Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf518935-f2e7-3f2f-b9d8-97d3eb4a129c.roa
File:                     cf518935-f2e7-3f2f-b9d8-97d3eb4a129c.roa (raw, json)
Hash identifier:          R3AccDgoWP9VK7xNYOaYDlfzmAzvtGyr694+Pf9B8n8=
Subject key identifier:   F6:4D:FA:2E:84:8C:A3:72:7D:22:85:58:32:66:4F:B7:E0:67:7F:CB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE150956662C5F51E1F44CC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf518935-f2e7-3f2f-b9d8-97d3eb4a129c.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1403:a400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:95:66:62:c5:f5:1e:1f:44:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=49dbf340-d771-4f36-a501-dfbea0dd409e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:0f:43:c7:9f:07:19:06:d8:3a:c4:da:fa:
                    70:6c:e9:47:2d:ac:1a:4a:e6:d9:96:b2:6e:e9:af:
                    d1:5b:e6:9f:23:3d:c6:0c:2b:c3:e2:37:ba:fe:7a:
                    e5:1c:d6:1f:ee:70:4c:d4:41:6d:10:3d:a8:1a:77:
                    c5:2b:54:9f:dc:e3:42:ff:b8:28:e7:26:8b:86:4f:
                    23:2f:32:a7:2b:3e:fa:e5:94:63:cc:06:41:dd:02:
                    c0:8d:b2:48:69:60:d0:61:d4:5a:9a:58:fb:0b:b8:
                    c7:5e:39:a2:17:d3:b5:fc:a7:33:e3:0e:35:5f:21:
                    6f:e3:5e:af:02:fd:df:29:fe:0d:c7:a1:55:18:95:
                    c0:d3:d8:d1:eb:89:18:ac:a3:01:dd:1c:2a:0b:d9:
                    6b:10:d7:76:ee:ab:86:05:0f:6d:e7:67:0f:e3:22:
                    57:a4:95:5e:d7:07:0b:46:92:54:38:2b:f7:ce:34:
                    a5:c6:53:4b:a1:d6:01:3c:95:49:a0:bf:65:55:f7:
                    e2:23:ce:b9:24:0c:89:b1:44:0c:16:4c:4f:fd:dc:
                    cb:75:75:04:f1:8c:31:6a:e8:6e:70:b3:95:44:cf:
                    7e:57:1f:2f:30:38:d1:ec:30:29:62:15:42:2c:33:
                    50:3e:60:18:db:27:f6:77:00:ca:c3:8b:f4:1d:ed:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4D:FA:2E:84:8C:A3:72:7D:22:85:58:32:66:4F:B7:E0:67:7F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf518935-f2e7-3f2f-b9d8-97d3eb4a129c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:a400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:49:34:6f:fc:d7:aa:49:ae:3b:9b:c1:f4:fd:91:a5:c2:0c:
         12:f8:d9:49:a9:d5:13:21:8b:fb:d5:d1:d8:5e:e8:87:f0:84:
         35:88:ef:1f:fc:d3:2a:70:9e:07:4e:58:9f:b2:9f:ab:90:4b:
         0d:5d:58:d7:ab:ec:5e:0b:81:79:97:1c:75:98:25:fe:cd:cc:
         5f:b8:1f:d6:8a:e8:35:c4:78:40:82:1e:0b:f1:8d:a9:94:f8:
         06:37:7c:90:d7:09:65:07:93:36:c6:fc:ec:35:d4:7e:03:fa:
         5e:02:dc:7a:3b:c6:27:3e:67:3a:dc:14:3d:c2:d0:51:ca:c7:
         f5:38:72:9c:60:7c:67:aa:b3:b2:31:be:86:12:30:a0:c4:90:
         fa:60:4b:92:1c:ec:b0:b2:c4:e8:84:33:7b:c2:b7:89:bc:74:
         4c:ee:a4:da:c6:28:11:92:3e:5a:90:ec:c5:9b:44:88:81:8e:
         cd:fd:57:ed:e0:ad:ab:a3:a0:a3:13:5c:09:da:bc:61:1f:5a:
         bf:c3:6b:d8:bb:a5:97:64:0e:f2:f4:17:a7:23:11:bd:c6:da:
         10:cd:30:76:4a:a4:6f:a6:13:84:02:b7:6a:d2:3f:2e:0a:10:
         e8:77:36:74:a6:49:d8:e0:19:c8:34:5b:31:3c:a6:d2:9b:22:
         02:fa:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:33 2026 by rpki-client