Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbe49c14-841d-32be-9bdd-d3346ba84dec.roa
File:                     dbe49c14-841d-32be-9bdd-d3346ba84dec.roa (raw, json)
Hash identifier:          eW5zJiwkjO8HJBklNbTgICo3Zgdd27A6BqbReqlJLUo=
Subject key identifier:   6E:E2:70:D8:C4:75:23:33:50:DD:B8:48:0D:C6:E3:10:8A:DB:C7:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DEDE0ADD926328881508D7D30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbe49c14-841d-32be-9bdd-d3346ba84dec.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     9829
IP address blocks:        2600:140f:2200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:ad:d9:26:32:88:81:50:8d:7d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=37457eac-0713-400b-b70e-ad12bc854c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:71:4c:d2:10:0e:04:b7:62:04:99:26:d5:
                    7c:94:85:7e:77:1c:70:a4:b3:1d:f9:75:8d:31:dc:
                    ad:22:40:6f:43:c9:0d:c3:eb:d0:85:6f:1c:47:46:
                    93:c1:bf:c7:0e:2e:da:f6:fa:32:93:9a:6a:9c:83:
                    9d:ce:90:56:7d:9c:e8:3e:e6:aa:57:8d:16:65:7a:
                    50:28:45:17:ee:71:b7:4b:3b:0b:fa:9e:0b:01:09:
                    46:59:07:81:ee:a9:ff:34:e7:96:23:9b:95:22:1a:
                    37:b9:4e:47:57:d7:f0:81:d0:18:d8:cb:ab:23:b0:
                    cc:f9:33:e9:5b:10:ad:af:70:fd:43:a6:1f:49:4a:
                    73:f4:ee:cb:34:c3:55:0e:86:96:d2:5e:8b:d9:f5:
                    59:32:0d:dd:cf:f1:b7:4f:4e:08:62:33:ec:af:f3:
                    b0:f6:05:8d:4e:5a:73:0a:32:9b:fe:ba:60:a3:13:
                    86:e4:fc:31:6f:4e:64:33:63:6b:71:04:a1:d2:42:
                    f7:f1:7e:02:ee:86:08:1f:e9:e3:ab:ad:97:a3:01:
                    c5:33:2d:03:74:6a:f2:61:03:94:8c:cc:84:ed:f9:
                    6e:3a:cc:58:8d:aa:53:73:b0:a2:e3:e8:6e:2d:90:
                    69:36:1f:1b:fb:b2:c0:67:a4:01:34:b4:7f:fb:87:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:70:D8:C4:75:23:33:50:DD:B8:48:0D:C6:E3:10:8A:DB:C7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbe49c14-841d-32be-9bdd-d3346ba84dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:2200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:5c:4d:a4:95:cd:79:c8:e1:01:06:4c:6a:b0:b5:14:4a:
         f7:34:e6:99:7d:7c:1e:b5:84:18:a6:59:0a:3c:2a:46:6f:9f:
         0e:cc:6f:0d:d3:24:89:b9:47:6a:2e:97:22:80:b3:3c:37:6d:
         b7:53:e6:59:dd:3d:cf:1a:98:14:3e:4e:32:e1:15:27:6a:8b:
         53:7a:73:9a:60:fc:74:7e:08:53:f1:4a:a2:43:c2:48:89:83:
         70:ba:13:8a:8e:ea:d5:f8:7c:46:95:18:1c:fb:44:9c:82:d1:
         b9:7b:a7:33:ac:f6:07:ba:56:b8:7e:40:a2:74:81:1f:b9:40:
         e0:5e:8b:49:08:1c:a0:65:43:9b:cc:44:3c:25:24:9f:fd:34:
         1c:c8:79:46:ae:b4:8c:19:c5:fa:f5:e2:19:62:80:9a:f9:7d:
         98:a2:19:f3:70:93:5f:63:11:d8:10:9a:f0:a3:ec:2b:b4:5d:
         52:ab:54:0f:7f:8c:97:31:6b:62:0a:b2:e5:91:13:f9:ad:68:
         29:ac:01:de:72:f1:88:03:c8:ae:98:d9:c6:27:06:7d:2a:3e:
         a4:a8:10:51:8d:99:1b:70:2d:be:c6:cd:e7:0f:80:45:34:2c:
         8e:49:b3:b0:f9:12:27:88:a8:1b:71:aa:ce:2e:59:9c:81:7e:
         27:52:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:10 2026 by rpki-client