Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b/81d23348-5e2d-348d-a797-e578043a7e4f.roa
File:                     81d23348-5e2d-348d-a797-e578043a7e4f.roa (raw, json)
Hash identifier:          A1UvAZTRU/OLG0qTybSUr4C2GZS0tinGS8t5y5HM4GY=
Subject key identifier:   C8:E4:D1:18:17:81:FA:74:B7:07:E8:CC:DA:C8:4C:C6:DD:A3:EF:1B
Certificate issuer:       /CN=266eee71-5db1-4426-bc01-225515be8d0b
Certificate serial:       010D0C9F4328584F4B528042C65CB9D34F3EE580
Authority key identifier: 59:DE:82:A0:1C:77:81:BA:03:01:A0:57:BD:4F:DF:83:13:D4:7B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b/81d23348-5e2d-348d-a797-e578043a7e4f.roa
Signing time:             Fri 25 Sep 2026 17:07:18 +0000
ROA not before:           Fri 25 Sep 2026 17:07:18 +0000
ROA not after:            Thu 24 Dec 2026 18:07:18 +0000
asID:                     6967
IP address blocks:        2606:9380:8000::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b/266eee71-5db1-4426-bc01-225515be8d0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b/266eee71-5db1-4426-bc01-225515be8d0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:52:80:42:c6:5c:b9:d3:4f:3e:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266eee71-5db1-4426-bc01-225515be8d0b
        Validity
            Not Before: Sep 25 17:07:18 2026 GMT
            Not After : Dec 24 18:07:18 2026 GMT
        Subject: CN=0bbcb8d4-18cc-4d2e-82b0-584cbbca5822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:51:cb:e0:3a:27:f9:35:94:cf:0e:17:29:
                    00:e7:2c:4d:0c:7f:cb:51:8c:89:17:a5:a7:3e:51:
                    8b:39:25:4e:32:64:42:3d:8d:80:fd:07:0e:52:2d:
                    02:88:fa:8a:b7:6d:0a:9e:bc:26:ad:ee:45:c5:94:
                    8f:0c:17:02:9f:06:6d:0e:b2:fb:15:3e:52:0a:0a:
                    d4:6f:ea:cc:9c:50:47:4e:31:15:76:35:71:b5:e4:
                    d7:72:a3:1d:0b:e7:4d:88:52:88:7e:4d:ec:4e:00:
                    37:e7:7a:4d:00:16:fe:a4:09:1f:15:c1:71:13:42:
                    67:57:c3:12:73:1b:f1:84:ba:ae:44:7f:a7:71:7d:
                    ee:08:59:5c:85:82:6b:bf:b9:0d:54:45:d3:c7:8d:
                    5d:a2:f3:de:00:1c:23:50:ce:0a:47:de:1a:eb:f1:
                    a5:08:a0:99:96:36:2b:cf:3f:96:88:a5:b2:60:b1:
                    2b:b0:2b:ec:36:61:ee:fd:6c:96:3e:e1:eb:06:1d:
                    d5:b3:74:de:3a:e1:08:72:0e:e9:ec:64:0a:75:3c:
                    9b:5a:22:3b:9d:e5:62:5b:7e:57:fc:3c:42:7d:a2:
                    aa:07:eb:24:4a:ab:f8:09:12:a1:b3:06:f6:10:07:
                    f0:59:3d:7b:72:9b:34:f3:d7:39:a4:9f:4f:26:2f:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E4:D1:18:17:81:FA:74:B7:07:E8:CC:DA:C8:4C:C6:DD:A3:EF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b/81d23348-5e2d-348d-a797-e578043a7e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b/266eee71-5db1-4426-bc01-225515be8d0b.crl

            X509v3 Authority Key Identifier:
                keyid:59:DE:82:A0:1C:77:81:BA:03:01:A0:57:BD:4F:DF:83:13:D4:7B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266eee71-5db1-4426-bc01-225515be8d0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9380:8000::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:75:6a:c0:d3:00:73:18:59:7a:cd:56:de:33:45:18:54:12:
         3c:73:b8:dc:d8:86:f4:a2:0d:4c:ec:7d:25:a9:39:5a:31:d1:
         2f:44:1a:d0:35:b0:0f:fe:4c:57:70:b2:e3:6a:6b:eb:69:ea:
         c8:fc:4f:d3:2a:cf:80:b4:00:8f:5b:e1:f6:5d:ad:44:43:52:
         39:5f:c9:ae:11:28:17:05:fa:05:af:df:cb:38:50:72:dc:83:
         07:91:3c:e4:65:f6:1c:78:32:8a:12:48:04:b8:c0:58:df:4e:
         8a:0a:bc:d2:1d:29:32:2f:42:b3:b5:ea:a4:dc:6c:b1:9c:01:
         6a:b8:2a:23:81:6f:79:3b:54:6f:1c:03:e6:79:1b:09:ad:23:
         f0:99:1f:e9:18:94:8b:e5:2c:bd:28:6d:f5:23:2b:7f:26:2c:
         56:3e:82:33:24:93:df:f4:ea:a8:e1:11:e2:79:05:4b:a7:15:
         4f:44:29:9c:37:a1:73:3e:7e:e5:76:d4:98:91:11:f1:8a:3a:
         85:66:89:36:cf:7a:35:1f:a2:1b:bf:d6:17:cf:dc:2b:47:bd:
         e0:79:47:d4:4b:3d:f6:f1:ce:c0:00:87:87:54:0c:96:ca:d3:
         fe:1a:d1:c2:d1:66:9d:ef:26:e3:a3:fb:84:35:fb:23:a6:01:
         e1:3b:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:24:36 2026 by rpki-client