Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422af647-4df6-3b69-89b9-aa6b968da52d.roa
File:                     422af647-4df6-3b69-89b9-aa6b968da52d.roa (raw, json)
Hash identifier:          eaXyJztbo6F33sL1/RWqAOR3QZa09QpxIe0sA3sxInc=
Subject key identifier:   CF:2B:E6:8A:A9:EF:D8:A5:98:35:51:BF:DA:5F:D8:38:DD:52:A1:EA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F49845E7F74097D6A06580200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422af647-4df6-3b69-89b9-aa6b968da52d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1415:5400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:5e:7f:74:09:7d:6a:06:58:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f500ec6f-1f5c-44d4-b9e5-c47d361a298f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:9e:d1:8a:41:d6:7a:72:19:32:42:40:b1:
                    78:c4:70:f8:e0:3a:d6:e6:c3:e2:5d:90:7b:ad:56:
                    04:c9:23:80:e8:24:a6:07:4d:bb:f6:37:d7:3e:a4:
                    9d:d3:9c:c4:60:d0:42:57:c4:5c:91:06:ea:69:c0:
                    c8:0e:aa:2c:38:05:8d:dd:ff:a3:3a:cc:93:09:13:
                    e5:a2:dd:2a:52:3f:5a:83:47:3a:4d:04:8a:32:b4:
                    a4:d6:e4:53:01:44:b2:84:1e:70:fe:1f:b7:d7:ba:
                    bb:d2:80:7b:28:18:7b:ff:30:d6:09:20:a2:12:7f:
                    db:f4:20:08:cb:20:00:b9:20:f4:54:b5:3d:78:81:
                    95:a2:34:15:e8:4a:f5:49:a6:5e:c7:d1:94:63:ef:
                    3f:a9:c7:49:a3:79:ae:75:ac:29:6c:12:c8:5f:6f:
                    c3:a7:c4:5b:12:87:d0:be:39:2a:82:f9:f9:a1:f8:
                    20:69:c1:f0:c9:de:f7:c2:71:34:8b:b1:f8:ed:0a:
                    e7:eb:e0:20:a2:bd:74:24:a7:be:4e:42:ff:fd:3c:
                    f5:6b:d9:78:a9:4e:76:97:4b:65:bd:be:c8:77:71:
                    b5:39:35:15:8e:a8:c9:bc:61:5c:dd:dc:4f:64:40:
                    f2:58:f6:8e:a2:0a:45:bd:5b:50:5f:24:92:0e:b4:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2B:E6:8A:A9:EF:D8:A5:98:35:51:BF:DA:5F:D8:38:DD:52:A1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422af647-4df6-3b69-89b9-aa6b968da52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:5400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9b:90:02:ba:ce:55:c9:3d:4d:10:96:a7:83:76:1e:b5:cf:
         c9:00:a6:28:63:e2:66:fc:b9:b4:37:35:59:52:a1:df:23:8d:
         6d:b3:3c:5a:ca:6a:46:2a:d7:85:09:c4:8a:90:ec:93:e2:e5:
         8f:1b:ef:dd:c7:a7:29:55:e5:0c:63:9d:53:c7:35:9d:3c:f7:
         0f:ad:09:b4:51:a6:5c:68:9f:c5:23:07:ed:ba:9d:56:6e:49:
         98:89:92:a9:07:26:49:18:28:99:b5:ff:ee:1f:e4:3a:43:1d:
         90:69:d5:98:38:35:14:90:79:19:cf:d5:62:f3:74:dc:f6:80:
         be:be:77:4f:a9:28:1e:f8:e6:ac:88:b2:bb:90:75:4f:54:53:
         d3:77:01:38:27:5e:54:d4:fc:8b:d1:8a:c3:30:dd:e5:d8:9c:
         bf:e4:3a:ba:79:3d:20:bf:ab:1a:7c:70:24:1d:87:47:7d:53:
         9a:f7:7c:b2:10:50:68:5f:d4:1c:05:42:1d:d0:4c:93:df:b5:
         e5:26:4d:b2:42:3c:38:2f:c6:b7:8c:db:c3:4f:1b:cc:2b:0a:
         21:3d:63:98:70:49:9a:6d:e5:f7:17:1b:02:e8:c9:bf:fa:00:
         4d:5d:69:7e:9b:1a:4b:59:7d:98:fc:d8:00:b9:b0:19:19:4a:
         fb:88:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:34:06 2026 by rpki-client