Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb50a8b-2880-3ead-a44b-e95852d054d4.roa
File:                     abb50a8b-2880-3ead-a44b-e95852d054d4.roa (raw, json)
Hash identifier:          BZ+Vw99JYcqu5u9e+84B7O7ZCLNGMSFrVSr+1JMTW58=
Subject key identifier:   52:B0:EF:40:00:C2:2A:BC:59:02:10:77:2E:57:AD:90:9C:90:E7:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D95EFFA28B32F6581CA32B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb50a8b-2880-3ead-a44b-e95852d054d4.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     32787
IP address blocks:        2606:6c00:209::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fa:28:b3:2f:65:81:ca:32:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=413dbfe4-2238-42bb-b809-c9f998bbe651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:4d:3e:2f:28:59:cf:74:67:e2:5b:0d:0e:
                    3e:5f:e3:25:30:72:80:13:de:2d:45:65:08:d6:fc:
                    89:f6:1b:08:25:64:d4:eb:f0:98:36:d5:8d:83:28:
                    41:34:25:d0:2f:f4:02:65:32:d1:41:9c:90:fd:73:
                    d9:e3:a3:22:74:2d:15:3d:da:e2:4b:75:dd:83:c9:
                    43:d4:1b:e2:83:e0:cf:60:c9:6a:80:c0:57:1f:f9:
                    7d:ba:1a:d1:ef:4a:f8:8b:6a:97:4a:71:e5:10:a5:
                    2f:95:04:30:45:3e:1c:6c:56:c1:d8:26:6b:cf:ed:
                    28:7c:c0:7c:89:7a:ac:39:01:9f:6a:4e:d0:e9:2a:
                    23:27:ad:66:f1:9e:ad:ec:e9:33:e9:1c:3f:60:61:
                    a1:fe:0b:ee:dd:27:db:31:a6:0e:44:a6:eb:4e:fa:
                    79:f8:8e:0b:83:ae:3e:62:c7:0c:0f:48:49:55:f1:
                    26:25:82:9e:35:80:f2:ef:a5:9e:ef:5b:6e:bc:5a:
                    ed:01:e1:b7:d8:d0:ab:c0:03:67:0c:a2:df:10:7c:
                    6b:bd:5b:78:53:dc:2d:8d:af:11:d9:fb:af:a3:c3:
                    bc:23:54:fb:a7:5b:0b:d2:29:90:2f:dc:33:d2:f5:
                    5e:41:37:09:75:76:b1:f9:f1:e4:dd:7c:ba:23:ff:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B0:EF:40:00:C2:2A:BC:59:02:10:77:2E:57:AD:90:9C:90:E7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb50a8b-2880-3ead-a44b-e95852d054d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:209::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7d:90:6e:42:58:18:b7:75:71:56:2b:70:6a:2a:c4:81:e6:
         78:d0:91:cd:39:8e:16:82:08:f6:bf:5f:90:76:ee:5b:17:43:
         98:eb:80:6f:84:60:8e:e5:5f:b6:8a:17:73:b5:ba:83:4d:13:
         20:f7:84:e8:90:38:b8:50:f8:08:58:ae:ec:80:0c:d0:92:d8:
         aa:77:74:46:e2:4e:74:80:17:f6:b3:3a:80:c4:af:5c:54:14:
         70:c3:55:96:da:24:2e:eb:68:06:f7:ee:65:17:53:f0:d2:91:
         1c:5c:f3:4f:0a:ab:a4:43:7a:d6:86:99:46:ed:88:82:b6:68:
         22:d1:60:28:57:96:bc:de:2c:85:4d:c8:b5:95:39:5c:45:6a:
         bd:b2:73:a0:59:9f:3a:9f:01:d2:8f:76:b7:93:c6:8e:98:3a:
         08:41:82:d8:bc:20:48:e3:66:89:a9:24:2e:3e:68:98:d7:24:
         cc:4c:3f:0a:55:f3:42:5e:8e:92:7a:f0:96:d1:d5:90:71:af:
         0c:22:7d:9d:6e:84:d2:17:7f:28:23:cb:90:21:9c:55:5a:ec:
         25:3f:41:d4:60:fc:c3:ce:30:af:e0:b4:29:a9:28:e9:7d:0a:
         31:22:48:3d:e0:b6:b5:9b:b3:be:34:64:18:c2:df:96:b6:1b:
         a2:e8:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:21 2026 by rpki-client