Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa
File:                     419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa (raw, json)
Hash identifier:          pi1VxD8trklOiRNEPXEwkIuhmYv25AdRZx36J7xtlfA=
Subject key identifier:   3F:A3:DF:4D:3D:5E:40:75:1A:C2:AA:AE:DA:87:B2:2F:D1:BA:88:65
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0912AD0150F43B3CC82C28C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     35994
IP address blocks:        2600:1406:d800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:ad:01:50:f4:3b:3c:c8:2c:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=3d4f7b22-a75f-49a7-9002-a7370cec4fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:a7:5b:23:d4:d1:34:8d:95:1d:8a:3c:84:
                    d0:0d:8c:ff:b8:33:c1:52:5b:be:ae:5c:01:db:a5:
                    2d:cc:75:4d:98:67:15:32:96:1a:51:4d:ae:46:fa:
                    9f:5a:64:b4:9b:0c:d6:ab:aa:0f:7f:96:f3:66:f5:
                    31:95:0f:02:d4:06:c9:44:6f:d2:07:4c:9b:8d:ff:
                    81:83:ec:d0:75:02:10:7d:b5:8e:6b:19:f4:9c:43:
                    49:97:a2:1f:c8:d2:92:d1:d3:e2:68:36:ec:06:52:
                    3e:58:01:f7:56:b1:9a:0c:f4:b8:10:8e:f4:04:53:
                    a8:4a:84:69:94:da:df:78:e5:1c:c1:ea:b3:16:a4:
                    2d:b6:78:85:d4:dd:04:56:45:66:66:8a:48:15:2b:
                    30:d6:53:4a:7e:05:e4:08:6b:d1:b8:41:98:ad:a5:
                    58:4a:fe:75:cd:f1:99:c2:ea:dc:7e:87:16:2b:30:
                    79:c8:98:34:9a:c4:49:ab:8a:7a:b6:95:4b:0a:21:
                    9e:ee:5e:c1:b5:6c:12:35:a2:60:9a:04:c8:b1:a9:
                    fc:65:59:6a:44:77:be:19:75:73:d8:18:f8:af:e4:
                    fd:d0:45:78:3c:4b:4e:2f:f5:fa:44:dc:f4:10:fc:
                    6a:66:da:31:77:eb:fe:76:61:16:2d:cc:74:b3:dc:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A3:DF:4D:3D:5E:40:75:1A:C2:AA:AE:DA:87:B2:2F:D1:BA:88:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:d800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:cd:81:f7:e5:50:13:30:58:29:b9:21:e8:2a:f5:d6:55:
         da:f4:d5:08:75:1b:a9:52:a9:31:5d:4d:97:7d:8a:4b:d8:b3:
         ad:20:e1:33:31:49:13:2a:51:3f:b5:05:26:ad:37:e2:eb:1c:
         62:50:dd:c6:16:a4:5d:41:b0:ad:ca:52:2f:28:95:27:ed:6f:
         a4:8c:d0:ae:59:4b:a5:69:4c:a7:b9:e7:cd:43:cd:21:fd:57:
         b4:36:74:27:8f:86:0e:68:c1:90:7e:aa:ae:a1:b1:3d:f0:03:
         6b:61:8d:13:73:e3:2e:e3:1c:1c:73:09:79:ce:94:94:7a:54:
         76:61:53:44:da:9b:4d:5a:28:37:d8:94:82:55:97:0a:a3:90:
         d1:fb:b2:72:10:2e:7b:9d:a9:d7:30:64:0a:d7:9d:43:de:8d:
         89:4e:18:81:d2:7d:fb:9a:2d:78:4e:0d:36:f9:53:be:11:05:
         bd:4b:ca:71:76:f6:da:04:ec:3b:d1:3c:75:de:5a:54:bf:5b:
         c8:a2:e8:6e:db:66:e4:1d:ce:46:7f:9a:64:02:b4:04:ee:cd:
         21:bf:88:ca:3c:1b:32:5c:52:d9:09:b0:75:5b:62:c9:24:8a:
         55:c9:0e:d3:70:32:bb:3b:63:39:65:71:b1:9b:95:6d:d1:94:
         b1:bc:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:55:06 2026 by rpki-client