Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7e033-0e11-39b4-851f-543fdc106d23.roa
File:                     a1f7e033-0e11-39b4-851f-543fdc106d23.roa (raw, json)
Hash identifier:          NysHSQw4PtoZkL6Gn1PdmcTcJSKOoiUKURyK6XTdAfQ=
Subject key identifier:   D3:84:1B:0A:AB:EA:19:78:1C:BE:5E:3A:54:E3:49:48:61:CC:80:95
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCAFB0E03339697579F778440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7e033-0e11-39b4-851f-543fdc106d23.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1403:5400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0e:03:33:96:97:57:9f:77:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=ff02fe3a-7fdb-48f2-8f8a-af80cf2109f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:43:74:88:e1:86:4e:08:b4:aa:86:51:2c:
                    03:e2:94:20:64:52:b1:95:07:ed:07:90:c1:3d:bb:
                    fb:c2:e6:32:b1:e3:86:74:1d:82:03:0b:85:55:c5:
                    60:d2:82:e5:6a:33:4e:e9:60:f1:14:b5:f3:95:e5:
                    85:ae:72:a4:88:fe:94:af:10:d9:01:3e:7e:ec:c6:
                    93:f7:41:91:7f:4a:a2:8e:89:b7:b4:eb:f8:f8:a2:
                    c7:0e:58:c3:09:16:cb:82:b8:33:d1:41:95:aa:7c:
                    56:e1:31:cc:0b:14:98:29:46:f3:b6:76:46:68:eb:
                    f2:d5:74:bc:84:39:2d:31:bd:a1:02:de:15:a2:5a:
                    e6:13:a9:6e:5e:6e:84:cd:b8:39:fb:b6:d7:69:ce:
                    53:98:c7:27:89:5d:1b:d5:ea:6d:15:d8:0e:b3:eb:
                    f9:b1:7b:45:44:dc:c2:dd:59:98:2d:e3:d6:0e:c6:
                    e5:d2:84:20:bc:25:b0:ca:28:88:59:5c:5b:62:2a:
                    5d:95:fc:e5:21:4a:07:26:ea:e7:d8:77:80:b1:3c:
                    67:46:2f:af:2e:ca:0e:d3:84:14:1c:29:0e:32:73:
                    75:51:c0:81:de:3c:59:ce:11:3c:62:c4:d2:0f:77:
                    9a:56:7d:ed:51:75:f5:66:85:67:4e:c8:da:04:d6:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:84:1B:0A:AB:EA:19:78:1C:BE:5E:3A:54:E3:49:48:61:CC:80:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7e033-0e11-39b4-851f-543fdc106d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:5400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:b0:1a:82:db:cf:be:84:9a:1d:b2:19:ce:1b:50:64:19:
         dc:e7:d8:2b:84:d1:bd:d4:d8:c6:2b:7b:21:12:a9:48:6c:2c:
         ee:28:f9:db:b7:3f:f0:59:61:30:96:d2:b9:3c:77:03:50:29:
         45:0e:61:9f:19:24:33:9c:3c:6e:44:07:80:1b:cd:9e:35:55:
         00:71:c5:a3:ea:dc:23:77:26:46:be:59:48:00:53:62:a1:4e:
         d2:b3:fb:71:1b:5b:c1:30:95:73:3d:d6:da:09:13:8c:4a:d9:
         6e:00:9f:7b:55:b4:c9:e6:f3:89:5c:91:4f:5f:e6:60:ef:34:
         ca:af:c7:3f:90:46:fa:60:b9:7f:3c:e6:bb:ee:35:63:3f:f7:
         bd:ae:96:1c:1c:2c:08:66:4f:75:54:e8:e7:cc:3a:6e:3d:7f:
         f0:a8:06:35:85:78:3e:f6:e3:d8:72:01:fd:e1:4e:0a:f5:6f:
         c9:5d:5d:32:29:8a:7f:6d:91:67:bb:8c:2e:1b:85:d9:53:00:
         50:ce:13:3c:87:c6:a4:6f:7a:02:ec:b5:c1:6e:ff:6c:2a:32:
         88:40:72:1b:87:e3:e9:06:8f:d6:4f:d2:b7:38:84:b8:54:a0:
         42:11:c9:f5:89:e0:32:8b:83:ee:ad:54:3a:3f:7d:35:b4:08:
         29:08:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:53 2026 by rpki-client