Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa
File:                     5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa (raw, json)
Hash identifier:          3UDtirwiCMjQ+k4IoZWzjfs6jM/98ay6/2Hftf0Sp3s=
Subject key identifier:   A8:09:98:0F:7A:9C:9D:68:C3:FF:7E:5D:1C:E7:FB:BE:53:ED:95:E3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C28B786E67246E3AAA600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1417:4f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:28:b7:86:e6:72:46:e3:aa:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=205f3a94-e109-477c-a600-116a46c904b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:04:4c:c0:4a:39:4c:30:ae:4d:cd:4d:ce:
                    7d:ce:bd:54:f7:5f:4a:65:74:41:d2:91:e0:c6:79:
                    6f:4a:df:57:cd:f7:86:68:77:27:db:2c:42:f4:7d:
                    6b:cf:11:05:9c:2f:45:d7:66:a9:72:56:50:13:3a:
                    8f:07:ed:c3:cb:c8:9a:e0:47:78:da:bf:33:6f:2d:
                    24:ed:cd:e3:2c:98:fd:f1:c7:44:e8:7e:d0:b2:0b:
                    a9:5e:09:17:71:d2:57:4c:60:6a:31:ec:82:d1:d9:
                    4d:ca:81:ce:03:81:b6:c8:52:83:43:68:75:51:37:
                    19:70:a1:5e:a4:72:be:35:72:94:a8:de:03:8f:bc:
                    3c:d9:b3:f3:5d:0c:4c:7f:99:2c:08:27:59:ab:cf:
                    e7:1e:ab:86:38:3b:14:69:a7:ae:d0:80:ad:8f:f9:
                    e6:70:35:39:ba:5b:1e:cd:72:5c:c3:91:11:48:36:
                    7f:76:a2:78:b7:d9:0f:24:ae:9b:0a:33:b4:17:2c:
                    cc:ec:01:2d:96:f4:f5:bf:ca:7c:ad:a1:1f:07:99:
                    cb:e9:1e:4e:4f:7a:ca:80:2c:20:6d:8e:2e:da:47:
                    c4:85:9e:af:bd:05:ad:78:48:1a:5d:d3:4a:c3:8d:
                    33:66:fe:de:14:40:57:8f:3b:9a:97:07:66:c2:1d:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:09:98:0F:7A:9C:9D:68:C3:FF:7E:5D:1C:E7:FB:BE:53:ED:95:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:4f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:a7:6f:4e:68:6f:19:ce:c4:b9:f7:a4:b6:ae:92:4d:cd:
         4c:aa:7c:1f:78:e8:c3:f3:e2:7b:47:f3:3f:c7:91:8b:94:35:
         3e:d6:dd:60:a6:e8:41:47:ec:19:d3:a7:93:8a:cb:30:48:2f:
         78:f3:3b:73:1e:a3:64:70:b6:c9:d7:04:53:e5:21:25:b2:73:
         b5:7e:9b:cd:5b:3c:53:ef:b2:c8:df:79:4f:34:60:ed:90:c9:
         23:6b:41:2a:02:fa:44:2e:25:69:aa:d3:cb:3f:7d:41:5e:fd:
         dd:e9:d0:a7:40:7f:92:7f:ae:72:cd:99:d2:cd:4e:5b:22:77:
         89:69:d4:2a:a2:cd:57:ff:10:29:dc:9b:9e:60:c6:2c:25:21:
         9f:55:45:35:fa:0f:0d:6c:12:11:2f:ad:b3:63:1a:e5:02:55:
         d1:96:98:0a:23:ad:ea:fe:b3:be:4e:ec:34:5e:75:18:f2:17:
         68:a7:14:cf:6c:72:b6:20:84:2d:27:d0:47:00:57:22:ce:0f:
         b5:05:ee:cd:c2:8b:0c:dc:14:c0:cb:9b:65:47:6f:44:95:e0:
         75:65:99:ad:33:4c:58:8c:f4:84:d2:9b:ab:9a:d0:e4:0a:23:
         cf:c1:22:64:2b:18:5f:36:65:05:ce:3a:1c:1b:7f:5c:50:3b:
         5d:98:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:38:26 2026 by rpki-client