Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafda259-0348-3776-9300-d85c3a9ebd9d.roa
File:                     dafda259-0348-3776-9300-d85c3a9ebd9d.roa (raw, json)
Hash identifier:          ehdpCNVE6Gb7mxrzcjtB0pPTpZ+WnbsaJAnG2t8BDuU=
Subject key identifier:   87:27:1A:AC:22:28:11:C7:21:37:71:3A:69:8C:73:E7:D3:84:82:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B29066797E22337D4FF900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafda259-0348-3776-9300-d85c3a9ebd9d.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:140b:e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:90:66:79:7e:22:33:7d:4f:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=4fba3a9d-ced6-4e58-aa12-2a5b01ee32e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:8c:37:65:01:bb:e6:87:a2:ed:bf:26:1a:
                    35:c8:63:eb:40:b6:28:a3:2c:76:c6:61:75:80:12:
                    58:b3:15:4a:5b:e2:00:a1:a6:5b:5a:76:14:c8:69:
                    ad:b7:ea:58:50:63:78:d5:34:c0:5c:b1:93:82:27:
                    e4:6e:26:8b:40:33:aa:18:ea:54:b6:b3:3a:2c:87:
                    8c:1e:80:bb:8c:ff:7a:fe:4b:94:11:fe:c6:42:6e:
                    ad:c1:8c:24:50:42:73:73:c9:f8:1d:95:24:0b:c6:
                    15:ea:0a:13:f7:50:bf:e6:a5:53:57:50:1a:7f:dd:
                    3e:30:69:5f:09:5c:2a:a1:d2:c8:8b:4f:91:2d:1a:
                    20:9b:9a:c7:60:cf:57:09:46:84:6d:ec:b3:8c:1b:
                    b7:f7:15:ad:d5:72:ba:fe:85:c0:83:60:39:68:87:
                    01:a1:b4:25:7e:34:ba:b0:da:17:56:b9:29:54:a2:
                    42:02:a9:8e:67:b3:cc:4e:3a:91:56:22:c7:61:d0:
                    fe:02:c4:d4:01:02:91:a4:d0:7d:54:22:33:3c:3b:
                    ba:96:52:e3:d9:3f:09:f5:6a:3c:ca:36:67:1a:2a:
                    d8:3c:9d:df:f0:de:cf:88:7f:8e:35:b9:a9:05:0d:
                    c7:e6:6c:7c:05:71:d8:01:ed:ae:3b:71:70:21:ef:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:27:1A:AC:22:28:11:C7:21:37:71:3A:69:8C:73:E7:D3:84:82:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafda259-0348-3776-9300-d85c3a9ebd9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:88:27:e9:86:9a:97:29:9c:73:db:e9:90:d0:11:09:95:13:
         c6:1a:fe:71:5a:ee:41:2b:e8:5e:00:3f:13:90:f2:30:73:4f:
         7f:4e:bf:5c:65:38:a8:98:31:38:b9:77:fb:c3:1a:1d:b5:90:
         38:80:0b:4e:d9:21:ff:17:9a:41:16:30:74:9f:4f:4f:bc:3a:
         9e:21:a8:0b:60:d6:4a:92:72:73:af:ce:ff:30:50:26:2e:d4:
         21:81:16:60:55:b3:31:3f:29:59:b4:f8:dc:b7:cf:d3:ac:98:
         94:0a:6e:a1:49:42:7e:cd:7a:79:fc:4c:6a:2e:dc:32:a5:6c:
         12:84:c1:13:44:d0:bd:d8:57:7f:70:bb:1b:0b:91:9c:37:53:
         20:cc:d4:64:fe:6d:46:36:dc:8c:a4:47:91:60:4f:22:71:a3:
         1e:c0:01:60:2b:d2:84:98:da:0a:6e:9f:f3:e0:49:92:6a:eb:
         f0:22:1e:1d:9e:5d:7b:53:75:87:03:4b:54:5d:9e:50:5f:8a:
         37:37:2c:3d:d4:b1:46:79:39:00:33:e8:2b:f7:ae:c0:da:00:
         f2:1e:8e:43:79:ea:06:0a:61:87:a7:1a:3d:cd:c9:ab:b7:77:
         16:e7:95:0c:5a:79:20:d4:b1:bb:78:97:89:fd:7b:e9:d1:60:
         d0:3c:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:00 2026 by rpki-client