Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa
File:                     8eecd044-53ce-3b54-9eab-44203b2334eb.roa (raw, json)
Hash identifier:          sB50M3rZPOeXg9JjCXjYg9pw5kH8wLmW9eu5VTN4Aqg=
Subject key identifier:   5C:07:96:41:B9:CE:B4:D7:C2:8E:3D:23:C3:CC:D7:C7:73:5E:36:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D59EA6DBDE52C7576AA315A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     63949
IP address blocks:        2600:3c12:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6d:bd:e5:2c:75:76:aa:31:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=4fd534a0-4b8e-4124-9aee-33999e72fd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:27:cd:5c:4f:db:ef:09:83:95:cd:70:85:
                    a4:02:f9:88:44:c7:3c:7e:fb:d1:81:96:44:88:88:
                    c2:cc:c0:1a:4b:81:71:51:8e:2c:6c:02:5b:aa:4e:
                    46:db:ef:dd:76:c4:b7:69:b4:a3:50:54:36:41:f1:
                    07:10:27:8a:db:6b:ee:97:c5:e2:59:89:ec:1d:b4:
                    85:f1:5d:86:cb:3c:e0:d5:bc:8b:cd:ba:ad:c1:6c:
                    c1:54:22:47:e2:55:a5:49:14:7b:82:65:86:00:f0:
                    25:0b:24:c0:39:50:bf:ad:ee:fd:e5:f4:e2:57:92:
                    78:32:3e:cb:7a:32:96:31:00:0d:1c:a4:35:87:24:
                    c1:f5:2d:dc:91:4f:18:ba:9d:05:db:79:33:21:0a:
                    e3:71:7f:6b:aa:3f:09:a0:10:3f:7b:99:af:f6:e7:
                    1a:0c:57:54:b9:87:89:d1:7f:e0:54:63:1f:7b:42:
                    a0:2b:d3:b7:c3:01:49:ab:14:b2:0f:f9:3c:41:13:
                    60:d3:06:b1:cc:3d:47:d5:ba:b2:84:31:8e:9c:c9:
                    ce:5f:15:87:c5:d5:21:89:dc:c5:0f:78:39:c2:a3:
                    60:61:16:fb:12:01:8f:6e:25:0c:45:a7:90:39:18:
                    3f:f4:42:53:89:5b:19:29:b1:dc:a5:66:d2:db:22:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:96:41:B9:CE:B4:D7:C2:8E:3D:23:C3:CC:D7:C7:73:5E:36:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:ba:e8:c4:f3:3a:21:e0:25:9c:f9:cf:4d:b1:ba:9e:da:
         dd:5e:ad:e9:4d:cd:d5:b1:1d:f6:ef:1a:31:b7:15:3f:d0:13:
         ed:f7:31:61:34:63:64:ee:7a:28:1b:0f:0c:2e:3e:f9:ef:61:
         19:2f:0e:98:e9:6b:48:20:d4:6a:d1:b3:cf:f5:d7:cd:7c:ae:
         c6:ea:e6:cf:c0:0b:70:67:c8:1e:0d:5c:32:b6:7b:9e:5d:a0:
         56:c2:bd:08:29:92:c4:72:47:07:ff:8f:ac:97:f9:43:f3:92:
         ce:7f:d2:a3:34:05:e7:7b:31:fd:71:9f:93:9f:f8:70:2f:a8:
         7e:22:5f:84:e9:3b:36:0b:34:18:33:ca:4e:f9:e4:71:d2:72:
         54:c7:e3:b0:8f:aa:c1:53:c2:63:27:af:00:e0:13:dc:5a:3a:
         eb:fd:ca:d6:1a:3b:05:04:83:89:9c:5e:64:a2:08:7d:ef:da:
         16:51:0b:97:76:a8:17:e5:a9:d9:59:ca:93:15:19:8f:fd:42:
         4e:40:e5:4c:c0:a7:93:8a:b4:8e:52:c2:24:8a:b0:8f:f4:f7:
         7a:9d:54:69:8c:d3:ba:6e:5b:38:57:b4:c4:33:7c:25:dc:4a:
         dc:0d:d0:c7:20:71:ca:a0:1e:a5:ce:23:92:07:fc:b8:e2:f8:
         b0:06:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:17 2026 by rpki-client