Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fa5c6ba-8f62-3c62-acfa-668dd1278f83.roa
File:                     0fa5c6ba-8f62-3c62-acfa-668dd1278f83.roa (raw, json)
Hash identifier:          A0WMvx4mLhlT6t/hVvSlfUykYh5v45NVeWHO+ksB580=
Subject key identifier:   32:C6:2C:21:D0:BD:A8:B5:39:78:A2:C6:4C:F7:2B:73:0A:6F:6B:21
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C7D7C440A5960E71193C21200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fa5c6ba-8f62-3c62-acfa-668dd1278f83.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:2038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:44:0a:59:60:e7:11:93:c2:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=40505c61-f335-4694-9531-a8c4d9bc5c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:47:9f:23:ad:5e:90:e3:06:8d:c0:3b:fc:2a:
                    30:ad:56:bc:df:d1:91:20:fe:b2:1e:39:03:11:fe:
                    61:a5:d2:5b:f8:57:21:10:04:47:a2:2e:a9:29:2a:
                    ae:ba:ea:21:54:09:90:fc:12:b7:96:e7:7a:76:9e:
                    69:40:d4:9e:6c:05:ed:7c:e2:24:f5:95:02:a7:e3:
                    98:65:e0:b3:a3:5a:52:b2:a3:41:e0:15:c9:88:70:
                    27:ff:c2:b7:8b:7c:39:d4:bf:98:46:83:2b:29:98:
                    e2:69:23:59:dd:a5:4d:aa:8e:53:7f:94:d5:7e:4d:
                    bc:86:32:85:5b:80:a1:79:57:57:4e:62:7d:c9:41:
                    22:b5:d3:54:a2:26:35:10:f8:5f:2d:57:1b:59:05:
                    83:c8:59:bf:d1:db:db:76:59:bd:f6:a5:27:bf:cd:
                    56:07:93:c8:85:8d:15:01:33:2c:55:db:77:6c:72:
                    6d:8c:09:2c:b2:ab:6c:09:ce:84:be:7d:be:3c:f7:
                    67:6e:43:68:11:17:b8:bb:0c:97:2b:0a:3b:a5:cd:
                    ed:bc:25:f2:ec:14:f1:b8:49:b8:27:8c:ca:c3:d8:
                    06:a1:02:76:e1:84:40:5c:ad:d5:0f:5b:60:77:48:
                    d8:71:39:0c:14:6e:ae:39:87:2c:4e:0d:1c:27:14:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:2C:21:D0:BD:A8:B5:39:78:A2:C6:4C:F7:2B:73:0A:6F:6B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fa5c6ba-8f62-3c62-acfa-668dd1278f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:1f:8f:e3:7a:a6:ac:45:7c:f5:bf:b8:4b:b6:46:89:27:
         b0:05:02:a8:09:a8:71:8f:13:8d:bb:06:51:fa:3d:2d:dc:b3:
         4d:12:1c:fc:69:17:71:21:07:39:ec:d1:ef:66:9d:a0:7e:59:
         e0:42:33:50:b3:b2:2f:7c:15:07:fc:69:fd:c4:c8:01:95:a9:
         01:0c:3d:8a:fb:3f:e5:51:95:c1:f0:7e:3f:5a:cf:05:9e:71:
         3d:29:a2:76:1d:b0:af:e3:4f:b9:72:ec:a7:41:f4:5b:90:a6:
         9c:3c:d8:e8:b2:da:95:87:54:4d:fe:ef:40:d6:94:09:35:fe:
         17:cd:3c:cf:ea:9b:1d:93:5e:45:a9:05:78:0f:bb:c5:63:92:
         31:10:00:92:b6:2a:1a:02:18:b4:b0:83:ea:a7:7b:20:4f:50:
         08:88:d5:03:dc:c2:24:74:a5:48:43:a1:fe:b5:fd:6c:ac:27:
         ca:fd:55:48:cd:26:47:99:de:3b:cd:13:ad:00:4e:69:33:e0:
         51:2b:d3:94:6f:57:c5:25:c6:38:97:3b:b2:e0:98:a7:7d:29:
         33:ee:34:9b:89:16:5b:b4:92:62:8d:6f:27:46:58:b3:9d:0b:
         c3:24:42:c1:2b:4c:ef:6f:2e:80:62:72:b3:66:97:f5:7e:b6:
         29:c9:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:01 2026 by rpki-client