Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bee49a1-255c-39ab-a864-f9e850796e34.roa
File:                     8bee49a1-255c-39ab-a864-f9e850796e34.roa (raw, json)
Hash identifier:          fhQWEakrwFRkmG/JlFbWTfCFuqw1F5qB+l6T47EVZe0=
Subject key identifier:   6F:7F:AC:CC:0A:2A:32:63:47:FB:F4:6E:5E:9C:9A:2B:16:B2:D5:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B284C4B4A16D8C5B3D7800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bee49a1-255c-39ab-a864-f9e850796e34.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1409:4400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:84:c4:b4:a1:6d:8c:5b:3d:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=c29caa7e-b721-41cf-8bd7-fa61498712a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:0a:ff:6d:35:8e:22:39:10:63:ea:ba:1d:
                    c0:5c:16:52:86:39:bd:3a:2c:81:74:d0:9b:e2:1b:
                    f1:4c:81:04:a9:ab:02:cd:c2:c4:d8:01:73:ba:51:
                    d4:38:c0:f9:ac:4e:db:e4:de:8a:42:d5:a4:55:55:
                    e0:f1:4e:a2:42:68:81:9e:d2:77:60:99:5c:55:96:
                    e5:9f:65:8e:ac:bc:45:7d:39:ac:4f:82:a4:7f:aa:
                    3d:0b:b3:1e:19:b1:94:36:29:99:be:2b:a5:20:27:
                    a0:1b:a5:e1:06:52:5d:58:f1:4d:e4:c9:4c:b0:96:
                    99:8a:1b:3a:8e:bf:44:9d:0c:5c:d9:df:f9:5b:9d:
                    cc:52:43:01:c6:2f:0f:0c:ac:d1:ed:1c:af:17:31:
                    3a:fc:0f:e7:22:7a:02:cb:fa:4e:e5:83:e0:61:86:
                    55:76:17:95:80:9f:40:d0:5c:4f:44:1e:4c:cf:33:
                    b7:f2:c1:97:d3:a2:50:7d:93:92:49:e0:9b:4e:1d:
                    2c:d6:f9:d2:91:4d:47:88:fe:e5:3f:ee:1a:58:94:
                    79:4e:7b:a0:8d:28:8d:e1:73:da:4f:d1:06:02:90:
                    ef:5b:8d:df:f9:e3:a6:e4:eb:d6:05:97:0f:70:68:
                    42:9d:6c:6b:db:77:00:ce:b4:59:c6:ef:ec:5c:36:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7F:AC:CC:0A:2A:32:63:47:FB:F4:6E:5E:9C:9A:2B:16:B2:D5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bee49a1-255c-39ab-a864-f9e850796e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:4400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c8:8d:53:a4:26:52:c3:82:af:01:e7:7f:f1:04:35:23:58:
         84:39:fa:6d:f1:6f:16:5c:10:1a:3b:98:99:eb:1f:79:e0:ff:
         8f:8d:d7:cc:24:df:5b:49:77:72:a0:d0:f4:13:2e:b2:cd:da:
         46:62:51:67:cd:43:c4:ca:0e:db:af:be:2c:b4:04:15:97:1e:
         88:78:2e:f4:45:73:1f:7f:79:b4:69:6d:f6:1b:41:a9:5e:a9:
         b3:0e:61:a2:3e:41:cf:e8:61:5f:84:98:ab:3d:6f:70:6e:65:
         7c:3c:56:8e:c1:4d:d2:81:5d:ae:78:bb:09:92:dd:be:fa:2a:
         c6:89:bc:0e:02:dc:17:48:66:c6:80:3d:b9:c6:cf:20:54:8d:
         8e:d8:4a:95:79:19:df:eb:9b:e5:ea:1e:91:94:33:37:eb:08:
         40:d8:15:4d:c1:38:ed:0c:5c:74:49:fd:79:b2:df:fb:36:fa:
         fa:9a:7f:ef:a4:23:d5:bf:46:47:a7:f3:1d:30:ca:30:34:87:
         4a:d3:d8:41:ff:b3:36:cc:f1:da:65:d2:1b:fb:28:e2:a1:d2:
         ff:4e:ef:62:94:ae:7e:38:41:5f:fe:d8:d1:e5:64:cc:13:b3:
         65:19:93:af:7b:d8:72:2c:db:1c:da:4b:51:27:d9:75:0e:32:
         f4:b2:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:06 2026 by rpki-client