Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3121e249-5c4f-3efe-9e32-fab26bc02ab3.roa
File:                     3121e249-5c4f-3efe-9e32-fab26bc02ab3.roa (raw, json)
Hash identifier:          WGTuE3rWzVr9XBqQCBqgaNmChfU7qoLwGjP8uU6GbnM=
Subject key identifier:   C9:63:1E:10:1D:44:58:54:52:CA:F1:AA:A7:C7:A0:CB:40:BE:88:3D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C5618B59657BF554CFB20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3121e249-5c4f-3efe-9e32-fab26bc02ab3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     24319
IP address blocks:        2600:1417:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:56:18:b5:96:57:bf:55:4c:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4b0e5f09-1c4e-48cc-b459-8582948e24d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:a9:71:64:38:ac:57:49:15:ae:8e:bc:6d:
                    6f:7e:b6:64:6f:6b:04:5b:83:93:c5:80:03:9b:ee:
                    28:1a:ac:71:24:5c:06:64:4d:0d:1e:89:64:8c:1d:
                    25:a6:63:c9:b8:ed:5c:c2:65:d0:58:97:07:80:a5:
                    39:88:61:80:55:6e:ae:4f:e1:e7:93:88:6f:53:31:
                    0a:8d:e8:08:bf:72:b8:4c:e1:c6:16:1c:69:e7:2b:
                    51:6e:e4:29:75:f5:3d:89:1a:24:56:19:cc:0f:6d:
                    bc:1f:3d:03:ff:c1:6f:45:98:27:12:35:c5:08:f0:
                    1d:78:bd:21:2e:a0:a6:5d:6f:26:22:b4:ae:e5:84:
                    0c:f8:a5:68:2d:ef:75:bc:d8:a5:67:8f:0f:5c:bc:
                    d6:11:9c:8c:13:88:71:46:4c:f3:78:4c:6a:2d:52:
                    ed:28:8b:6f:ca:16:f6:7f:51:7e:9e:a0:b5:33:8c:
                    90:af:cc:dd:35:85:13:5c:fa:2e:f7:ac:cf:0c:f4:
                    a1:6d:1f:78:d6:0a:f3:4c:d5:94:62:87:24:fb:8a:
                    32:95:62:51:3b:c8:7d:da:0f:23:3c:1a:66:62:90:
                    16:6b:c6:7e:2f:99:d8:92:59:17:16:48:b5:24:a5:
                    0a:1f:f5:32:3e:e1:3c:f9:86:e2:16:ea:28:17:cb:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:63:1E:10:1D:44:58:54:52:CA:F1:AA:A7:C7:A0:CB:40:BE:88:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3121e249-5c4f-3efe-9e32-fab26bc02ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:af:dc:3b:3a:d7:a2:e0:2f:f9:62:a8:b0:d1:fa:27:0b:4e:
         fa:2b:b1:7f:f2:9a:46:38:e1:4c:99:5f:5e:89:e7:40:eb:77:
         db:a2:2b:00:f2:1e:b9:9d:ce:47:e3:e9:34:94:1b:5c:32:95:
         fc:57:2c:28:1d:72:0c:cf:ed:1b:8a:ea:99:c8:e1:ec:ec:39:
         77:c6:9c:d5:df:26:c7:0f:ed:1b:a1:3a:ca:45:46:ba:6b:95:
         48:f6:43:63:13:be:69:cf:ff:72:b7:0f:cc:19:87:58:83:00:
         9f:1e:e2:1c:32:07:46:3a:ed:39:6d:3e:85:52:76:4e:bb:9e:
         3e:78:82:fe:09:4c:4a:21:00:83:c1:b3:36:c1:ec:21:27:2e:
         e3:c0:90:6a:4f:14:ef:4c:a4:43:7f:a1:d0:30:40:f7:25:5f:
         0d:63:a8:f4:65:b2:fd:d9:63:18:27:9b:18:77:14:bf:fd:b0:
         b5:d1:64:6b:a8:67:a7:1c:c8:2f:7f:d5:87:f0:0c:ef:6c:37:
         53:77:7b:e3:36:c8:61:b1:2c:82:d4:ab:c4:95:15:31:7e:bc:
         b1:b4:e0:e3:af:47:52:0c:07:ca:3b:4b:f9:ae:b6:e1:88:5f:
         e7:ba:0d:e7:9e:04:3e:3b:11:9f:76:ff:87:71:ba:62:8e:0e:
         fa:19:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:06:51 2026 by rpki-client