Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa
File:                     fbc8e6f0-2262-360a-a336-aea533a7162a.roa (raw, json)
Hash identifier:          xQijArt+gKSrSJeOga/KaEweADqZJA09aHjOoo/PadQ=
Subject key identifier:   E8:2B:57:7A:53:E4:4E:21:7C:45:ED:BD:76:74:F6:41:7C:27:DD:06
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722AC63AE2A1BEE872B880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     855
IP address blocks:        2001:4c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2a:c6:3a:e2:a1:be:e8:72:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=d8fdaf79-59e9-4d25-8334-ea505ce8475c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:95:9d:3f:88:ab:5b:ea:26:33:8f:a6:e7:
                    5c:34:84:ae:21:ec:92:3d:c7:16:c5:1d:63:bb:24:
                    29:f0:77:cf:46:19:4e:7a:3e:89:77:6e:1d:05:2b:
                    60:8a:7e:3a:81:fc:0a:21:f6:95:33:2b:21:5f:f8:
                    dd:f1:b2:ed:b6:d2:ea:9e:69:e5:b4:07:a5:c9:d7:
                    be:43:e3:63:b0:35:43:5c:eb:51:24:c7:7c:fe:83:
                    2c:be:ea:cf:46:60:db:77:f1:da:6c:c1:39:39:85:
                    ed:80:e3:62:d2:76:95:97:45:e0:fd:11:12:56:38:
                    37:7a:02:92:68:9d:ca:2f:9e:40:4f:a7:ff:a9:b1:
                    b3:97:fa:bc:b8:45:d8:79:d8:58:f3:13:52:bd:3a:
                    7c:37:b2:65:d2:2f:f4:fc:09:eb:e8:1b:64:06:c6:
                    8f:4e:d9:6f:39:f0:d5:0c:4a:b9:4f:e3:4c:12:ac:
                    82:ec:28:b4:4d:53:ec:e6:cf:e9:85:e3:22:1b:ef:
                    c9:df:26:03:a8:e5:fb:4e:f9:c9:fd:ed:ad:f3:33:
                    97:d8:ca:2e:b0:97:57:15:e1:9c:19:5e:95:55:46:
                    19:71:cc:b3:96:53:62:0d:90:7a:8e:be:17:9a:a1:
                    5c:f2:78:e9:a3:ad:43:10:f5:fb:60:f9:e2:03:19:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2B:57:7A:53:E4:4E:21:7C:45:ED:BD:76:74:F6:41:7C:27:DD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a7:a7:2a:e7:51:c5:4f:e6:1c:a2:e5:55:e1:31:93:d5:f3:
         67:9d:f4:fc:9b:1a:d3:57:39:61:43:1f:f9:cb:e1:87:21:87:
         e0:7d:a4:01:ac:70:ba:92:a0:ed:0b:f9:89:30:0e:a5:20:b2:
         9c:82:1e:06:d3:05:a5:be:28:b0:b0:e0:23:0d:3c:b4:eb:08:
         a7:ef:d3:4a:49:0b:33:d4:9c:a8:98:f4:36:84:81:ee:04:09:
         83:01:68:d5:18:f6:13:ce:c8:13:85:5d:13:91:30:9e:24:dd:
         0b:5f:73:35:fb:38:e5:fe:f0:e5:01:48:db:91:17:cb:c9:c7:
         09:83:ab:03:81:11:24:40:88:8e:2e:2a:d4:bd:89:bc:aa:27:
         04:29:7b:f4:54:c7:c6:0e:84:5b:ab:6f:a7:92:74:da:50:22:
         13:da:91:f3:dc:92:c5:fe:da:b4:17:f0:f6:44:a4:bf:7d:7c:
         1c:e4:13:84:43:fb:de:ac:c4:1e:b3:40:8b:08:bc:cb:05:e2:
         eb:e0:31:18:c5:5f:43:aa:e3:2b:a7:18:d7:d5:7f:d7:3e:2e:
         aa:4c:79:52:4e:2a:f1:22:e7:f4:38:58:60:89:fa:a8:fc:bb:
         e4:d4:28:c0:33:74:24:93:09:de:0b:7a:f8:6f:a0:4f:b4:ea:
         35:39:ab:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:33:08 2026 by rpki-client