Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9466623-3293-3f21-8fe3-f8d15d5bc08a.roa
File:                     f9466623-3293-3f21-8fe3-f8d15d5bc08a.roa (raw, json)
Hash identifier:          V98qM01KxiN6+NeUzEDEM4vrB54N/z74HIMgINk7EKg=
Subject key identifier:   05:64:89:5D:8A:79:AB:92:32:77:FD:97:E3:8E:43:BF:05:BC:B8:B0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C45CA0657021D4A441C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9466623-3293-3f21-8fe3-f8d15d5bc08a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1488:6340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:45:ca:06:57:02:1d:4a:44:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b23636e5-c5a8-4f64-9bc9-002b8ef781c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:4b:49:5d:5c:fb:54:ce:a0:08:62:00:47:
                    12:d2:06:92:fd:8c:ac:36:1c:08:ec:d7:ec:e5:23:
                    cf:a2:fa:86:c3:92:1d:af:30:7c:ff:64:d6:20:7f:
                    f4:d8:42:58:85:e9:7b:a5:5b:b8:a2:8d:d6:b0:92:
                    4a:50:da:99:00:70:ea:b1:a1:87:4c:0e:17:e2:56:
                    e4:3c:af:90:75:95:fb:33:de:54:06:38:26:1e:41:
                    c5:da:cf:53:8c:f6:d8:46:19:bf:4e:65:96:86:1e:
                    5d:42:ac:ab:cd:9a:48:a0:0c:92:13:62:72:90:05:
                    9c:5a:0f:59:d3:45:f1:cc:c4:24:41:0b:a2:ff:a7:
                    27:42:36:f2:90:48:47:31:eb:4f:17:75:7d:b0:12:
                    71:ad:2f:1c:11:1d:f0:fa:72:d8:68:58:cf:18:db:
                    03:af:c8:26:db:56:82:90:97:87:44:7d:89:bc:70:
                    d0:d9:11:55:f8:c3:30:58:f9:85:64:0d:45:3a:30:
                    21:34:ac:8a:e2:e9:07:3b:61:e2:d0:dd:4e:55:ae:
                    3f:89:50:36:5a:67:b0:16:94:8a:46:06:7a:ba:a9:
                    f3:a9:31:6e:82:28:ba:37:4c:49:bc:ea:06:5a:36:
                    3e:85:b4:90:fe:53:ac:a3:3b:95:17:b4:40:bc:4d:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:64:89:5D:8A:79:AB:92:32:77:FD:97:E3:8E:43:BF:05:BC:B8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9466623-3293-3f21-8fe3-f8d15d5bc08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6340::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:49:7c:ce:49:3a:2a:c9:64:7d:d8:e5:18:ec:63:87:19:
         20:ec:3f:7c:ea:8b:da:e2:27:d0:4e:49:11:cc:2e:a7:14:83:
         5b:e7:77:c1:4d:46:29:12:f5:5a:e1:71:d9:78:a3:cf:90:68:
         01:1c:b6:66:dd:ad:8b:1c:02:5f:d2:ce:be:6a:44:49:56:47:
         81:e1:46:95:2c:91:12:ce:fc:9f:b1:8c:70:cf:8d:be:47:34:
         3c:8b:20:41:b0:ba:17:5d:51:e9:71:8b:1d:d8:5b:64:b8:fa:
         91:84:eb:8c:f6:ab:53:80:94:6b:c1:e6:39:25:09:33:b8:62:
         c5:82:cd:ea:e6:9b:f6:d4:b2:a3:12:60:77:62:6f:ac:4d:18:
         12:c7:b2:2c:d7:e0:15:a9:a0:b4:ea:3b:26:9a:84:47:94:11:
         14:04:ec:81:cd:33:ec:55:49:46:ae:d3:94:2d:b0:7c:bd:0c:
         dc:b6:b3:0a:9e:6e:1a:1c:a2:f4:f4:b5:40:9e:8f:ea:29:69:
         50:44:c5:24:cd:2c:0b:07:29:0a:89:9b:f0:4c:d1:01:59:46:
         82:75:5d:f0:f7:bb:93:ac:d0:de:b0:a4:a8:c0:b6:bd:fb:02:
         35:6f:3a:0b:12:27:29:e7:fc:55:83:85:7d:99:58:ea:1c:1e:
         d4:ce:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:57:39 2026 by rpki-client