Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa
File:                     fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa (raw, json)
Hash identifier:          vMizd4aaNqjohSsPVjithIW0J7goINwo6JQrR6If+38=
Subject key identifier:   AB:29:4A:B5:57:BE:05:5D:72:7E:DD:D7:AC:9E:47:70:CD:A5:EC:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BE76BA651D2F2FDD9E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1410:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:be:76:ba:65:1d:2f:2f:dd:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=f9f8e565-9ece-44e2-95f1-3b46f3939461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:76:09:d9:76:14:ec:aa:0d:50:b1:96:bf:
                    0d:7f:02:3e:38:58:21:2d:7d:6a:47:fc:35:3a:1a:
                    95:d3:97:85:07:c8:59:7b:18:09:88:bf:1c:d7:95:
                    1f:8c:9e:a0:5d:92:29:23:3a:4c:8b:46:c1:ca:d9:
                    2f:fa:46:00:a5:6c:55:69:6c:cb:46:63:32:0e:c3:
                    b8:14:e2:ef:8b:7a:86:c9:85:12:fe:37:4d:2f:13:
                    b4:25:18:55:19:ff:44:94:0e:d5:e6:57:27:60:8f:
                    c6:34:6d:d0:0b:de:27:b5:f3:20:24:c8:e1:1c:71:
                    89:09:1c:e3:10:97:1e:62:5d:59:22:80:ff:04:27:
                    df:18:98:e7:2e:85:14:5a:8d:42:4a:57:d2:a3:63:
                    2b:9a:24:69:60:c3:e1:40:f0:66:c0:ab:bc:d1:2e:
                    fa:08:d1:76:8a:38:83:54:61:ea:59:f0:46:f3:b9:
                    ea:16:6b:ad:eb:5b:3e:7d:e7:a4:4a:f2:0c:c7:dd:
                    fd:fa:78:72:bf:e0:e8:92:fc:29:4f:1f:4b:41:62:
                    6d:c5:55:85:ca:f6:61:e0:7d:51:10:37:01:fd:40:
                    0e:9f:ca:1c:4e:93:23:b6:8d:1a:d9:e6:7c:32:c6:
                    f9:bb:4f:4e:b6:67:42:1e:2e:89:66:3d:1e:71:30:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:29:4A:B5:57:BE:05:5D:72:7E:DD:D7:AC:9E:47:70:CD:A5:EC:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd57a67e-4c3b-36cf-9c0e-a0e02f630b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:be:be:35:ec:ac:a0:b8:60:f0:08:69:e6:70:b0:af:b1:35:
         61:af:40:bd:cf:b6:11:93:ab:d8:aa:13:6d:71:ca:db:79:01:
         b2:21:a7:84:74:25:4c:a4:ca:49:68:b9:9c:20:8e:7d:3e:a7:
         3b:39:90:1c:c8:33:09:fa:dd:c0:a2:54:93:b2:aa:72:c2:7e:
         da:35:b2:3e:ab:d0:fb:9b:dd:ff:1e:7f:28:55:79:17:91:55:
         a5:22:8f:c7:2c:40:77:29:17:cd:27:ed:01:5d:87:e2:c8:3a:
         b2:6b:84:d6:de:31:c6:33:40:96:15:34:f5:1b:c3:82:bd:76:
         18:34:88:ae:cb:2b:d5:22:d5:a3:a0:ec:25:a6:78:74:f7:74:
         d9:27:ae:57:0c:57:55:90:6c:66:c8:81:51:19:0e:86:5a:86:
         5e:82:53:d9:56:0d:99:f3:8f:95:67:31:36:05:6b:82:b5:8c:
         d3:69:a4:a6:f2:50:dd:61:a4:29:c9:89:8a:df:19:d4:f8:0b:
         f5:84:a8:26:e0:bb:c5:fd:56:78:5a:ea:e0:6a:54:ff:3f:34:
         86:30:41:b4:b2:0b:84:7e:4d:06:56:8d:7a:5d:51:ca:5a:f8:
         bb:ea:2f:4b:a4:87:5b:2b:f6:e0:92:b5:06:20:63:0a:72:c6:
         d2:d8:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:10 2026 by rpki-client