Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7667b220-2807-33dc-9d40-0cd7c0704cc5.roa
File:                     7667b220-2807-33dc-9d40-0cd7c0704cc5.roa (raw, json)
Hash identifier:          J/iPNqvWnCyxj7y8YvugPzCL3GMxUIpwBtyZAytBnms=
Subject key identifier:   27:29:27:AD:92:9C:9D:D3:EA:45:30:E3:98:E8:55:B7:EA:DC:52:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF587A1C762CEE17229B28D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7667b220-2807-33dc-9d40-0cd7c0704cc5.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        2600:1417:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:a1:c7:62:ce:e1:72:29:b2:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=9a39ce97-f27f-41d5-a7d3-da42a4e97e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:18:ed:c9:c0:0c:9f:a6:30:12:c5:24:dd:
                    e2:d9:90:c8:2b:fa:b0:79:83:03:79:90:07:6a:3d:
                    b6:e6:59:fb:9f:e7:80:c4:fe:ab:81:d4:eb:c2:3b:
                    65:5c:d0:12:6f:a3:7e:9e:8b:36:9a:a7:f1:ab:12:
                    13:62:20:01:3d:b5:b9:6a:6f:82:d6:98:11:e3:31:
                    b4:82:0d:99:67:15:ee:5b:9c:b0:ca:4a:03:c1:16:
                    b9:60:20:3f:0a:f2:95:83:08:fd:79:a7:a8:c1:9d:
                    cd:38:77:4e:ba:b4:90:86:5b:72:51:b3:61:67:b5:
                    b4:82:cb:24:0b:f7:3d:4f:90:c2:ed:30:1b:98:d7:
                    cb:7a:0e:e3:0b:fa:e0:da:0e:ea:23:7c:9c:46:92:
                    26:a2:cd:3a:8a:38:5d:62:9f:e9:60:0f:3f:8b:e6:
                    ba:d1:c1:e4:6e:e9:61:49:51:ef:29:f8:b8:76:63:
                    f9:6f:d2:00:cc:e5:6e:7f:3c:97:38:2d:b4:3e:94:
                    ab:0b:f0:3a:f7:1e:86:e2:b0:72:25:65:d1:31:df:
                    12:f1:10:6e:40:4b:7d:c0:2f:84:3d:3f:0e:94:89:
                    ec:aa:ca:1a:0e:c0:94:f3:d2:fd:0a:d3:d1:d1:e9:
                    d6:8b:6e:00:e6:7a:d7:3b:cd:ff:d8:b9:01:88:fe:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:27:AD:92:9C:9D:D3:EA:45:30:E3:98:E8:55:B7:EA:DC:52:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7667b220-2807-33dc-9d40-0cd7c0704cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a7:0c:1e:35:80:d2:83:cf:51:e2:6a:ab:52:ae:f2:2a:75:
         70:d1:91:ea:a4:40:ab:a2:3d:5b:78:45:75:3c:cd:49:d1:95:
         e7:99:1e:79:be:c1:56:04:1a:3e:0d:5b:3b:6b:2f:c3:55:4a:
         ce:07:6d:37:69:9a:36:e7:a7:a9:c2:4a:6f:ff:14:62:97:93:
         43:74:dd:58:47:64:43:0b:e1:ba:ea:08:a6:2e:d9:e4:2a:ff:
         5f:bb:ba:75:bd:47:b6:11:8e:00:73:40:2f:fe:3a:ce:09:29:
         20:cd:8e:bc:b4:5a:e9:a1:f2:51:c6:ce:11:8b:a8:1e:b1:32:
         3b:ac:49:4d:b8:28:10:95:e7:78:76:ac:91:b4:fd:5b:70:a4:
         18:c4:d8:66:52:1a:e1:69:7b:ff:77:a3:b4:92:db:df:71:9f:
         6f:97:33:0d:21:2d:20:56:be:08:51:0e:82:be:2d:a8:59:8a:
         d1:18:a8:7e:a1:e0:12:7c:11:0c:b7:ef:65:ba:fe:08:9f:3e:
         25:0d:24:a3:e1:58:df:48:b7:78:e9:0c:be:16:99:5d:16:d2:
         66:86:64:cc:2e:bb:73:83:77:07:be:e3:bc:ef:65:db:28:21:
         d6:2a:a6:06:7b:19:34:04:9b:b0:24:90:da:ec:49:9d:d5:39:
         2f:a4:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:12 2026 by rpki-client