Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c7f985-42a7-3163-8cab-bb4cbec9a1af.roa
File:                     34c7f985-42a7-3163-8cab-bb4cbec9a1af.roa (raw, json)
Hash identifier:          tHt10XpFL9O0MPMYSZST+V42revHTfjnpQzcx+o+IjI=
Subject key identifier:   82:00:D6:D9:00:86:A3:48:18:A2:18:63:F7:B5:11:DF:74:2E:AA:EA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0EA7CBE5A981E9141759EF14
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c7f985-42a7-3163-8cab-bb4cbec9a1af.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     4230
IP address blocks:        2600:1419:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:cb:e5:a9:81:e9:14:17:59:ef:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=6ae8d504-446b-44a0-85dc-ae1758150c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:7e:c6:f0:4b:c9:bd:cb:d5:67:99:89:93:
                    b7:ce:75:cc:bb:ef:46:27:cc:7f:3a:91:ee:51:d3:
                    62:b3:88:9b:07:5e:8d:97:3c:8a:b9:78:79:86:ee:
                    4e:49:c2:d4:65:c9:6c:01:20:c5:f3:80:18:1f:87:
                    7f:ee:37:cd:46:ef:f2:2f:87:d0:d4:0e:d1:a6:1f:
                    e7:be:22:1b:34:03:51:9a:fd:10:d4:67:15:a1:bb:
                    da:91:3e:ad:fa:98:2b:68:20:01:e7:ea:1b:ce:88:
                    15:49:e2:9f:61:b0:31:7b:81:e7:c8:c8:64:d5:ae:
                    25:20:0e:b2:8f:27:8a:5e:47:24:fb:ea:13:da:a3:
                    24:c1:3b:fb:9f:f7:a6:35:f4:da:fa:7b:d4:b8:e1:
                    da:00:9a:4d:b7:87:36:d2:20:42:fb:3e:71:22:5b:
                    5a:1d:19:eb:19:20:66:35:ec:5c:f9:3c:32:b2:95:
                    28:2d:d4:eb:b4:65:1d:e2:58:5d:e7:bd:94:0d:fe:
                    59:ab:4b:f8:f7:94:5c:39:b2:f7:0d:6c:1e:b8:64:
                    bb:6a:2b:c0:e3:3d:45:f1:74:4b:ca:81:fb:89:51:
                    64:63:d1:60:d2:44:49:c6:75:a5:d6:0c:93:b2:9a:
                    39:64:7f:ac:71:f9:da:9f:9b:75:b2:f5:4b:f9:b2:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:00:D6:D9:00:86:A3:48:18:A2:18:63:F7:B5:11:DF:74:2E:AA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c7f985-42a7-3163-8cab-bb4cbec9a1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:23:08:04:87:25:4b:ad:c8:a5:c1:b1:60:e8:5b:fb:bf:f8:
         60:63:d4:64:29:2d:b4:97:c6:05:1b:df:d8:a6:63:6b:31:22:
         7e:51:86:9e:36:5b:d3:61:c3:a6:ae:d7:ca:52:9f:4d:93:34:
         f1:c8:e0:8e:77:b1:bf:f3:19:42:2d:97:30:92:35:11:01:c8:
         f9:9f:9b:9e:99:e6:5e:fa:21:ec:13:b6:37:d0:96:80:01:e7:
         aa:ce:dc:0d:d4:35:72:b7:fc:26:eb:5a:0c:b1:0f:48:0d:9a:
         0f:c9:da:96:a8:33:79:05:8f:8c:cb:28:94:f2:96:42:ac:fe:
         df:0a:8c:2b:fd:48:e9:28:30:fc:6e:bc:10:fb:a2:21:14:b8:
         b6:5f:b5:3a:30:a0:8c:9f:ba:0d:e8:e7:21:6d:40:38:cb:59:
         1d:d7:16:e4:0a:f2:92:0b:6c:f9:1f:96:93:6c:99:19:a1:d2:
         42:1d:e1:e8:f7:78:e3:ee:12:d9:27:8a:3a:a0:cd:43:a6:9d:
         46:bc:81:59:9d:37:0b:6c:e2:55:a9:ba:93:43:ea:cf:81:ea:
         fa:eb:d8:90:71:7b:e3:55:4b:b2:7e:a3:c8:24:8f:b5:70:2d:
         55:38:23:e8:e6:6a:58:90:a6:fc:fb:b7:8c:71:05:01:63:b8:
         0c:e4:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:21:34 2026 by rpki-client