Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b22684bd-dab2-39b9-8504-2bda510d2430.roa
File:                     b22684bd-dab2-39b9-8504-2bda510d2430.roa (raw, json)
Hash identifier:          3Jyxle6wlZJ61tLIKnKFLMeXF6zVI6RWa3wa8cOf1aA=
Subject key identifier:   C9:FD:D0:F5:63:40:33:B2:3F:C7:4D:52:31:01:3D:13:F4:B8:AB:65
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5BCB04F8118FF2DAB1200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b22684bd-dab2-39b9-8504-2bda510d2430.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:140a:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:bc:b0:4f:81:18:ff:2d:ab:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=7a5e73dd-e322-474f-a443-d7591b777d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:a2:d2:0c:ed:64:d1:76:ce:43:c6:03:87:
                    f6:75:5a:ca:b4:f3:eb:97:a3:61:59:db:18:34:f9:
                    97:ab:c4:84:01:69:58:46:be:85:03:0e:22:69:72:
                    fe:75:5b:64:86:e4:33:38:70:44:f9:db:95:39:f3:
                    a8:bc:0d:be:e2:d7:e4:fc:ee:27:19:b1:ca:5d:ab:
                    ef:5c:c6:dc:79:7e:ed:2c:28:50:2a:42:f9:e5:18:
                    3a:9d:24:26:84:2a:74:96:6a:ce:17:d8:96:e7:c7:
                    9d:95:51:50:52:a4:be:8c:75:22:02:a4:c5:0e:45:
                    bc:e7:f1:02:34:37:e9:1c:fa:a4:78:f5:63:28:2f:
                    79:29:0b:e3:be:09:f8:4b:f0:10:4d:57:66:8b:be:
                    45:5f:e6:61:8c:78:02:67:d5:8a:4b:67:8a:aa:66:
                    b0:f2:bf:56:8b:81:9d:5f:43:e9:48:a7:99:db:47:
                    cc:0a:d0:fe:ff:b9:d0:64:fe:3d:c6:6a:08:3c:d5:
                    ca:43:8c:27:db:f5:df:f0:b5:c5:da:ed:ee:f2:fc:
                    1c:bf:72:87:c7:bf:a6:35:85:52:a0:b0:f9:e8:22:
                    0d:b1:78:67:96:fc:f4:0a:8a:ed:ff:0d:cf:3f:61:
                    40:25:7b:af:fa:fa:b6:71:6b:f2:1f:32:da:63:fe:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FD:D0:F5:63:40:33:B2:3F:C7:4D:52:31:01:3D:13:F4:B8:AB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b22684bd-dab2-39b9-8504-2bda510d2430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140a:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:e1:d4:b4:32:c7:3c:ee:d5:26:34:b8:26:da:a5:28:c2:
         ea:dc:74:60:a4:a2:8e:9a:d7:8d:3f:9e:59:89:ce:63:09:e6:
         ac:52:76:3a:91:6b:e1:81:6f:6f:94:13:ce:8d:ac:26:7b:fc:
         45:39:7f:25:16:38:d6:ed:ca:e7:ec:ed:7e:6e:38:ac:2d:21:
         6f:10:de:0b:3a:ca:0c:27:a6:72:70:e0:38:46:78:7e:24:54:
         06:b7:d9:87:08:5c:0b:00:78:d2:b7:fe:c2:5d:43:f2:1d:36:
         fd:5c:ae:70:cd:8a:b6:a0:fd:d1:cd:7f:9d:64:0b:38:2b:81:
         27:eb:2d:cc:78:6b:38:dd:bb:13:81:fe:ff:6d:98:2e:25:95:
         01:2a:28:bb:f8:2a:8e:70:b1:5a:2f:c6:75:d2:b5:e0:8d:17:
         fe:a7:17:4c:ee:79:c0:03:89:08:53:de:01:df:a2:71:84:a4:
         14:0a:4d:b2:f4:da:92:3a:ea:96:cf:a1:5d:2a:a4:4e:83:1f:
         34:22:60:a3:80:8f:46:54:cf:a2:11:9d:c9:f9:10:ac:e2:dd:
         6a:41:aa:c1:79:8b:22:88:3f:d3:30:cf:0e:27:31:19:09:b2:
         2c:76:93:cb:3c:2a:95:5b:7b:51:4a:72:57:cd:aa:c8:8d:b1:
         a0:3c:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:30 2026 by rpki-client