Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/7b64ac92-7299-33e8-8042-568f7416275c.roa
File:                     7b64ac92-7299-33e8-8042-568f7416275c.roa (raw, json)
Hash identifier:          e/y4uy1jpQqvHQm/ZI2XSCUVGtteUZq4v0l1ciGM9ro=
Subject key identifier:   3B:B3:BE:2D:59:84:D5:46:D8:5D:DE:23:0F:90:62:DE:A0:E3:10:6A
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F4328584EFCACCB79C70D7F0FC3716A00
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/7b64ac92-7299-33e8-8042-568f7416275c.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     12243
IP address blocks:        2606:1040:1000::/48 maxlen: 48
                          2620:11f:e00e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:cb:79:c7:0d:7f:0f:c3:71:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=08442c26-6071-4870-b8ff-8744ff4e6775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:e5:6d:2d:8f:6c:9d:64:b0:91:3a:d4:ae:
                    e2:03:04:65:6b:ff:b5:d6:ac:42:9e:74:d2:a7:8d:
                    78:3a:11:10:7a:a7:e5:ad:f7:b8:1f:02:ea:62:70:
                    38:2a:af:40:1a:6b:69:83:7d:3e:2f:e9:ab:be:cf:
                    8b:b3:39:c3:22:27:9d:5b:11:9a:3a:78:f9:98:61:
                    d3:c3:47:0d:80:b4:37:23:65:83:ae:b5:a1:f1:4d:
                    8d:7b:67:11:92:79:a5:2a:e7:ec:d6:de:13:25:b8:
                    e1:6d:79:52:a6:ee:c6:62:a3:3d:fe:a4:e5:f6:0c:
                    27:65:e0:10:4a:22:29:7d:c3:54:e3:b3:2b:fd:f3:
                    f6:0f:6a:76:03:fc:ed:e4:35:14:66:3c:c3:82:e9:
                    91:56:fa:ad:66:91:e0:ab:e0:db:ce:b0:55:48:2a:
                    05:2e:23:18:8f:23:5d:ac:5c:25:20:86:07:8c:a0:
                    84:3c:85:5a:8b:89:98:85:63:d0:e1:26:53:98:a0:
                    17:f3:f6:31:c7:13:b0:29:7a:b3:a0:38:76:78:72:
                    5e:a5:b8:fa:96:8f:d3:44:0b:87:fa:0a:02:08:a3:
                    ec:77:0b:35:f9:1c:56:71:67:58:95:13:2a:5b:d3:
                    69:1f:85:20:da:06:70:14:54:c4:86:27:d6:22:1b:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:BE:2D:59:84:D5:46:D8:5D:DE:23:0F:90:62:DE:A0:E3:10:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/7b64ac92-7299-33e8-8042-568f7416275c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1040:1000::/48
                  2620:11f:e00e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:63:18:3f:1d:7c:e1:d8:7b:05:6c:97:b9:b9:5c:59:ae:
         65:21:fe:66:35:2a:9b:21:a8:37:73:6f:03:8b:eb:4e:fc:d9:
         62:08:63:5f:5f:da:ed:3a:da:f0:e3:02:cc:b5:99:1f:b0:ca:
         53:3d:49:ac:49:27:6a:46:b4:93:78:75:c6:d3:5d:7e:6d:36:
         00:36:40:02:9a:6e:12:47:be:5e:05:64:a8:70:5b:19:a8:74:
         01:15:93:f7:1f:62:26:54:b6:35:60:d5:7b:15:44:59:31:3a:
         9a:51:d6:84:59:bb:17:9c:0e:4c:e6:bc:93:51:a4:d7:47:1a:
         fd:b2:6f:05:01:70:a9:b9:fa:af:c0:36:5b:f0:fc:8e:f8:73:
         4f:05:ef:3b:26:b1:33:06:91:a5:d6:d5:3c:b7:b8:0e:cf:24:
         11:c9:a1:9f:ad:c5:bf:49:44:ca:f0:6a:99:8e:d0:da:d8:0d:
         ed:f8:c1:72:7c:73:32:68:9c:e7:97:3f:38:3e:1d:77:bb:19:
         3e:62:24:43:5c:50:c8:f1:1b:9d:a9:54:98:ec:82:a2:d4:bc:
         6d:3e:39:1f:91:e7:c4:d2:73:fc:ba:ad:a7:a1:45:99:a2:68:
         1f:9d:18:7b:df:9e:17:48:e2:2c:16:b6:b8:d3:4c:dc:ab:50:
         30:28:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:10:35 2026 by rpki-client