Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/11db594d-b0a1-31d6-937f-6786d709a0c3.roa
File:                     11db594d-b0a1-31d6-937f-6786d709a0c3.roa (raw, json)
Hash identifier:          Jbs2gL+u0/PXDXqD8gyMBvB9nptz+2KU3p/tcOI3k74=
Subject key identifier:   89:04:4D:0D:15:61:B8:2E:AE:D6:D4:59:B1:0D:76:1B:E9:29:73:8E
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F3E47CAA16DF5520A1F77EB00
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/11db594d-b0a1-31d6-937f-6786d709a0c3.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     40934
IP address blocks:        2602:fc4e:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ca:a1:6d:f5:52:0a:1f:77:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=dd1541b0-30a3-4519-803f-d451031bb3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:5f:10:ce:6b:74:a0:37:be:76:3d:85:52:
                    3f:a2:2c:0b:2e:c3:84:fe:a2:70:68:e5:64:ce:ea:
                    8f:07:b0:f7:61:d9:d3:1d:c2:e2:ab:53:20:f9:58:
                    cf:3b:fc:36:c3:85:c0:45:3b:69:2e:5a:e2:31:41:
                    f5:68:eb:fe:2d:eb:6b:a8:1c:de:7c:84:66:dd:10:
                    68:29:f3:4c:35:e4:97:32:8a:9b:a9:50:90:9a:4e:
                    f8:11:5c:07:52:a7:af:42:aa:c9:b6:2f:f5:16:c6:
                    e3:8a:6f:0c:5c:8e:d7:ee:3a:0f:98:5d:58:8d:d1:
                    6f:da:8e:52:f0:89:7a:27:d7:6c:b4:d8:f3:ba:42:
                    35:1f:7b:dd:3f:d1:2f:ee:88:f6:fb:d1:83:bf:87:
                    12:84:0b:f7:48:e2:fd:17:f1:3d:e1:60:cb:7f:0b:
                    fe:6b:e0:f8:8c:42:84:59:da:1c:c2:1c:89:a1:48:
                    a2:17:af:cb:a4:ac:a9:2b:be:41:e3:e1:76:f5:86:
                    99:13:5a:61:ea:49:1c:a0:12:c8:d7:b3:2d:c3:d4:
                    32:c7:ff:b8:d1:5f:93:64:a1:4d:c3:35:20:fd:12:
                    4e:97:e3:74:7e:3c:45:05:84:5d:04:95:33:c5:a5:
                    0d:7d:53:f0:3d:25:b6:96:23:e6:81:8d:a2:3e:06:
                    43:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:04:4D:0D:15:61:B8:2E:AE:D6:D4:59:B1:0D:76:1B:E9:29:73:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/11db594d-b0a1-31d6-937f-6786d709a0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc4e:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:50:00:d6:e7:87:18:9d:a1:32:22:21:21:5b:83:84:30:9a:
         d6:b3:4d:6f:ee:de:17:ae:6f:4f:43:23:9d:f6:d5:6f:60:a1:
         30:a1:33:c1:31:98:a6:fc:61:6c:01:58:ba:b5:e5:9e:2a:e2:
         02:d4:bc:b0:3c:3b:10:6e:bc:ff:3f:43:14:1e:8d:41:a3:e3:
         9b:2d:06:61:1e:0f:19:b5:9c:55:0d:26:34:8d:a5:ae:a8:ec:
         01:27:7b:4f:27:2c:4c:6a:73:ba:f0:78:22:8e:77:8a:cb:e7:
         37:1f:b5:ec:87:5b:65:3f:b6:19:ca:c4:95:04:2e:20:f9:3b:
         df:ad:aa:3c:64:a3:aa:be:6b:bd:78:e7:63:c2:15:6a:e6:07:
         98:7f:41:eb:12:c9:7b:a9:bc:d2:83:32:ed:24:87:50:74:bf:
         50:73:ba:4b:25:be:fe:64:ba:aa:34:24:a0:73:00:3f:14:00:
         fe:97:7d:6d:72:07:c1:39:66:22:1e:33:8e:cf:27:17:b6:bc:
         93:a7:f8:37:18:ad:e2:5a:3a:f5:56:e2:2c:0c:44:a2:d7:14:
         26:12:23:4d:71:f4:87:2a:a8:50:a3:ee:f7:86:d4:46:e5:b1:
         9f:81:d8:b1:7e:cb:c8:97:b2:42:cc:ee:a6:d6:b1:79:c4:28:
         f2:1c:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:39:48 2026 by rpki-client