Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/7a5e945b-94ea-3bb7-be10-39a8a2a81dfa.roa
File:                     7a5e945b-94ea-3bb7-be10-39a8a2a81dfa.roa (raw, json)
Hash identifier:          kHvZssVkxcOpNhFEa/nCDfIZPWoEzldZp1ixX0r6bqA=
Subject key identifier:   59:09:3A:1E:FD:82:B2:E7:D2:B4:5C:D3:F6:E3:F1:D6:5E:19:0B:ED
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584F46A7E4F83AEEA77ACD49BE60
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/7a5e945b-94ea-3bb7-be10-39a8a2a81dfa.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2601:9201:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e4:f8:3a:ee:a7:7a:cd:49:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=7ae0faa3-ee96-4eca-9a72-90cc12cb662c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:38:ff:59:be:4c:4e:3a:52:1f:05:ec:8e:
                    29:1e:b5:5e:b6:51:ff:9f:c2:26:da:44:0a:06:c1:
                    44:c5:0e:f6:74:37:91:61:dd:a0:13:8d:39:2d:50:
                    5d:34:89:18:47:55:d3:56:d5:e3:1a:17:80:ae:45:
                    b4:b5:b4:30:39:60:d1:cf:b1:44:48:16:db:10:24:
                    44:f9:bd:72:0d:a8:a9:e4:ba:8b:f5:c1:37:11:00:
                    8d:c5:83:5c:b9:23:c5:a8:3e:0b:39:5f:1e:91:30:
                    4f:7b:89:18:70:d8:90:35:e6:91:83:ff:8c:00:36:
                    55:a3:fc:55:ce:cd:19:ad:06:dd:ac:32:70:b3:58:
                    37:0b:bd:32:77:6d:8e:51:31:41:c7:d2:79:71:42:
                    5a:fb:f1:32:1f:fe:7d:e8:e3:a9:43:da:51:36:6b:
                    b1:fe:2b:22:de:7b:7d:1d:86:b0:aa:4f:57:31:09:
                    27:83:de:45:47:16:73:45:08:30:60:71:e9:19:58:
                    25:9b:c0:00:f7:39:cb:34:71:b5:38:1a:f8:78:71:
                    db:15:f0:99:f9:60:b6:d0:6b:ac:ff:5d:c3:5e:ad:
                    2e:3d:14:30:82:0c:7d:f3:52:5d:33:04:c4:d4:97:
                    65:2c:5d:d9:b1:65:99:71:16:7e:41:05:d4:63:24:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:09:3A:1E:FD:82:B2:E7:D2:B4:5C:D3:F6:E3:F1:D6:5E:19:0B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/7a5e945b-94ea-3bb7-be10-39a8a2a81dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9201:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e6:49:a8:82:c6:7d:02:85:5b:20:cd:4c:a5:6c:ee:12:68:
         d2:ae:4f:3f:a4:2a:37:c3:3c:cb:d2:97:85:3c:19:f8:7c:b1:
         82:81:8a:0e:ed:35:1d:ef:a1:1f:84:c6:a6:84:94:f9:f3:38:
         18:85:4c:66:08:1d:48:ab:d9:8f:3c:87:a6:a8:12:92:65:4a:
         30:bc:15:51:ef:87:e6:ae:68:4c:11:b6:45:14:95:6a:d8:6d:
         b2:e9:34:0d:96:28:a8:fc:e5:a8:ff:23:47:3c:69:81:51:61:
         f9:6b:05:26:1a:56:07:85:7f:4e:8f:6b:88:3a:d9:11:ee:0c:
         58:74:59:4e:d9:37:03:a6:e2:a2:de:13:12:bf:2f:a0:91:04:
         f9:28:bc:55:45:52:93:9a:36:c2:2d:0e:f9:00:67:a5:fd:75:
         e7:d3:09:cc:8b:86:3d:e1:7d:f2:c0:b9:9a:0e:f1:09:0b:3c:
         13:ff:0a:75:10:ec:a7:50:4b:7e:06:26:97:1d:11:0c:16:88:
         e2:b4:2d:99:a9:fe:ba:27:d2:49:5f:d8:41:d7:05:69:39:b2:
         c8:54:14:c2:27:d4:45:90:15:52:4c:36:2c:60:b7:d2:09:53:
         15:0f:aa:ef:d0:98:de:9d:05:21:35:73:f7:c7:8d:de:fe:65:
         7f:11:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:49:37 2026 by rpki-client