a:cd:19:d4:f8:48:cc:49:91:06:0e:04:f0:2e:47:
                    d0:69:aa:a1:2b:a1:7a:81:92:0e:84:17:61:e5:fb:
                    38:63:bc:5a:ef:55:7f:76:71:1f:d6:02:09:fc:61:
                    2b:7d:49:d6:45:7f:9a:fb:df:c4:97:a9:68:5d:94:
                    a1:9a:7e:d7:56:00:0e:72:aa:e1:d9:b4:db:0a:8d:
                    13:6c:05:84:53:c4:b8:1b:d7:99:f5:26:88:08:95:
                    3d:5a:70:3f:35:39:ef:20:1b:ee:e4:09:13:ff:9c:
                    6d:50:66:a3:f7:48:8b:ba:e2:dd:5a:6c:37:1b:1a:
                    94:f8:f7:15:19:26:1f:30:1e:c7:7b:67:35:3d:71:
                    01:17:13:11:c4:f7:ea:86:7f:bd:f7:a9:5c:19:ed:
                    cc:a0:8d:20:19:d4:41:ee:a0:dd:fc:87:c4:be:26:
                    8b:18:50:73:d9:77:9c:fb:11:cb:44:8b:7e:21:76:
                    88:a0:f4:3a:04:28:8d:98:40:f8:70:5c:8c:a6:42:
                    43:58:d6:92:fe:8f:97:5b:cc:0e:90:85:dd:99:40:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:75:49:E8:20:31:5F:79:AB:BF:81:2A:13:F6:41:C9:29:46:8A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c403fc80-3489-3e51-8fa2-015a0fabd0df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14e1:8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:56:bd:ea:58:bd:c5:22:b0:87:ee:97:2a:f0:c9:56:8a:12:
         6e:81:d5:82:1b:ac:1b:84:18:2a:83:af:44:41:0d:45:f6:01:
         79:01:f7:20:db:03:82:d3:0c:6e:48:72:0e:8a:b4:60:8f:50:
         00:40:8a:95:58:b3:37:76:f8:de:a1:0a:53:c9:c0:f1:37:ea:
         df:cf:00:f6:66:7c:5e:94:93:42:29:9b:d0:85:68:a7:36:2d:
         c6:02:2f:cb:9a:0a:77:dd:25:a4:cc:f9:a2:30:56:5e:82:33:
         a1:b1:a8:a2:c5:a0:a6:81:ad:af:67:84:13:35:bf:09:8e:4f:
         73:e9:de:17:f5:79:05:8f:67:a6:11:f3:a7:de:0f:01:12:ef:
         71:a3:8f:8b:47:e8:9f:f6:bd:50:c0:b6:65:f1:af:9d:38:a0:
         e2:52:05:b8:dd:26:34:2f:98:24:b8:1c:20:4d:f7:06:c4:f2:
         17:1d:85:6a:9e:d7:8c:ec:5f:08:43:04:af:ea:a9:8b:47:9f:
         4a:49:a6:bb:29:66:83:07:a8:a1:6d:dc:3f:e2:ec:eb:c2:4b:
         6f:54:0a:25:41:5c:02:65:d5:6c:9e:2e:92:66:42:83:40:20:
         3a:d1:a9:36:b4:d0:84:4f:e3:dc:38:28:e5:ff:54:3d:9e:5c:
         69:b6:08:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:32:35 2026 by rpki-client