Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa
File:                     8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa (raw, json)
Hash identifier:          tyXaRBAb+8Lpfv82mJvlWepoFahG2rOpyRD8LDJg3t0=
Subject key identifier:   15:03:6D:F1:D5:BA:F8:EB:3D:03:52:98:23:6C:E8:B9:8B:44:95:0A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A53935E5A6F56677AEC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     15290
IP address blocks:        2607:ca00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a5:39:35:e5:a6:f5:66:77:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=4aa8fc14-d695-4282-a755-7a53690cbf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:59:5d:05:45:9d:ed:f2:75:0f:5b:3d:97:
                    b6:ad:4c:73:5b:ab:60:48:06:20:21:ee:c5:04:70:
                    9c:b6:76:0b:27:fd:1d:ba:8b:ff:ac:13:c5:96:6d:
                    2a:a9:78:e1:7e:4b:9a:8a:d5:1c:52:cc:a1:90:2b:
                    9b:b8:83:27:91:5a:c0:1b:4a:05:29:d8:54:09:74:
                    0c:b3:06:c1:9f:d4:8e:df:14:3b:b2:c7:5a:a1:5c:
                    63:cc:aa:dd:25:c0:9d:e5:97:7c:5e:b1:15:bb:ce:
                    69:2a:b9:04:e8:c6:9d:7a:ed:33:fc:2e:95:5f:0e:
                    4b:01:bc:d2:15:81:6e:ec:12:d2:c3:07:7e:c1:67:
                    64:40:e0:d9:76:f5:f0:cc:6d:e0:e7:db:fe:d7:28:
                    24:5a:31:37:f4:4b:01:23:2f:92:8b:9f:0b:52:72:
                    03:06:90:bb:82:21:cc:2f:28:17:32:b5:77:92:65:
                    1b:7e:8c:c3:0a:4c:8b:fd:41:39:1e:00:c2:0e:be:
                    a6:e1:70:a0:10:f9:41:09:d6:9d:1b:eb:88:4c:ef:
                    2e:57:ee:3c:d5:89:f0:81:eb:c2:0f:51:97:6d:8e:
                    43:7e:2b:50:eb:42:1a:29:ff:e3:04:19:9d:4a:9b:
                    a7:f5:4d:78:1a:0f:ee:e1:c1:19:6e:b3:ab:58:0c:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:03:6D:F1:D5:BA:F8:EB:3D:03:52:98:23:6C:E8:B9:8B:44:95:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:41:29:3a:ea:2a:0e:fe:85:8e:ef:44:11:03:d7:41:6c:1a:
         a4:94:48:26:4e:ea:c9:a4:ea:5d:57:91:c7:e7:71:b2:2d:36:
         3b:03:79:ba:c7:9f:96:32:b0:85:76:ce:70:ee:8c:b2:e2:78:
         b8:85:46:aa:8c:6f:90:4f:cc:d3:e6:2b:d3:07:79:09:cd:67:
         19:d0:0f:ba:5e:18:53:a2:31:c3:bd:96:a4:8e:43:4c:98:19:
         93:0e:9c:3d:c9:1b:61:16:59:bf:62:6c:fb:14:dd:ce:69:ea:
         74:3e:76:70:1d:5c:a9:e7:03:77:b4:f4:1c:d7:0b:13:89:c8:
         60:53:c2:47:8e:b7:62:4a:97:9f:f0:72:97:ef:5a:71:f8:3f:
         8b:47:56:a4:64:6b:fd:ae:05:c5:ea:be:e9:1d:33:36:3f:14:
         e3:09:2f:f1:43:2c:93:e1:74:e5:85:68:73:e5:04:a9:86:11:
         ca:5c:2e:ff:5e:bc:9e:c8:d7:31:25:ee:6d:79:7f:2a:09:37:
         78:43:bc:44:56:cf:14:cc:5a:93:c3:52:cf:da:50:7c:06:07:
         96:22:24:bf:6a:8b:41:0d:7d:b0:da:1f:50:c4:da:8e:57:0f:
         60:59:85:8c:32:bf:cb:77:da:00:a2:a2:99:87:ed:7c:a6:60:
         7d:6f:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:09:44 2026 by rpki-client