Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82528836-9be8-3f5c-9eca-d49ce8c153b0.roa
File:                     82528836-9be8-3f5c-9eca-d49ce8c153b0.roa (raw, json)
Hash identifier:          72GTvA7uDqYmjQu/gdiYP+AfLTk9Wfk84qMOaSTaB9w=
Subject key identifier:   08:DA:D4:00:20:A6:E4:30:F5:D4:EC:38:42:54:F3:0B:53:9C:BA:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F23C24F0214F770AA7DD8B0C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82528836-9be8-3f5c-9eca-d49ce8c153b0.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        2600:1488:4007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:4f:02:14:f7:70:aa:7d:d8:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=6cba33d1-2367-4239-a0a6-be73a88bcb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:e6:52:b3:11:23:f2:9e:e1:b9:91:27:09:
                    78:ea:5c:3f:57:21:20:6c:38:93:0f:6e:01:65:83:
                    e5:f7:15:df:ea:2b:7d:f2:5b:ee:aa:6b:bc:1d:10:
                    55:9b:6b:a6:0f:88:f0:c7:62:10:40:2e:f1:2b:81:
                    06:59:9a:8c:20:51:76:87:07:89:09:5c:3c:e5:0c:
                    81:ac:6b:13:cd:33:77:0a:15:d3:b0:e3:2c:db:47:
                    f3:fc:ad:2e:20:c3:cb:50:d9:90:8c:0c:d3:3d:a3:
                    e9:b2:61:b6:6a:c0:0f:78:52:c2:d6:20:5d:2b:94:
                    7c:13:cf:f0:c9:d1:76:9f:9a:46:b5:fb:7c:fb:28:
                    21:1f:bf:95:56:29:6b:cb:03:3f:d6:b7:a3:c7:a1:
                    90:d2:46:71:21:c7:0b:93:e9:4b:79:af:52:ac:64:
                    70:c6:6f:42:12:21:7a:2d:64:25:e2:c2:c7:97:a8:
                    68:d1:65:c2:70:a8:ce:3a:4b:ab:de:52:7a:19:b3:
                    1c:b0:a5:a1:47:9b:a1:b0:50:4e:ba:51:15:ce:e3:
                    db:92:2a:dc:15:df:4f:f8:ca:20:98:59:9c:b2:85:
                    18:e4:2d:26:61:80:ec:6c:cd:5c:17:6d:1b:5e:d8:
                    23:15:f8:06:c4:13:42:ed:cc:6b:7f:ef:c5:f0:37:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DA:D4:00:20:A6:E4:30:F5:D4:EC:38:42:54:F3:0B:53:9C:BA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82528836-9be8-3f5c-9eca-d49ce8c153b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:4007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a7:4c:3d:7d:98:ca:d6:11:6f:86:38:e3:89:8f:a6:e1:8c:
         fc:45:dd:49:5f:ad:e3:e9:65:fc:3f:76:f7:4e:51:3f:2e:3b:
         a6:93:08:b7:38:77:b5:34:91:29:fc:dc:37:8a:64:f9:ed:66:
         88:3c:0b:73:d9:da:58:f4:c6:43:89:ad:bb:7d:74:f2:4d:1b:
         14:d7:7a:35:d7:84:21:22:79:76:9c:76:c9:2e:fe:47:50:fc:
         0a:2b:0d:19:81:8f:b8:da:d7:ef:d6:75:cc:47:7e:7e:1f:d6:
         7b:fb:32:a4:8f:b9:16:22:a5:53:be:50:71:1e:63:c3:bd:e8:
         46:65:07:71:b8:99:4a:bc:97:99:ac:09:05:0b:91:59:fd:a1:
         5b:a6:ec:f8:24:1b:09:4b:86:34:ab:61:32:cf:16:a8:6a:1a:
         59:b7:b7:c2:ea:67:87:11:e1:f3:31:fb:de:22:2b:91:f6:c2:
         67:d7:74:73:55:d6:d6:f6:10:36:c1:5e:a5:96:cb:c0:b3:3b:
         bd:35:38:16:9d:4a:ef:0f:47:aa:c3:6f:b3:ff:95:6d:d6:5c:
         50:8d:be:c0:d2:53:07:1f:0f:b7:66:0d:71:85:3e:1e:08:3e:
         78:f8:6f:2d:e4:a9:79:e8:e4:4f:b7:84:24:e7:82:59:eb:ea:
         e8:06:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:40:03 2026 by rpki-client