Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d62a1ba-980a-3098-97d1-f61e762c05b9.roa
File:                     3d62a1ba-980a-3098-97d1-f61e762c05b9.roa (raw, json)
Hash identifier:          KQvwFHMjVA7OMYsmaxYgLPhg0GbPObsXwwAuQsvpf18=
Subject key identifier:   5B:9F:C4:2E:10:EC:A6:A2:20:C2:AF:D5:56:6E:51:4A:5A:F5:1C:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D343A133AC22EBC339E913F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d62a1ba-980a-3098-97d1-f61e762c05b9.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     63949
IP address blocks:        2600:3c12:c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:13:3a:c2:2e:bc:33:9e:91:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=9c8f290d-b6b1-45d5-a320-5d5dc0e17770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:32:1a:e9:e7:ad:a5:b0:d2:7e:c0:fc:b6:
                    2a:b6:84:65:72:41:74:ab:3c:67:e2:d6:e7:93:f5:
                    1a:6c:34:3b:a0:24:c6:c4:7e:10:af:80:2f:24:36:
                    91:78:fd:5c:d9:96:25:0c:38:e2:2e:2e:1e:6f:b8:
                    71:91:b7:b8:a8:6c:0e:95:ce:c3:6b:93:bd:b3:04:
                    b7:27:7b:1f:10:a3:a7:de:89:72:5f:3c:a5:d7:bf:
                    f8:fc:ac:8f:b3:5a:a4:e5:42:da:83:bb:cc:87:58:
                    b5:4f:0a:94:9e:e5:c3:1e:7d:37:00:70:ae:aa:7a:
                    ac:34:0f:b8:61:50:00:93:a7:fc:14:d7:f3:51:07:
                    92:42:e1:f6:02:32:01:70:ae:18:2d:12:41:58:80:
                    3b:81:5c:8a:4b:a7:49:93:31:ae:1e:1f:98:ea:02:
                    de:22:9b:9c:0f:7f:a9:3a:4e:09:4b:54:f3:03:17:
                    54:16:88:fc:15:95:a8:6f:99:ec:4f:0a:ff:4e:fe:
                    06:d2:fb:53:5f:8b:0a:be:2d:a3:cd:b3:79:82:b1:
                    03:ab:3e:72:20:3c:b8:f7:cb:ee:21:dd:d4:23:bc:
                    17:05:60:e8:74:ff:85:01:76:c9:61:4a:fe:3e:04:
                    3b:b6:b1:f0:fd:58:76:87:5f:e2:3c:fc:56:cd:0c:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:C4:2E:10:EC:A6:A2:20:C2:AF:D5:56:6E:51:4A:5A:F5:1C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d62a1ba-980a-3098-97d1-f61e762c05b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f8:07:26:25:95:46:95:9c:a9:59:c6:0d:fd:20:0b:d3:ba:
         a8:53:f8:1a:08:12:c3:99:ca:30:ab:cb:95:ed:02:96:25:31:
         a7:23:d4:3d:82:60:7f:d2:0a:b9:b4:7c:92:15:c1:ed:71:21:
         d3:c4:ac:9d:83:e6:51:c7:da:cc:ca:68:98:16:ac:62:0c:03:
         99:d0:a3:28:7b:44:0e:4b:78:c3:29:2a:1e:b0:58:75:d6:da:
         ee:d9:19:1a:dd:56:93:5b:62:6b:7b:f8:ea:1b:78:24:c5:03:
         7d:ce:5c:2a:61:78:19:00:21:f9:c6:32:a3:f2:93:0c:25:3c:
         5b:ab:71:28:b9:a9:8a:f8:60:0b:00:08:18:63:eb:21:1c:be:
         88:64:07:ac:2b:57:6b:74:5a:6d:3f:a6:5f:2c:0f:c9:9a:5f:
         ec:a4:71:11:72:b4:68:b0:e1:62:38:b2:8f:ea:d1:3d:a2:ed:
         35:35:73:85:ff:6d:9d:fe:60:ab:f4:ed:29:89:96:33:88:7f:
         cc:a4:36:73:e3:96:02:45:27:c6:82:1f:09:88:0b:fb:86:13:
         f9:ae:aa:39:52:ac:86:a0:9f:e0:f7:51:30:d0:3e:fb:f6:d5:
         8b:27:4f:cb:fa:bf:18:64:78:e7:d8:b3:86:5c:1a:5b:97:10:
         43:a7:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:44 2026 by rpki-client