Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7762c09c-00b0-359a-a098-b7bcf1a02aa0.roa
File:                     7762c09c-00b0-359a-a098-b7bcf1a02aa0.roa (raw, json)
Hash identifier:          GrJ0Txj+oUcO6/mE+rFpymuw7C/o6EONfyqjuCo3jHk=
Subject key identifier:   89:DC:68:D5:99:51:EE:2E:FA:67:6B:C0:A9:C2:86:33:F0:CB:E3:CC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B2860A7E97A917E8CF9740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7762c09c-00b0-359a-a098-b7bcf1a02aa0.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1410:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:86:0a:7e:97:a9:17:e8:cf:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=3118456e-0373-432f-989b-1ac5fed1b717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:87:10:d7:c1:aa:81:70:ce:7c:54:8d:6d:
                    a8:f8:e7:43:76:55:1f:aa:2b:99:36:3a:ff:cb:b3:
                    ba:b2:b0:3e:cb:ad:af:a3:ee:80:20:b5:58:0f:28:
                    65:18:80:16:73:58:be:81:ba:0b:b3:09:c7:36:9c:
                    3c:64:f3:34:7e:7c:7e:ed:62:6b:59:e9:08:1d:c2:
                    31:d5:e6:79:a2:fa:9f:6a:c7:b4:33:e8:bf:b8:92:
                    c8:44:b3:be:81:5f:90:f2:ff:26:49:9a:26:ec:2c:
                    83:7c:01:5c:18:57:bf:a3:d9:1a:34:4b:8d:e8:d1:
                    8c:04:e4:b5:4a:93:95:7d:8e:34:5a:a0:33:f6:f3:
                    8c:0d:9f:93:38:32:98:ea:c9:c8:ae:de:c5:28:40:
                    97:b3:f6:7f:cf:97:08:c8:9d:c0:09:de:91:ad:9e:
                    b6:e6:e0:f8:63:98:ec:d4:f7:a7:cf:a3:5e:af:d1:
                    84:6a:23:94:80:31:12:41:74:78:fc:e1:b4:c8:6b:
                    d8:5f:1c:35:87:36:05:a4:9a:0c:ee:d4:45:1c:aa:
                    bf:84:3b:87:4b:e0:1b:42:af:2b:60:a2:d3:8f:b5:
                    08:54:b4:06:63:94:44:41:8b:a0:e7:65:1b:1e:af:
                    71:8f:4f:28:b3:43:3c:bf:92:d5:44:22:3b:86:34:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DC:68:D5:99:51:EE:2E:FA:67:6B:C0:A9:C2:86:33:F0:CB:E3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7762c09c-00b0-359a-a098-b7bcf1a02aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:51:c9:9a:98:62:9b:9e:79:b7:43:dc:0e:2f:32:23:a2:a7:
         a0:70:2f:71:05:15:e4:9d:44:54:bf:4c:24:18:bd:17:67:4c:
         c6:1e:d8:be:61:07:54:a8:d8:85:ba:8f:f6:04:a2:a8:90:2e:
         33:d9:31:89:af:84:b3:d5:8c:80:08:aa:fc:c4:29:f4:a6:e3:
         6c:be:bd:56:dd:81:31:3d:47:06:1b:99:70:0f:1b:03:50:5d:
         c7:90:7b:f8:bb:9b:54:8b:f5:20:22:b7:a3:4f:96:e6:90:c5:
         0a:4b:10:32:a6:6e:32:2d:db:0d:11:8a:8a:02:04:59:4d:b3:
         19:3c:e4:8f:c3:86:51:45:db:6a:8a:79:59:51:1b:89:5f:f0:
         c1:67:82:34:11:87:14:24:31:ec:a1:3d:f8:d6:3f:ef:31:c3:
         bc:55:f9:77:0f:da:b2:84:2c:68:d4:44:92:08:a2:0a:5c:1e:
         97:0f:b6:23:bd:f0:a8:67:44:8c:6a:de:5d:3f:e9:75:ce:17:
         43:61:3b:13:c7:c2:65:1f:46:e6:90:ed:11:5b:88:3c:7b:21:
         d1:5d:3c:20:51:79:25:94:8a:6b:66:2c:19:e7:20:43:b9:d9:
         86:da:7d:d0:ac:1d:a7:c8:fc:39:52:3f:33:9e:02:23:1b:d2:
         df:be:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:17 2026 by rpki-client