Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52a5e7f-7195-3e16-b653-de67e61f631a.roa
File:                     e52a5e7f-7195-3e16-b653-de67e61f631a.roa (raw, json)
Hash identifier:          ScgTmvUXdpPtP38e0GDW0F3EwPNvQ20Wl8KpIobg2+0=
Subject key identifier:   B9:8C:79:F2:0E:DD:C8:00:B9:1F:84:22:DF:95:C1:F4:3E:83:DE:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3A2F214237ED7D663218EE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52a5e7f-7195-3e16-b653-de67e61f631a.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     33905
IP address blocks:        2600:1480:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:21:42:37:ed:7d:66:32:18:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=3793023a-df39-459d-a4e5-5933dd9d1c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:02:05:4c:93:b0:e4:62:87:06:a3:c5:2b:
                    44:44:8f:03:ef:7b:a2:d8:3d:e6:6e:1f:6b:30:6f:
                    9b:33:65:2c:a1:f5:75:b0:c4:44:7c:5a:5b:79:36:
                    06:59:4e:d1:1b:a3:e9:f5:ef:8c:f7:8b:05:fe:64:
                    cd:b5:6d:a4:6f:a0:9b:88:20:f5:be:8a:a5:fe:14:
                    df:6d:86:b7:2e:7e:4c:b3:c4:80:bb:a9:a2:28:17:
                    e4:60:fe:56:00:cc:c6:36:db:e1:fb:91:56:62:06:
                    ab:ae:b3:a3:0c:b6:41:9c:e5:21:f2:d3:eb:bb:de:
                    5a:c9:9e:b0:74:4d:a6:ad:4f:9f:49:38:c8:3f:5a:
                    af:18:84:95:e7:e2:06:6a:2f:ee:f6:d2:54:ed:9b:
                    bb:fa:14:6a:76:7f:c5:38:39:76:b4:3e:3e:83:3e:
                    f0:02:b9:ec:8a:91:ad:0d:4e:7b:05:39:73:62:67:
                    f5:fc:21:34:c4:14:fb:3f:a4:c8:63:c9:7b:c5:bd:
                    91:a6:df:83:56:39:b9:8c:7d:b0:48:02:1b:19:84:
                    c2:f5:6c:99:6e:b6:cb:88:93:d6:bb:c1:93:bc:e6:
                    13:94:fa:7d:1b:8b:2c:6c:86:d8:27:54:fd:89:cd:
                    d5:7a:00:a0:7d:ac:1a:b4:1f:a2:c5:e3:af:ae:46:
                    a8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:79:F2:0E:DD:C8:00:B9:1F:84:22:DF:95:C1:F4:3E:83:DE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52a5e7f-7195-3e16-b653-de67e61f631a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:75:99:d1:d6:59:fb:fc:85:7e:6e:83:df:dd:b1:60:ea:39:
         78:69:c2:d6:31:33:2a:12:fd:da:1f:29:5b:e6:21:6b:e8:e7:
         b4:b4:cd:b2:33:22:ef:4a:1b:65:2a:42:52:75:56:95:7c:92:
         e5:d3:01:fa:7e:cc:e2:d8:45:d8:ba:85:4a:21:0f:db:61:86:
         04:2c:74:45:eb:9d:19:77:2e:8e:ed:0a:04:47:2d:17:4a:0e:
         3e:1f:a7:14:fc:5f:b8:55:81:fa:44:97:e8:cf:e4:f1:65:07:
         39:a5:c6:77:bb:55:ec:85:ea:9d:38:da:4a:8e:75:cd:85:d7:
         28:a1:a5:5b:3d:3b:70:57:ef:ed:76:2a:5c:f2:7c:6e:42:1a:
         c2:2f:82:64:29:a9:87:ae:5c:58:0d:fa:32:14:1e:4b:1d:2c:
         7e:e4:cb:99:ec:18:14:96:71:53:6a:9e:f7:ac:4a:7b:87:86:
         e8:f0:66:59:68:24:66:48:b7:e9:69:01:61:82:ca:e1:18:de:
         d4:e0:6c:cb:0b:dd:cf:8a:71:23:a1:a2:1e:1f:4a:e4:9f:72:
         06:6c:60:ef:1a:6a:74:b1:f4:e2:d5:6d:74:7f:7e:a9:99:71:
         f0:12:8f:68:f7:30:e6:5d:99:79:df:4b:27:bf:52:ed:30:45:
         4f:d9:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:33:38 2026 by rpki-client