Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa
File:                     f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa (raw, json)
Hash identifier:          xnAACTNab0kmpeLxWQ4vGI88RnYaZpssz9Kd92mv4XY=
Subject key identifier:   71:B1:99:18:E0:77:F6:BE:80:97:98:3A:6C:C8:4D:DD:B2:9F:10:5F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3A2F1BCED79820DCC3BBCD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     35994
IP address blocks:        2600:141b:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1b:ce:d7:98:20:dc:c3:bb:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=6d93e2d1-708f-4c13-b960-7be695f2b297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:92:93:99:a8:cf:65:2f:cd:4f:a5:bf:3e:
                    d6:79:44:e4:81:e6:46:59:21:d6:f0:c5:36:e6:f6:
                    53:b1:7c:fe:5a:9f:fc:a2:84:e9:e1:29:33:3e:75:
                    26:49:cb:3f:95:e4:dd:15:9a:42:4b:dd:4d:47:92:
                    ac:cb:34:ed:cb:fb:51:c8:ce:31:72:63:14:5f:ca:
                    3c:24:14:6d:80:5d:89:d6:c5:a9:a7:64:73:a3:0c:
                    01:db:fb:18:f7:4a:8c:e6:6e:c9:c1:52:83:0b:11:
                    6a:67:51:04:25:37:51:95:5a:a6:bb:78:f9:f2:e9:
                    7e:9b:eb:d6:b7:2c:42:15:4a:be:f1:00:77:bc:b4:
                    67:24:2c:3d:2a:38:b5:50:dd:a7:a9:4d:d5:6a:2c:
                    e2:e7:55:41:a0:6c:c3:a6:0a:a0:ac:5d:78:6d:63:
                    2f:ce:94:e9:8c:63:c6:52:8f:42:aa:fa:66:ce:f5:
                    e9:a6:a3:c1:9c:30:5a:af:6e:57:b1:da:4f:3d:b5:
                    05:a2:dc:62:3d:c3:55:db:9e:85:7d:34:1a:8e:22:
                    04:87:20:82:c9:69:7f:e0:a9:0b:0e:56:db:3c:43:
                    8f:e7:03:14:52:dc:a7:44:47:b8:47:93:a3:08:aa:
                    af:3c:82:01:36:5b:20:4e:83:a5:e2:c1:38:9a:49:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:99:18:E0:77:F6:BE:80:97:98:3A:6C:C8:4D:DD:B2:9F:10:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:f8:7c:01:a0:a5:03:f3:b8:34:ca:14:4d:fd:c3:06:2b:
         0b:c9:f7:30:cd:54:20:8b:d0:6a:87:6a:48:ed:fd:7f:d7:94:
         f6:6d:95:99:64:c5:05:93:f0:0f:80:7a:30:fe:80:a3:bd:63:
         30:93:7b:87:1b:92:90:9c:dd:a4:1f:b4:ae:cc:f1:f0:96:d3:
         47:8b:cc:cf:cf:6d:69:37:e0:bc:bf:a8:43:9c:2a:52:cc:dd:
         1c:1e:d9:c8:8f:c8:7a:ae:c6:b0:a3:55:cc:ff:0e:44:76:dd:
         e7:d1:58:3c:e3:cf:36:90:6d:bd:0e:83:1d:f7:6e:1a:19:bc:
         5c:f6:c4:d5:f1:af:a6:17:53:eb:93:df:ba:74:af:10:6e:9e:
         2e:39:9d:15:38:36:dd:c7:03:e6:c3:a3:b3:94:9c:50:39:41:
         38:97:5b:72:9e:05:da:e3:f0:63:e6:32:b4:2c:1b:4b:8a:05:
         e2:8a:34:f1:eb:d4:84:d1:f5:33:ea:b0:aa:c4:91:06:11:84:
         1e:11:2b:0b:2a:37:80:bd:5a:64:c3:ba:cb:ac:e8:53:f6:f3:
         a4:26:44:60:9c:83:ed:09:0d:cf:75:fe:05:71:c6:ea:57:46:
         e2:f1:73:22:8a:42:a5:ad:c7:96:db:b4:12:ad:b9:8e:87:57:
         2f:6b:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:54 2026 by rpki-client