Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa
File:                     f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa (raw, json)
Hash identifier:          DsfSVsrdm1NKHCQtkg5r7bq90icLP57YEOloZvHWEEA=
Subject key identifier:   35:07:16:99:E3:6F:C2:BC:08:5D:4C:98:46:9C:27:16:63:CD:CA:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD8F06EFD16668D637D0C9880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     20940
IP address blocks:        2600:1417:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:6e:fd:16:66:8d:63:7d:0c:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=b7e9ccc3-2670-403f-98e7-f31f32238945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:a6:ff:dc:4d:ad:4c:4e:0b:0b:02:e7:38:
                    df:b3:0c:ca:d0:87:84:dd:20:c3:15:44:cd:f1:d8:
                    a4:51:ec:03:5b:76:8c:3f:fc:dc:55:8e:33:d6:53:
                    22:64:4b:83:46:f7:5d:e9:b1:f1:71:2d:8b:43:e1:
                    6c:2f:db:9f:c8:40:cf:33:18:1e:3b:43:a3:14:50:
                    b6:5b:1f:e3:b6:05:1b:12:da:0b:5f:e8:00:90:1d:
                    e0:98:a8:4a:44:29:28:ff:fb:9b:0f:06:ae:5e:e6:
                    93:69:c0:2d:70:58:ba:af:43:3e:f2:5b:7c:21:7b:
                    08:11:ee:e7:0a:ed:04:47:84:62:86:64:78:2d:05:
                    0e:87:49:ec:b3:7e:6a:f4:80:e6:b0:02:df:14:dd:
                    cb:2e:f3:55:ac:e1:99:a5:10:d0:f8:4d:be:6f:32:
                    6a:52:90:92:57:af:bc:1c:4b:d9:98:a9:d2:49:58:
                    9e:40:40:6f:af:43:c5:05:4e:3f:2c:5a:60:21:3e:
                    15:de:f3:95:70:40:1f:9e:01:20:c4:14:4e:f6:9a:
                    2b:4d:4f:8a:5c:8d:83:fa:7c:3c:60:40:f5:34:51:
                    8b:7a:c2:f7:35:77:3b:6d:5f:db:99:16:b7:29:8f:
                    df:95:75:c5:f3:7d:c0:8a:d4:8d:2f:84:73:1e:44:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:07:16:99:E3:6F:C2:BC:08:5D:4C:98:46:9C:27:16:63:CD:CA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:72:2c:00:2c:e6:d1:1a:ed:bd:41:df:85:da:87:f5:9e:
         6d:2f:72:67:d2:a0:8b:e7:76:5d:2a:60:0c:25:f7:2e:00:53:
         49:54:b8:45:d5:5f:07:09:5a:40:4c:35:49:ef:bb:4b:1b:73:
         a2:21:93:ee:24:87:4b:e0:39:17:4b:fd:01:d9:0e:49:a7:18:
         17:92:9a:7b:ef:31:a1:d6:53:0a:14:f2:73:e0:99:d4:f4:59:
         eb:1d:b4:49:cf:66:c6:eb:85:6c:bd:bd:9c:bb:ab:be:01:5a:
         c1:04:7b:f9:ed:9a:95:01:36:15:15:74:40:03:76:52:02:3e:
         1f:d0:5e:80:a4:12:48:a4:a3:f0:c6:97:89:3a:5d:88:dc:32:
         4a:0a:89:7d:e7:3e:50:bd:06:51:61:f4:ad:9b:80:a6:ed:b4:
         32:13:4a:f3:2a:42:f6:ab:7d:0f:63:d7:97:6c:dc:64:a8:c0:
         26:5f:0b:04:c3:20:2b:83:24:ba:12:0e:d1:db:4e:16:88:9d:
         f8:79:3b:30:d2:9f:fd:87:a4:8b:8a:a2:60:54:e3:e4:01:7c:
         fa:b9:d4:6c:62:a2:e1:21:b4:be:2d:13:0a:61:3b:64:7d:f9:
         5c:4a:b5:28:88:28:73:3a:37:a9:1e:a9:1c:fd:df:f7:b1:af:
         3f:eb:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:14 2026 by rpki-client