Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa
File:                     fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa (raw, json)
Hash identifier:          Er5Ar0s3y30Ov1ugU3QyFUFwREsk+ex1MAo66zz1qSU=
Subject key identifier:   F2:45:57:FB:F2:3A:88:1C:56:F5:DE:A0:1D:C8:FF:56:61:70:E8:A7
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957A8A8AB555222399A6E00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2620:147:c43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:a8:a8:ab:55:52:22:39:9a:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=a58387fe-0a47-4464-8d5c-ea0812ed6caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:5d:e2:a5:12:7b:2f:21:44:09:c5:1f:5d:
                    3a:1d:17:d4:25:31:e5:42:2e:af:9c:cf:86:3c:eb:
                    24:94:1a:e9:81:e0:ed:45:36:01:7e:76:63:b9:d2:
                    c3:0b:73:0d:57:88:1b:09:96:b5:9f:13:4d:11:4c:
                    6d:0f:1d:34:94:7c:25:d7:f5:74:87:f7:cf:20:e3:
                    1b:75:13:5b:f3:3a:5c:98:e7:01:8e:83:a0:ad:5d:
                    4b:45:05:ee:e8:f5:c9:24:de:6f:13:ab:13:b9:25:
                    01:b7:13:91:5b:fd:5b:20:59:af:aa:dc:ac:73:0f:
                    c4:ca:1e:92:5c:06:e0:20:c3:8b:f9:c7:37:e0:14:
                    56:6d:f6:d0:88:22:0a:45:57:3c:9b:55:78:14:85:
                    0a:06:66:72:38:53:31:b1:d8:99:9f:96:ec:c3:c3:
                    a1:9c:f2:b9:21:8a:1c:13:b5:e2:f0:17:b9:9e:7a:
                    ad:92:29:0a:2a:de:9d:13:a5:21:3f:cd:2a:21:64:
                    81:47:70:31:08:8c:52:9c:c9:be:a1:cf:34:5f:ee:
                    d3:ae:f2:01:bb:22:95:0d:f2:2c:c2:d7:b8:b3:42:
                    ba:5b:e3:de:70:8e:9b:ba:33:79:5a:0e:63:d2:ba:
                    12:46:f5:f3:24:f2:2f:4d:79:82:fc:56:85:3f:17:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:45:57:FB:F2:3A:88:1C:56:F5:DE:A0:1D:C8:FF:56:61:70:E8:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c43::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:e4:50:00:f6:e4:e4:8e:c6:b2:54:44:5d:96:81:65:5b:
         4f:40:c0:b0:c6:1b:3f:51:c1:dd:63:d4:bd:09:6c:41:f2:f0:
         6a:c0:24:7a:a9:5f:71:d1:b4:05:3f:2f:aa:fd:16:86:53:36:
         2e:3e:2b:ee:c9:04:a7:3a:61:93:9c:d7:b2:b8:3d:0b:20:c5:
         82:b1:0f:26:8a:dc:ea:bc:2e:a5:c9:fc:d8:a6:71:d9:1f:9b:
         f1:bb:a4:44:28:1a:58:8e:ae:bb:66:74:60:7f:88:af:af:df:
         0b:37:56:aa:d9:54:16:4a:6a:4b:55:12:0c:6c:8d:ff:73:a2:
         43:3a:2e:9a:e1:06:a5:69:a9:ff:f8:6a:e4:6a:ae:14:0c:f2:
         33:02:30:e3:22:13:aa:cf:ed:55:b8:51:8a:69:37:bc:f1:0e:
         c1:7c:a1:56:12:70:48:20:d7:1c:ee:03:94:b0:07:ee:86:87:
         62:23:ac:3c:ce:ad:a2:eb:8b:4e:16:6e:b5:3f:a9:12:79:f4:
         6f:63:3b:04:ed:af:ca:f8:24:20:bd:b5:c6:f1:fd:f9:bc:a3:
         83:75:58:3a:ee:4c:c8:1b:cb:a6:d3:da:b8:f0:18:f4:c1:1a:
         a0:da:f2:49:f0:93:9d:72:9e:2e:4c:9c:f0:59:51:88:42:89:
         42:8b:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:17:04 2026 by rpki-client