Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb684eac-c67d-32b7-8c97-a8a36d2beb57.roa
File:                     fb684eac-c67d-32b7-8c97-a8a36d2beb57.roa (raw, json)
Hash identifier:          oAiCvEu7jclp3HimnWFOecfxr4RKDqgV7chVDA92CLU=
Subject key identifier:   12:7B:FE:60:FE:C7:EE:78:00:1E:9B:C8:7D:86:69:EA:8C:D7:FF:B0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BDF6C9A6B788DE413C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb684eac-c67d-32b7-8c97-a8a36d2beb57.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:140b:ec00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:bd:f6:c9:a6:b7:88:de:41:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=a88c7156-4107-4de0-b0b3-f5a241baf14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:87:e4:27:7b:67:b6:11:5a:13:09:1c:e0:
                    a4:1d:ed:29:5f:be:84:40:a5:03:c1:0e:87:15:c7:
                    d4:2b:43:e0:c4:f8:40:db:e1:18:81:4e:40:5b:8f:
                    f6:70:00:86:ad:53:a6:01:2d:c9:d9:8b:78:10:19:
                    03:79:4f:90:96:d7:9d:ef:b9:e0:76:3c:9c:aa:6e:
                    7c:76:39:2b:3a:53:d2:d9:aa:fd:78:34:a7:87:c5:
                    46:36:4f:42:89:f0:2d:ee:29:11:77:5e:fd:fe:dd:
                    9c:23:96:77:4b:a4:d9:8e:c5:8f:a1:63:46:8f:0f:
                    5e:8d:8c:b9:64:73:b9:90:05:cc:fa:31:61:b8:e8:
                    df:d8:a2:99:66:25:a1:35:52:c8:72:cc:27:30:a8:
                    45:56:13:6e:cc:75:2a:dd:14:24:1c:a2:21:b2:35:
                    81:a6:f2:9b:ff:15:79:13:f9:ae:b1:9f:89:17:66:
                    06:d7:09:16:aa:40:ca:84:7a:64:d5:83:d1:e2:36:
                    9b:81:76:47:d1:30:d8:48:65:15:f1:1a:53:4e:6d:
                    e6:12:60:08:25:9f:b8:ea:fe:53:9a:03:96:45:9f:
                    89:e6:2f:4d:23:65:2a:e5:16:1d:39:cf:8d:4b:f9:
                    de:13:12:4b:6f:82:dc:e8:80:07:7f:b2:ff:9b:e0:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7B:FE:60:FE:C7:EE:78:00:1E:9B:C8:7D:86:69:EA:8C:D7:FF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb684eac-c67d-32b7-8c97-a8a36d2beb57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:ec00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:1c:b7:34:e8:e3:a6:92:3e:f7:a7:d5:94:d7:37:05:5e:
         f9:21:ba:4c:d7:93:20:2f:d4:cf:0c:c8:c0:59:e8:7c:dd:03:
         84:d0:93:b3:8d:ac:8b:e9:3b:95:20:05:9e:07:d0:06:1f:83:
         d3:b9:14:e7:77:1f:ee:a3:6f:8a:99:01:20:9f:a0:11:61:2e:
         03:55:a3:56:d2:15:4a:54:db:c1:d3:56:dd:8d:8c:5c:96:6d:
         08:22:3c:9b:f0:b6:aa:ee:57:92:cd:98:2b:9c:15:d4:82:cb:
         38:04:c4:d7:15:2b:72:9d:54:bf:d2:f6:54:a1:2b:a8:9d:f9:
         a9:f5:3c:ba:7f:40:41:ab:ea:2e:dc:ed:9b:e6:ab:2f:f4:89:
         76:2a:25:c5:22:53:cd:5c:0c:f5:4f:e2:4f:da:fc:b0:93:5c:
         2a:d8:aa:9e:64:4e:2c:9d:dd:8e:1e:64:b5:c9:a1:e7:a7:83:
         53:c3:3c:e1:b0:2e:1e:59:49:50:89:c9:fd:93:67:d3:e0:36:
         e9:64:b8:49:4c:d7:08:bd:87:92:ef:17:ee:80:a4:bf:1c:b3:
         ce:5b:9f:50:c9:f1:6b:47:f3:27:95:c2:ec:cf:3c:6f:23:6e:
         dc:45:88:41:ae:ec:4e:18:7e:45:a3:19:f6:b9:2d:de:9a:0e:
         a1:55:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:07 2026 by rpki-client