Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa
File:                     da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa (raw, json)
Hash identifier:          Zn5HPwXH8BU+p9GzNmnHstQx5iM8a1q0Iq0YTinPKJk=
Subject key identifier:   AB:DC:92:5A:E8:F7:9F:7A:58:65:83:B7:A9:08:83:7F:C6:1A:64:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE1508D2182FAE9F6E9516500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1404:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:8d:21:82:fa:e9:f6:e9:51:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=2f5e5212-9333-4cf3-bf7a-432a2ff851bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:34:25:7f:71:c4:18:39:61:f1:6c:5f:9e:
                    ac:7b:9f:2c:47:52:23:1d:78:d4:cb:da:e2:2f:8a:
                    f7:80:5a:4f:b6:a3:e5:eb:d0:ea:db:d4:21:02:0a:
                    a9:88:26:cd:db:2e:e7:c4:01:1c:0f:0a:c0:a8:85:
                    ce:bc:11:f8:d5:1a:7e:c2:70:07:b7:2f:1a:ad:07:
                    fc:03:b4:16:ef:7e:87:0f:1e:ad:10:35:9c:71:d7:
                    af:1b:16:63:42:55:6c:b7:4d:54:ad:6c:eb:ae:24:
                    47:4b:5d:af:ed:b0:a8:df:13:1c:ca:c5:53:ec:f9:
                    43:19:44:68:da:ae:81:c5:3e:f9:00:fe:8f:b0:f4:
                    4b:aa:68:bb:2f:f2:40:34:18:06:91:cf:5a:23:a2:
                    c4:cb:cf:65:18:26:5d:1a:94:c3:8a:34:aa:28:36:
                    a8:c4:3d:99:aa:0f:9b:94:6e:51:34:52:ec:f1:b9:
                    e1:a7:30:c4:18:e1:46:07:cb:79:60:3d:af:fc:af:
                    92:0a:f9:f8:e5:1a:df:e1:b9:9d:d9:e1:c1:f7:39:
                    3f:2a:d8:d7:1d:a3:ce:3a:8d:94:1e:9d:b5:6e:d4:
                    b2:c1:9f:4b:81:a0:21:74:94:7b:5d:d0:89:08:34:
                    a7:39:c1:6a:63:4a:ff:b9:77:9b:1d:13:83:6f:e7:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:92:5A:E8:F7:9F:7A:58:65:83:B7:A9:08:83:7F:C6:1A:64:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:bd:b5:f5:9f:6d:a2:e2:d2:bf:00:df:e8:e0:16:1f:45:
         77:05:cb:9d:5d:ac:6d:3b:77:74:a8:09:6f:18:74:97:44:83:
         ba:ce:48:da:31:1a:e2:44:35:5b:af:a6:88:bc:f7:fc:ae:90:
         3b:66:d0:42:6c:3a:9a:61:a1:0a:8d:17:ee:00:1a:29:11:20:
         27:aa:be:7c:7c:50:61:b5:11:44:18:06:6e:8b:fe:72:bf:01:
         0a:3d:86:27:b0:47:b7:9d:bb:1e:b6:4a:53:bd:c9:4c:7a:e2:
         be:ef:a9:20:3c:6a:52:38:a6:58:d4:89:49:9c:0d:52:f6:56:
         fa:90:95:28:20:06:15:26:60:8c:56:c2:0d:01:f5:e3:82:c0:
         06:e0:cb:f2:d9:f8:8c:53:3a:a9:16:85:0c:cf:e2:ca:d4:c7:
         a6:dd:80:c7:bd:f8:51:e6:85:27:4f:23:79:7f:95:4f:28:97:
         ce:a3:c8:80:63:f3:94:11:0b:4a:70:d7:66:b0:87:40:36:8d:
         d3:73:8b:40:5f:b8:cd:a5:a9:91:6c:a3:0e:1a:00:62:3e:c8:
         73:ba:e2:2d:2d:86:c5:76:17:af:56:05:32:0b:21:0c:b4:e2:
         8c:e0:b6:3a:e3:bb:40:e2:de:e4:94:8c:e4:6e:7d:26:14:ff:
         18:7e:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:16 2026 by rpki-client