Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c583cdc6-5953-305a-b5b9-0332ad7c0b00.roa
File:                     c583cdc6-5953-305a-b5b9-0332ad7c0b00.roa (raw, json)
Hash identifier:          iJGXpp6xpGAiFX7O5OT03+UFHiKFPUxiL3nAAtQ/WA0=
Subject key identifier:   FB:95:A3:AB:02:7F:C5:84:F3:6B:6E:A3:8B:F1:84:00:46:C7:4F:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE15096FBE694989C72489A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c583cdc6-5953-305a-b5b9-0332ad7c0b00.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1408:9c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:96:fb:e6:94:98:9c:72:48:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=25eb368b-39dc-4f94-9801-abbcc0148878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:12:ec:65:23:61:79:bb:c8:ee:0c:43:c6:
                    e7:d4:16:f8:b4:b8:65:1c:c3:69:29:41:b2:1a:60:
                    ae:61:67:2c:93:49:fb:d8:07:3e:82:ab:7d:7d:2e:
                    0a:63:89:5f:48:de:c8:4e:94:e4:a2:a4:01:5e:f8:
                    f7:38:c1:a2:29:5f:6b:2c:3c:0d:ff:9c:76:26:d3:
                    fd:71:b7:23:c5:ad:b8:6f:7e:95:d1:7f:48:2d:85:
                    b8:e3:4d:7c:56:d9:37:e7:f4:9d:94:a9:5d:e3:b2:
                    67:d6:1c:c5:d6:23:e3:c3:9a:e7:f2:9c:50:7c:1a:
                    83:ec:d3:1f:d1:39:6f:3e:d2:9b:ae:c3:0b:b3:4f:
                    06:66:ce:15:c8:38:13:95:a7:e3:92:11:57:1f:57:
                    3d:ae:f5:99:9a:b3:42:d7:ee:6d:78:eb:65:66:65:
                    fc:e5:65:11:b1:e5:43:bb:66:a1:c7:62:3f:bd:ab:
                    95:af:e4:44:f5:f8:7e:03:c8:41:1a:88:c5:d9:b9:
                    18:7a:6d:5b:38:76:d0:f2:cf:3e:05:5c:a2:62:cd:
                    ea:cd:9b:67:97:71:ac:a9:e0:25:e9:66:42:01:d4:
                    29:66:20:b9:f7:53:0e:a0:2a:59:ee:81:f9:4c:cf:
                    54:bb:f6:71:af:cf:60:18:af:f4:91:41:be:43:9f:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:A3:AB:02:7F:C5:84:F3:6B:6E:A3:8B:F1:84:00:46:C7:4F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c583cdc6-5953-305a-b5b9-0332ad7c0b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:9c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:47:66:ea:0f:97:e2:f2:bc:0b:53:d1:d1:86:cc:52:ba:07:
         3a:ec:01:9f:da:6a:e0:81:88:b3:69:4c:c4:72:30:a6:16:8a:
         7c:36:b7:4b:88:12:d2:c9:09:fd:22:1f:65:2f:fd:ab:9d:3d:
         f3:91:d1:a7:f5:86:93:01:48:e2:79:6a:7f:1b:5d:90:b2:b6:
         a1:58:7c:55:07:74:4c:81:51:5b:07:20:b4:ef:a0:ec:27:e2:
         08:6e:24:7e:b0:e4:23:84:2d:e1:28:4c:bf:f9:15:8c:af:38:
         17:12:6c:5f:7d:45:41:a3:09:b9:d8:5a:1d:21:2b:06:b3:9d:
         b4:90:7c:7d:39:01:90:e2:73:99:89:3d:07:34:4d:ab:0c:38:
         a6:34:cd:19:8e:1c:72:29:eb:00:96:66:af:77:5f:93:83:34:
         d4:a8:40:db:5a:3a:93:8a:8e:51:04:09:31:ce:be:2d:85:7d:
         b3:e0:cd:8e:28:c0:2d:ad:bd:f7:7f:45:1e:87:da:62:cc:20:
         6b:5e:52:fb:3d:dd:e8:0e:03:a8:6e:3e:52:19:f7:ee:c6:a6:
         9e:9d:5d:25:70:b0:e8:8e:88:cb:eb:ff:be:2f:f4:7a:d2:67:
         2b:71:52:47:0a:e0:6b:52:b4:20:7f:e8:90:5a:a8:75:48:c9:
         bd:15:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:31 2026 by rpki-client