Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df900bf5-ee9b-3476-82a9-936e5b44262f.roa
File:                     df900bf5-ee9b-3476-82a9-936e5b44262f.roa (raw, json)
Hash identifier:          foqEdIawb1+6t96UfgYBkNdRLOnBueP1863UhQpyp6k=
Subject key identifier:   09:40:6C:90:2B:C6:A4:7C:0D:B5:8F:14:56:12:24:3E:D1:9F:21:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F7A2CB61CE77224540441C740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df900bf5-ee9b-3476-82a9-936e5b44262f.roa
Signing time:             Mon 12 Oct 2026 11:54:09 +0000
ROA not before:           Mon 12 Oct 2026 11:54:09 +0000
ROA not after:            Sun 10 Jan 2027 12:54:09 +0000
asID:                     32787
IP address blocks:        2606:6c00:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:2c:b6:1c:e7:72:24:54:04:41:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 12 11:54:09 2026 GMT
            Not After : Jan 10 12:54:09 2027 GMT
        Subject: CN=52dda04c-360a-4361-ab91-cb936e9edf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:b2:ea:16:5f:f5:1e:b3:18:bc:aa:a6:c4:
                    8e:55:13:32:d5:70:ff:aa:3e:e2:36:39:8a:ac:03:
                    51:45:0a:3d:06:3a:5c:75:ec:20:f2:6f:46:17:34:
                    5a:3e:3f:68:25:56:ad:42:fb:6d:e4:d8:53:96:1f:
                    10:c0:6e:83:52:4a:cb:2e:ca:f0:db:5c:07:de:5b:
                    c2:5e:01:a9:53:f7:ef:ce:e9:ce:7e:41:7b:15:5c:
                    0c:ce:94:3e:e3:fc:e1:dd:bc:4e:81:30:cd:98:78:
                    15:98:76:fa:03:0a:9e:24:be:68:08:e8:34:2e:00:
                    9b:98:64:66:11:d9:e7:24:3a:62:d7:74:cc:47:e1:
                    ef:39:07:b2:9f:92:e8:cf:d1:3d:4f:c4:29:f0:2b:
                    b7:1b:76:f8:f2:e1:ec:17:44:21:72:fc:9e:a5:c5:
                    7a:e8:97:1e:9a:db:2b:76:47:53:37:b3:16:13:24:
                    03:10:1a:49:4f:a1:2e:55:03:cd:5c:a5:09:78:78:
                    40:8f:4e:5c:4b:9f:97:0f:99:24:67:59:4d:a4:7f:
                    96:71:47:54:c7:0d:49:bb:6f:9c:e1:51:e1:68:ce:
                    13:48:92:92:e1:ae:43:4e:cd:19:46:6e:0a:43:71:
                    6c:15:d8:ed:51:c6:0c:28:a2:48:7e:da:55:73:29:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:40:6C:90:2B:C6:A4:7C:0D:B5:8F:14:56:12:24:3E:D1:9F:21:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df900bf5-ee9b-3476-82a9-936e5b44262f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:cc:b1:8b:91:a0:a4:54:81:44:48:62:8b:84:b6:d4:e0:
         b5:75:ae:1b:0b:00:e0:a7:d7:ee:78:d0:2b:b6:90:be:77:39:
         90:52:5c:a8:a4:e6:e8:48:81:7e:e6:7b:70:84:e3:06:d6:57:
         0e:5a:3f:2e:44:e8:a1:f2:8e:48:8b:91:a3:13:e4:fb:29:f8:
         92:85:90:7c:a5:1c:fd:36:a6:73:c8:20:d5:94:de:86:64:0a:
         14:60:5c:0e:96:96:64:2e:68:8f:c2:50:2d:85:eb:0d:8c:ee:
         4b:cc:8b:63:2a:84:72:b4:7e:bb:6a:26:8a:c8:02:83:a2:41:
         ce:e5:a4:53:21:7d:cc:e8:9a:f9:46:3e:02:1e:f5:c1:60:46:
         f6:a5:ff:6b:e4:45:42:e0:8c:9d:0e:91:20:4c:d1:bf:b0:d1:
         fd:db:ed:9e:fc:87:2a:3d:14:f8:1c:74:e0:5b:58:71:99:fe:
         56:9b:ab:01:a2:e9:4d:8a:3b:b8:ed:e9:2e:6e:65:b6:6c:ff:
         78:70:46:41:b7:50:79:d8:0d:f9:ed:f7:8b:b1:92:94:57:f6:
         17:cf:28:b2:d2:15:a2:1f:40:c7:59:52:e7:59:16:8e:d6:5b:
         03:7b:01:f0:42:fa:55:8a:6f:04:13:5b:18:af:0c:d5:c7:5d:
         72:f9:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:33 2026 by rpki-client