Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ecbdbd7-4105-3cab-93c0-2e0208e0e3cc.roa
File:                     6ecbdbd7-4105-3cab-93c0-2e0208e0e3cc.roa (raw, json)
Hash identifier:          ff9QgvnnrFiKtpoy3nfQ6OYEWy0qeZuOI9H0CWUpGbM=
Subject key identifier:   24:ED:C7:1F:68:85:54:18:D7:69:27:47:D0:1E:20:FD:83:51:DE:2B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C26418F526EC2A92679E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ecbdbd7-4105-3cab-93c0-2e0208e0e3cc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:140f:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:26:41:8f:52:6e:c2:a9:26:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=34e81940-5ba8-4d00-8eaa-a2e798d59dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3c:ba:da:f4:20:b7:59:cf:85:95:57:00:cf:
                    a2:f1:b2:a8:e3:c7:22:ac:f7:2b:b8:fa:c7:0f:1e:
                    e6:24:66:a8:d4:9c:59:4f:d4:69:de:ab:d4:ef:d6:
                    a7:e5:30:f7:7d:90:ee:20:19:f1:01:50:b9:90:cc:
                    ce:1a:d0:d1:0f:e5:9e:2d:22:df:b5:a6:1e:9d:2d:
                    ef:4b:89:31:50:df:63:03:b2:26:0b:88:a5:ad:d5:
                    38:01:4f:1d:f3:da:c8:33:9c:3c:14:44:2c:f0:f9:
                    89:98:a0:ea:f9:d1:09:30:c9:9b:06:9d:2d:f7:93:
                    05:a3:71:48:61:18:18:86:fd:05:60:83:e1:e0:26:
                    f0:74:e3:d5:62:0d:6e:b5:cd:b5:99:a5:ff:91:94:
                    7b:e0:a8:d5:96:67:11:05:76:e9:b1:38:5f:12:d3:
                    3c:0f:42:f9:26:cd:6b:68:8d:97:5f:77:34:28:60:
                    cc:c0:4d:30:b9:7b:cd:f2:f6:4e:6f:c1:09:d7:1a:
                    25:ad:33:07:78:7a:68:e5:88:df:fa:42:d3:57:a3:
                    46:eb:cf:47:b4:bb:55:61:86:7c:9b:5c:7d:ad:5e:
                    c2:47:42:d8:27:01:af:18:3c:cc:1a:27:32:fc:08:
                    12:75:7d:8d:99:7e:de:3b:90:ce:a7:b7:1c:b6:6c:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:ED:C7:1F:68:85:54:18:D7:69:27:47:D0:1E:20:FD:83:51:DE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ecbdbd7-4105-3cab-93c0-2e0208e0e3cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:dc:a7:da:6d:6b:d4:2b:31:5f:79:89:6d:87:6a:71:eb:
         1b:28:4e:13:84:95:72:c0:1c:a5:61:f1:bf:7a:68:e3:22:ad:
         b2:a3:67:5c:7f:b3:ca:74:6f:9a:fb:cb:6f:b1:04:4a:bb:09:
         a7:8b:a1:6e:f3:83:f3:9b:65:13:e2:3c:8c:a9:a7:bb:99:fc:
         09:92:74:09:90:7d:ab:b0:0e:12:78:cb:7a:e8:7f:e0:70:dc:
         1d:9c:f6:b7:6e:87:f3:2f:4f:f2:ac:e3:74:21:ab:22:d6:a1:
         b2:0a:97:50:f4:f7:8c:a6:72:35:7c:8b:af:f1:28:54:3c:98:
         ee:93:89:c4:92:fd:9a:39:01:e1:8b:3d:97:91:4a:0a:66:eb:
         c4:4d:d2:fc:ef:bd:a4:98:5e:18:4a:4b:9a:9f:d1:19:d1:39:
         13:7b:00:12:74:f0:36:98:9b:ae:b1:2b:55:1e:89:6b:08:aa:
         49:36:46:32:4b:0e:2f:bf:b3:9c:0a:9a:7b:66:df:45:48:11:
         8d:d7:d4:ad:06:8c:a6:56:40:99:bb:1b:bc:ae:16:af:b4:fb:
         7a:25:42:26:62:56:7d:cc:80:b8:50:23:da:e3:c4:bd:46:3c:
         fa:7b:aa:7c:97:47:16:cb:8a:dc:d3:54:d7:81:1b:7e:d9:76:
         c0:49:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:33:04 2026 by rpki-client