Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa
File:                     dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa (raw, json)
Hash identifier:          VKlILdGyFUvWLSLFVNzBPkybMafQunrNOosgr3CSD+4=
Subject key identifier:   72:5D:CE:B5:25:2C:7E:A6:B1:7F:FA:87:CE:5B:34:FC:03:F2:6B:D8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0D42731E7C0D68AAEFD1B44F
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     55836
IP address blocks:        2600:140f:d800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:73:1e:7c:0d:68:aa:ef:d1:b4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=9991bbe2-a2de-4fed-9499-23f179068f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:d1:cc:a7:ec:f5:86:87:c2:50:d1:60:06:
                    94:0c:37:2f:a8:c9:8f:65:34:e7:f2:7c:1f:3e:0a:
                    16:52:e4:4a:85:22:d0:da:e4:91:8f:10:c8:8a:34:
                    4b:ea:d8:ff:30:04:61:b8:b2:d4:cc:20:bc:0b:13:
                    88:6e:7d:01:cb:8c:ec:32:8e:af:66:de:9c:7e:a1:
                    fe:85:f8:98:2f:9c:5c:81:ac:d0:00:50:76:47:a7:
                    71:b8:c6:f2:7d:dc:92:1b:90:d2:61:53:c3:6a:c1:
                    4f:03:7c:b4:97:3e:11:f8:96:8c:dc:f8:f2:71:22:
                    f3:3d:f2:11:ea:69:4d:c1:c0:b8:93:a5:58:ea:88:
                    da:cc:6f:86:dd:a9:08:17:0d:ed:97:1c:53:00:8c:
                    4d:c8:54:f5:cf:ff:77:67:d1:8c:95:3b:ca:21:2a:
                    cb:5c:07:f0:e8:15:07:1f:ad:98:71:d0:dd:20:de:
                    c0:cf:a7:47:f5:09:9d:25:20:ae:6b:32:c4:ac:0f:
                    1c:cd:22:ce:99:16:3a:d5:a0:a4:8f:7d:84:10:8f:
                    5c:dd:df:14:bd:c2:6a:58:a8:b8:66:4e:a1:37:9f:
                    56:76:61:32:cb:d7:b6:a6:1a:54:a0:e2:dc:1c:d3:
                    b7:e6:4f:14:76:cf:e9:0f:c7:01:d0:1e:8b:f6:fd:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5D:CE:B5:25:2C:7E:A6:B1:7F:FA:87:CE:5B:34:FC:03:F2:6B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd61fdc5-755d-35d2-a4e9-7f6e9f860f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:d800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:26:40:83:51:ac:70:7c:de:99:58:90:0c:c6:6a:e5:a5:74:
         6c:c8:a2:ce:7c:38:e4:3a:68:73:18:20:ed:86:a6:00:a7:72:
         98:d1:2a:3b:63:08:4f:82:5c:25:c0:ac:ac:f1:16:b5:6a:49:
         3a:b3:75:cb:bc:ff:8f:02:6c:ab:cd:45:f6:5f:8b:3f:c0:06:
         fc:4e:ed:07:0b:54:43:d9:b8:a1:60:cf:15:37:4b:e8:cd:09:
         7b:3f:b6:75:b8:90:f0:98:14:f8:0e:54:af:49:72:7b:9e:06:
         57:e0:dc:18:54:2e:44:d1:a0:58:69:12:12:c0:fd:8b:4f:b4:
         da:6c:f3:f4:a1:2e:64:58:46:8d:2e:fc:dc:37:e8:e0:c6:5d:
         24:a1:71:7b:63:00:95:d2:a1:58:0a:fa:53:37:99:ad:73:9b:
         36:53:f5:bb:22:c5:18:e9:32:e4:12:18:37:df:49:44:ed:d8:
         3c:02:fd:c9:1f:a8:05:b7:31:51:90:18:ec:5c:38:ac:51:33:
         de:6a:f2:80:7b:37:04:26:b8:57:13:cd:02:2d:c8:6b:ca:4c:
         a8:95:49:6c:08:b0:ca:0e:ba:4c:96:96:bd:d6:7a:09:83:1a:
         1c:3c:24:29:bb:f8:01:81:9c:80:11:9f:b4:8b:72:c2:40:f5:
         e3:0b:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:52:26 2026 by rpki-client