Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa
File:                     9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa (raw, json)
Hash identifier:          uHbyxpucojDbLqZahpH/MkNhl/gKqTdWzwXN4iTwXNY=
Subject key identifier:   EB:43:4D:E3:A2:CD:5D:7C:AD:78:F9:B4:73:19:78:D1:98:0C:8F:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF852507DB64D64D5CFE28A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        2600:141b:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:50:7d:b6:4d:64:d5:cf:e2:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=26153b83-0e01-4c4c-a9b5-29c67df332e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:5e:c6:4b:69:ca:58:2e:6e:9e:29:70:98:
                    35:45:a5:24:42:8e:3b:2a:14:80:eb:fd:29:22:77:
                    35:33:cf:79:fa:51:ea:b2:00:e4:f6:26:02:69:32:
                    d9:44:a6:e2:d9:3f:d7:27:f0:88:13:e4:bf:b3:01:
                    45:3e:43:92:71:aa:fb:eb:40:43:1a:45:b6:05:9e:
                    d4:84:94:9f:17:76:94:30:c5:d7:0b:9f:5d:4d:d8:
                    12:52:8d:f5:a4:8c:3e:28:73:f9:ae:1a:91:24:50:
                    13:4d:ac:10:74:2b:f1:1f:37:ed:91:ec:06:94:06:
                    c5:3b:fb:a3:cf:6c:2f:3d:13:c1:fa:66:87:7a:22:
                    6c:19:f9:7b:1d:5c:04:17:81:74:10:a8:3f:1e:b1:
                    45:84:eb:e8:97:53:e6:64:e5:58:ee:61:e8:cd:c5:
                    95:49:e1:1c:50:3d:24:e2:0a:e9:c9:a2:c2:42:53:
                    6d:e3:c0:5b:c5:a8:69:7d:0d:b8:2f:c2:37:79:a3:
                    cb:59:fa:e4:65:b3:d8:86:25:eb:22:22:09:f5:1d:
                    25:8a:6a:6e:56:43:0f:e0:6f:0d:6d:85:c1:d9:96:
                    47:26:37:ee:67:d2:15:0a:21:95:fe:e8:ec:7d:bc:
                    0f:0f:8d:86:54:47:18:d8:35:a1:30:49:ba:a0:72:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:4D:E3:A2:CD:5D:7C:AD:78:F9:B4:73:19:78:D1:98:0C:8F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:08:6e:3e:c7:d5:bc:2b:37:c8:b2:45:09:f0:c9:de:c3:e5:
         39:b1:4d:e8:9a:fd:68:1a:cc:b0:ad:cf:37:5d:6c:f0:b3:bd:
         22:fe:8e:52:b0:6e:38:e1:d3:94:1a:d3:e2:28:0d:bc:f7:ec:
         93:2e:ae:9f:49:25:8c:e8:46:13:98:5b:99:89:b2:65:b8:ab:
         33:af:9c:60:18:1b:06:28:0c:f4:48:4c:00:ca:84:c9:8e:9c:
         69:eb:da:05:45:50:ad:76:04:cc:2e:fe:f6:27:67:74:82:3f:
         ed:63:55:48:7b:82:28:5a:4a:9e:07:a9:57:9b:95:d6:6a:e5:
         0c:c6:3b:60:e3:ac:ef:11:4e:bf:8e:ce:72:a0:76:58:1f:3f:
         49:f2:8e:97:9c:31:0f:8b:96:ff:a0:2e:74:c2:bc:18:3d:84:
         ef:95:16:e7:76:a8:4f:61:9e:51:e6:f7:c5:ea:22:ac:cb:50:
         71:8c:5f:de:59:6f:ff:77:f7:ca:ce:26:50:f8:e2:99:b4:5b:
         64:bd:8a:c2:33:bd:ec:89:1e:43:5f:49:d3:df:e5:34:ca:42:
         c2:72:6e:ed:7c:8d:49:6f:e1:28:d6:6b:f1:73:dd:5f:78:e4:
         7e:eb:15:96:79:43:ef:c6:82:cf:d6:74:26:33:46:93:14:14:
         a2:54:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:00:57 2026 by rpki-client