Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa
File:                     0735d197-9273-3075-b268-f6a4054268df.roa (raw, json)
Hash identifier:          0xqgRB9m4iMJtRL6Uz9d/JDhsaItp0aijm6eNChVaOE=
Subject key identifier:   51:C4:9B:74:80:40:86:D4:1F:44:2B:DF:E9:7C:35:7D:18:20:20:7A
Certificate issuer:       /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial:       010D0C9F4328584F2957B1881962CD37F0663D80
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     12129
IP address blocks:        2620:84:c000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b1:88:19:62:cd:37:f0:66:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=8a98dbfa-6e82-4be0-b80e-290b7544e5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:6e:51:e0:95:f9:af:fd:c0:62:ca:00:6c:
                    ed:7f:8f:d8:fc:49:12:95:c6:54:82:d0:a0:74:e9:
                    2e:14:6e:4c:9b:d3:d7:83:88:34:01:cb:8c:c9:74:
                    f4:f7:f1:7f:e5:e7:e7:53:fc:89:26:90:be:ae:7e:
                    96:a0:6f:d1:fd:d8:fd:c5:44:b3:7f:5d:b2:e3:e5:
                    ba:6e:b0:39:74:47:c2:d0:2d:6f:04:b8:01:2c:06:
                    90:f7:e7:58:b5:06:0c:e5:6f:6a:81:7e:3a:ea:e8:
                    1e:23:ee:c6:e4:79:e1:fd:74:8c:64:a4:aa:78:fd:
                    b8:27:03:11:30:a2:50:c5:df:48:4f:dc:36:5f:64:
                    a1:53:be:c9:af:e5:f4:d7:ca:fc:7e:4e:e0:87:83:
                    05:32:d5:9f:bc:6a:bd:ed:0a:97:15:31:fe:09:c1:
                    09:dd:b7:63:98:77:17:98:99:f3:3f:1d:04:65:27:
                    e3:11:85:71:9c:68:ce:a5:7e:e5:e9:46:b1:ec:a2:
                    13:9b:11:60:a8:ea:8f:ed:cf:b9:61:9b:3c:73:05:
                    bf:0b:a0:5e:35:7b:86:8c:99:36:4c:2d:75:77:dd:
                    64:dd:63:d3:42:73:50:1e:a7:63:03:bd:fe:d3:27:
                    46:45:ce:af:30:be:ec:4d:db:02:2a:e9:18:a1:65:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:9B:74:80:40:86:D4:1F:44:2B:DF:E9:7C:35:7D:18:20:20:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl

            X509v3 Authority Key Identifier:
                keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:84:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a0:a7:ae:a4:5e:e8:79:12:b4:4d:51:53:22:74:fe:4d:e5:
         a3:78:ff:31:97:67:56:e6:71:6a:bf:2d:b1:2a:f9:8d:f7:5a:
         35:15:35:b5:68:8a:07:02:e8:24:b7:e8:b3:1b:8e:48:aa:60:
         7c:cc:bd:e7:05:d0:09:06:62:68:27:8a:53:ee:41:06:c4:ac:
         e3:60:02:22:02:19:77:ce:50:e9:0b:8f:a1:1d:b7:ca:aa:03:
         fb:a8:c2:f2:79:77:49:7e:eb:1b:ff:e5:e1:68:a9:db:f0:83:
         48:5d:5b:00:23:5b:db:7b:14:24:42:2b:1d:9d:6e:35:a0:f9:
         ff:10:50:34:1c:ae:90:07:ad:d5:36:de:8e:49:07:94:6d:30:
         46:73:7d:09:da:60:46:c6:59:06:c3:5a:55:08:bf:19:48:39:
         e3:c3:c5:a8:cc:e6:87:14:69:a6:de:c1:4f:6c:7f:92:e2:d6:
         eb:0b:a0:7e:75:5c:c1:d8:80:33:73:f9:03:35:9d:73:6c:89:
         ad:0b:42:33:f7:e7:f3:46:cc:0e:72:30:3b:27:bd:65:51:13:
         cb:4b:c2:ec:b3:bd:a0:73:38:55:d6:b8:33:21:e0:8f:66:23:
         ce:31:9c:aa:f2:be:72:a0:44:25:39:f4:dc:a8:d1:6a:e6:68:
         fd:dc:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:42:44 2026 by rpki-client