Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7761cc63-4146-35ba-b636-ca7d67544503.roa
File:                     7761cc63-4146-35ba-b636-ca7d67544503.roa (raw, json)
Hash identifier:          GwX/QkDmLJNuqVOoyQSKj2cjn1CeD035IbIHkHEttC8=
Subject key identifier:   D5:BE:C0:6A:63:54:4E:17:3D:FE:A8:F0:80:CB:C0:9F:92:FF:EA:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F49848404EC0DB7F62F1D9200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7761cc63-4146-35ba-b636-ca7d67544503.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     24319
IP address blocks:        2600:1417:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:84:04:ec:0d:b7:f6:2f:1d:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f7a09c27-3c18-440c-830d-f2f4c36f4b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:7c:8d:6e:96:a9:b2:88:92:06:ed:ee:cf:
                    b7:dd:ed:b2:79:8a:74:d9:0b:d8:52:9f:d7:3d:28:
                    c2:bb:04:cb:56:ba:f9:00:e2:d5:f8:8b:f0:82:ba:
                    9c:91:eb:70:7f:3c:f5:63:9e:ba:1c:39:e8:6b:35:
                    db:da:56:95:5a:1e:6a:1a:0f:1c:d7:21:8c:a2:df:
                    1a:5a:87:5e:9d:b7:40:f3:d1:7a:49:c2:5d:47:6a:
                    65:2c:b1:3c:ac:77:43:38:46:9e:9e:5b:2f:2b:98:
                    1f:90:80:f7:d2:03:d1:0a:53:57:a6:c2:fb:13:b6:
                    d8:32:43:d6:f2:23:0a:4d:83:b1:03:20:b8:f5:c4:
                    14:94:da:77:94:71:48:29:34:19:6d:f3:4a:66:0f:
                    e8:e9:71:f0:9f:90:12:4a:a5:0e:64:01:77:55:38:
                    71:d3:1f:6e:67:e0:84:ed:91:3d:2b:bd:3e:37:f2:
                    62:03:bb:d1:02:f1:9f:7c:06:11:fc:39:44:84:64:
                    81:c4:b5:97:75:5e:58:a9:65:6a:e5:ac:29:e6:09:
                    14:30:04:4a:c1:ec:f7:a0:af:83:21:65:e8:d7:69:
                    ae:a0:98:db:cc:4f:aa:2a:a0:c4:d0:af:dc:24:68:
                    cc:b6:ca:d5:43:4a:1f:47:a8:f5:7a:2c:f3:78:20:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BE:C0:6A:63:54:4E:17:3D:FE:A8:F0:80:CB:C0:9F:92:FF:EA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7761cc63-4146-35ba-b636-ca7d67544503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:38:0e:1b:24:44:0a:0c:66:36:fd:58:17:ba:8d:37:4f:49:
         35:69:5b:7b:ab:07:0f:df:75:00:3d:fe:1a:33:a9:92:b7:c8:
         ba:0e:c9:af:14:70:d0:51:80:db:0c:8c:87:7c:0b:b8:64:37:
         88:44:45:a7:57:5a:61:a4:e8:ca:39:78:37:c6:4d:31:f8:55:
         72:96:ff:2b:51:be:4d:60:3a:dc:2f:8a:7b:8f:a8:88:3e:7a:
         ad:13:b2:b0:41:0d:6f:5e:71:89:0b:21:21:85:6f:c5:ba:8d:
         c6:d7:52:59:d8:56:ad:99:66:3c:e8:bc:6c:bd:58:9c:82:3a:
         05:63:f2:85:97:64:d6:68:41:f6:9f:cd:fc:2d:f9:06:92:5a:
         19:46:46:22:f4:9b:0c:69:29:1c:fa:4a:10:03:a6:af:1f:a8:
         9b:21:ac:69:ef:8b:18:0f:05:df:b9:1c:f0:61:76:97:13:37:
         ec:5e:54:92:35:64:1c:5c:28:43:98:6e:4e:5d:5f:aa:45:98:
         14:e0:10:a0:5a:c6:5b:63:eb:17:bd:8f:ac:bd:ea:c3:05:f9:
         7a:14:29:4a:a8:28:25:79:95:9f:52:c1:af:ec:4e:61:0a:5e:
         57:68:46:c3:c4:aa:33:29:c7:c6:92:7a:a5:19:33:13:91:01:
         61:d6:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:40:57 2026 by rpki-client