Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa
File:                     60ed1a61-d459-3246-92d6-6f1fdf56292c.roa (raw, json)
Hash identifier:          zdK2Z9hQk4gJ940LabZGI7w1GgnFWY+OZ6Xc9ldH3nI=
Subject key identifier:   34:04:2C:6F:00:17:65:6C:0F:08:98:46:47:F1:1C:32:3A:41:EB:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B28FF04EFF1747346C9300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1409:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:8f:f0:4e:ff:17:47:34:6c:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=1e364305-5089-4b5d-8b5a-9a03d14e8077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:ab:be:37:e2:a3:a2:58:28:25:d8:ee:38:
                    e1:a4:03:73:e9:3d:d8:44:1c:1b:e9:7c:e0:bc:8b:
                    1b:be:db:1c:b7:90:e8:41:10:90:56:b5:03:77:f4:
                    76:54:0c:0a:e8:4f:22:5b:01:a3:3c:62:2c:cf:55:
                    30:ec:b2:7b:d6:98:68:1c:63:39:2b:1f:71:10:3f:
                    63:ff:af:20:fb:d6:8d:67:24:70:6a:23:a4:e0:2a:
                    3f:51:8c:85:6e:95:44:c1:2d:6d:b5:ec:dc:17:f5:
                    3b:2d:16:07:ff:08:23:e1:39:13:4f:fd:29:94:c4:
                    36:75:54:3c:c5:98:a3:a4:9c:38:2c:73:6f:72:3c:
                    d6:2a:3b:9e:30:3a:13:81:a0:9a:2a:fa:cd:35:05:
                    cd:90:b6:45:8f:aa:a4:04:3f:f4:1a:cd:0c:0a:cd:
                    33:8f:2f:fe:5e:e3:84:2c:8f:da:1c:f4:e7:af:12:
                    9c:50:d1:f2:83:87:33:52:94:a6:79:17:2b:ad:c5:
                    90:43:f0:14:80:19:2f:13:df:de:d6:a8:e4:f4:b8:
                    c6:6c:00:75:66:6b:c3:e0:76:97:6a:17:19:6d:84:
                    46:41:3b:c7:83:d2:20:01:d1:85:6d:74:6e:79:a2:
                    87:f9:32:50:ec:a2:79:51:a0:48:07:c5:d6:34:17:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:2C:6F:00:17:65:6C:0F:08:98:46:47:F1:1C:32:3A:41:EB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60ed1a61-d459-3246-92d6-6f1fdf56292c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:46:5c:5b:3e:22:7c:67:14:83:ab:dd:26:39:d7:5a:22:
         ed:83:9d:01:0c:5f:39:5b:80:29:04:22:34:3c:7e:fb:5e:04:
         e2:cc:83:70:80:2c:cf:a1:fb:88:6f:45:9c:dc:9d:71:4b:8d:
         d2:97:db:c7:59:bf:90:47:6c:82:15:2d:fe:74:e2:7f:37:12:
         ff:e0:28:6e:b7:1a:d5:00:15:69:bf:1a:fa:fd:ea:30:7c:cc:
         ce:54:22:63:2f:b5:d3:23:b1:23:73:cf:40:e2:c9:43:91:17:
         1c:af:ce:eb:6f:cb:d4:95:8c:1d:e9:4f:54:13:9d:5b:8c:13:
         da:a5:ab:38:2a:f5:be:52:cd:24:e0:ba:d9:f0:e5:6b:61:57:
         b2:5a:48:0c:5a:75:17:d4:b4:e0:51:73:5d:46:08:ac:fd:c8:
         cc:83:5b:e3:fa:b5:ce:8d:0b:84:36:14:4e:6f:67:45:b4:ca:
         93:b7:bf:19:51:cc:ed:fc:fd:a8:db:6a:03:be:d1:ef:e9:c9:
         c4:d2:f0:1d:f5:98:71:a8:89:e3:53:08:eb:ae:44:f4:a6:20:
         f0:c5:b9:3f:31:02:f9:fb:2e:a8:45:f5:68:bc:dd:3d:8e:a0:
         0b:88:e1:16:92:ca:44:99:1b:01:e7:57:a8:7b:d1:fd:ae:12:
         fb:f7:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:29 2026 by rpki-client