Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa
File:                     3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa (raw, json)
Hash identifier:          rYf75b7Gzg6CIoDdcL0yX+Orwm3RNRC+mJHOFH829Zo=
Subject key identifier:   18:E1:F6:40:59:71:21:55:1C:92:C3:2E:49:F9:27:38:5B:B3:72:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CEA5CF82D061607B22E24C7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1402:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f8:2d:06:16:07:b2:2e:24:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=4470b6f6-dc77-4e1e-bb37-c5aadddda49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:4e:e1:0d:9b:b0:d2:8b:50:fe:83:96:6b:
                    02:a7:a0:24:4c:95:91:71:74:b8:2d:d4:67:37:16:
                    9a:a6:4b:94:46:13:86:02:9f:cf:f1:80:0a:50:ed:
                    6d:1d:74:20:8f:c2:8c:30:37:7e:9c:93:4a:82:3e:
                    fe:b1:fd:81:4b:b8:15:7a:14:1f:25:aa:9c:10:58:
                    a6:ef:47:1f:0c:a6:08:47:89:6c:b0:7a:bb:0e:c7:
                    97:32:6c:21:3b:ef:8d:07:81:53:0e:5e:ba:69:7e:
                    af:f9:45:70:ef:86:b1:97:7d:f3:44:6e:b2:8e:ac:
                    a8:86:0f:cc:f6:00:b2:e5:24:b4:68:69:79:4d:ab:
                    51:27:f2:64:3b:61:41:d6:9a:fd:67:a3:09:65:cd:
                    8c:82:90:a3:b3:9a:88:c1:81:b3:a4:c3:71:20:c2:
                    87:9f:05:fd:a9:34:d1:7a:6e:30:ce:ec:4c:fe:d7:
                    c2:6f:1d:22:ff:68:66:94:1a:89:79:2b:65:d6:a5:
                    0f:5e:44:39:01:07:2c:1e:bc:57:a5:c7:a7:36:ab:
                    ab:71:c3:b0:8d:82:6a:66:e1:76:fd:e3:c4:8d:e2:
                    c8:e6:6a:08:11:90:80:9f:ca:46:24:8a:f7:80:3b:
                    b7:66:0a:f6:b7:86:13:82:e0:5b:9a:a9:94:1a:d9:
                    ed:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E1:F6:40:59:71:21:55:1C:92:C3:2E:49:F9:27:38:5B:B3:72:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:33:8a:3f:36:65:7a:70:b8:8d:7f:b1:f7:ee:bb:3f:38:3f:
         96:17:de:2c:c4:6b:0f:ff:01:6a:11:b8:6e:45:92:d7:63:1d:
         31:e6:cc:96:38:1f:e3:fb:84:b9:ae:6d:b1:97:6d:41:65:ad:
         f8:08:95:d9:48:7e:99:4a:e1:c5:c5:59:b3:07:43:5b:b1:5b:
         bf:97:d1:ab:d5:5c:ed:4e:f6:3c:40:f1:aa:71:cb:2b:42:81:
         b1:c3:cb:28:6c:fc:da:86:20:f2:cd:d2:79:67:89:0c:06:53:
         be:e3:67:9d:2e:64:eb:4e:e0:50:51:b2:32:8d:dd:60:a6:5c:
         5f:f0:2d:8f:aa:50:2e:51:63:5b:08:55:51:9d:77:27:5e:5e:
         3d:14:4e:95:26:b2:3c:25:34:0e:cf:16:7f:40:65:a2:35:9b:
         49:56:f4:61:0d:44:83:a2:7a:bd:d7:9b:81:d4:6e:d8:1b:c6:
         5a:d9:2d:c5:ed:ba:48:b9:bd:fc:84:ad:21:a6:3e:ca:7e:01:
         86:3a:d9:fc:39:33:32:88:7a:45:ec:4b:a2:ce:45:9f:87:fa:
         ab:0e:cf:6d:ab:93:6a:7b:4e:4b:f4:4d:ae:02:88:e7:15:a5:
         be:5c:88:70:ab:f6:eb:68:f7:58:85:5f:f4:0c:6e:30:61:0f:
         01:95:9c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:14 2026 by rpki-client