Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8459a55c-441f-371d-9949-2c95d52784b6.roa
File:                     8459a55c-441f-371d-9949-2c95d52784b6.roa (raw, json)
Hash identifier:          5TKwctS0uN5DtHirWxgd0c6tWU6Qkd5f0a1LIL2AdM4=
Subject key identifier:   58:D4:07:02:4B:80:B4:EF:82:CF:18:75:88:7F:B6:3C:C1:B0:E5:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4974FA7F1A7EBA14FE7119C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8459a55c-441f-371d-9949-2c95d52784b6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32787
IP address blocks:        2606:6c00:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:fa:7f:1a:7e:ba:14:fe:71:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a3b29c73-5aba-46dc-9ac7-a18d44e95edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:98:1c:d0:4e:c7:ba:00:8e:80:ec:68:7e:
                    0f:0d:0e:8f:49:52:3f:8b:37:e2:b2:d7:03:4a:5d:
                    c1:20:51:53:15:15:0f:37:cb:ab:de:3e:4e:3d:30:
                    dc:6f:8b:0f:15:b7:9e:8e:ff:53:f9:bd:d6:71:25:
                    39:ff:7b:85:5c:f4:e1:99:b5:c1:59:7c:0c:b4:e5:
                    20:f5:89:8d:e1:ef:12:3e:3f:fb:c1:23:f7:2b:c2:
                    de:61:e3:bf:75:f8:00:fe:72:9f:14:73:be:cc:a5:
                    8c:c6:40:48:df:18:fe:9a:35:5f:1b:61:c9:af:c0:
                    50:51:06:03:8b:03:92:41:e1:cf:a5:d7:ec:49:5a:
                    41:0e:6b:55:fe:1d:60:d6:77:8c:c4:75:64:94:e7:
                    d1:15:52:70:f7:03:12:be:44:e3:da:26:03:22:5f:
                    47:db:10:3e:b8:8e:01:2f:bb:bb:ee:1d:29:c3:af:
                    78:f2:0d:ca:26:f5:e5:5f:09:26:e4:b4:0f:51:03:
                    f6:ab:13:19:d1:43:c0:94:12:1a:63:27:2d:c9:e7:
                    da:8f:85:7f:b4:cd:5d:d7:59:25:17:79:77:2c:cb:
                    7a:b5:0a:fa:f3:71:fb:45:9c:ae:d7:e8:24:d6:a5:
                    10:c1:ea:bf:58:70:94:39:45:0a:4d:76:c4:30:3a:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D4:07:02:4B:80:B4:EF:82:CF:18:75:88:7F:B6:3C:C1:B0:E5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8459a55c-441f-371d-9949-2c95d52784b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:44:60:cf:eb:fe:44:cc:07:e8:77:03:29:34:e6:dd:70:
         f7:ea:9e:a3:d6:4f:50:12:e8:a5:7f:be:7a:f1:0b:11:13:cc:
         4e:75:ea:9e:36:78:91:7b:34:4f:23:45:c3:dd:31:32:83:dd:
         26:aa:1f:e0:19:a5:52:d4:10:a0:28:90:01:b7:17:3a:f1:8e:
         3b:9d:23:a7:01:b7:d0:29:33:3b:87:f2:12:89:ac:b5:41:d8:
         3a:f5:c9:08:f2:d7:56:ba:11:ad:1c:f2:42:3c:52:3e:39:ba:
         b0:a6:05:8b:5e:df:97:e7:67:9b:16:13:18:ab:e6:ff:61:73:
         c6:48:89:53:51:65:77:02:93:22:45:c2:52:9a:90:07:6c:46:
         19:1a:d4:c0:f8:22:04:47:7b:71:37:f4:79:2e:5b:f8:e7:58:
         e2:b4:24:47:51:0e:61:72:e0:16:94:88:d0:bd:6f:a7:b2:d7:
         70:b6:ee:03:f5:fb:b7:4b:e9:6f:49:5d:57:e4:9e:65:bb:9c:
         0d:fc:35:f6:d3:3c:b5:fe:ab:e2:ce:a4:c9:25:f4:05:41:10:
         a8:1b:4c:50:e4:70:4e:58:c4:7e:c1:69:1b:2a:ce:b1:1c:38:
         e3:85:0d:a3:a1:c7:d2:9c:0f:e5:55:19:b0:91:6d:eb:86:3b:
         99:75:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:28:40 2026 by rpki-client