Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c40676d5-8b00-3188-9fd0-b863296777e8.roa
File:                     c40676d5-8b00-3188-9fd0-b863296777e8.roa (raw, json)
Hash identifier:          LfwIbmlzpXN3cDaGBdqNi2noZirlsPnfBA5Bfv50S9k=
Subject key identifier:   95:DD:CA:6C:7A:47:52:08:B0:AC:2E:01:34:80:3B:AB:2F:22:15:F9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7944AA262A0B9FFF9D120F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c40676d5-8b00-3188-9fd0-b863296777e8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9498
IP address blocks:        2600:140f:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:4a:a2:62:a0:b9:ff:f9:d1:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=083a5302-b55a-46e5-b891-f6c21a9472fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:a6:6f:ff:1f:b9:60:2f:a2:6c:e4:46:0f:
                    b4:a3:6b:21:1d:79:cd:f4:e3:5a:d6:b8:7c:ac:38:
                    3e:01:e5:64:e8:b8:67:ff:9d:3c:df:58:ea:89:c5:
                    fb:0a:c7:b6:6c:fc:23:72:ea:a8:2e:1d:9c:fc:3f:
                    3c:ee:a2:d3:57:b5:ca:c1:f5:00:a1:ad:0f:9a:aa:
                    cb:e2:58:69:56:4d:62:c5:59:a1:94:71:92:7e:c0:
                    44:6d:00:38:8b:1e:e8:63:c9:c2:b4:f6:81:16:d7:
                    23:36:44:8d:79:65:ce:9a:85:28:65:a3:47:75:d2:
                    39:b6:eb:84:d5:2f:7f:39:d7:28:a7:7d:18:f4:8d:
                    84:67:c9:26:c5:e7:40:0e:8b:19:d7:12:68:14:fa:
                    af:92:31:0f:ea:7f:bf:36:f0:8e:4c:7f:3e:e5:95:
                    08:8f:72:93:e4:f2:55:2e:91:b1:3d:f6:1c:2c:cd:
                    16:92:54:4f:df:2e:6b:f3:ab:c7:66:e5:45:db:29:
                    3c:b4:cb:a0:84:1c:3c:f9:1c:e2:03:3e:ef:d9:8f:
                    da:ef:f5:14:c5:ae:c4:0b:7a:d4:ab:99:5c:89:31:
                    77:a4:9e:64:e1:b3:c7:1c:34:5c:85:01:07:1d:fd:
                    bc:1d:aa:6b:16:8a:5f:c0:49:89:42:e9:a9:40:13:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DD:CA:6C:7A:47:52:08:B0:AC:2E:01:34:80:3B:AB:2F:22:15:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c40676d5-8b00-3188-9fd0-b863296777e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:36:b0:ef:5e:eb:da:3f:a6:14:27:87:eb:66:ee:1a:d5:f4:
         ab:79:91:d6:81:2d:76:37:c8:c3:20:7c:5b:89:6d:d8:54:e2:
         2d:a2:62:d7:95:37:2a:37:71:61:87:b6:e6:cf:f1:b0:60:96:
         1c:8e:81:58:9e:79:c3:18:e1:b5:0d:d1:11:cd:da:7e:80:99:
         0a:0d:f3:24:a4:a8:0d:5f:41:c5:cd:5f:9a:72:c9:90:e0:45:
         33:37:0a:fe:45:b6:ce:aa:68:f8:93:5a:3b:54:bf:ea:45:d7:
         7a:db:1f:f9:d1:2f:04:47:cb:e7:ef:6e:6a:3c:81:4e:17:5e:
         12:fd:38:73:e2:76:1b:aa:23:be:1d:c4:70:6f:bb:ed:e2:fb:
         79:ed:0e:e7:e0:e3:5c:69:b5:a4:da:8c:2b:c3:a6:bc:ac:ad:
         ef:22:12:d3:26:81:fc:5a:5d:6b:e5:eb:7f:41:15:da:5e:52:
         97:4c:b7:95:11:8a:9b:17:1a:97:6f:80:fe:85:18:89:af:1b:
         0f:9d:40:62:bb:e1:8c:cc:33:e2:bd:72:ee:d6:4c:24:a1:74:
         80:1e:0b:41:43:95:09:9b:a4:57:0e:5a:50:25:d5:5f:ad:cd:
         d8:7e:4a:8d:10:2d:57:a3:14:2a:15:2d:f1:f5:6b:da:0d:b1:
         a3:e2:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:07 2026 by rpki-client