Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa
File:                     7f99c278-e7e2-3995-a010-1c438352ad5e.roa (raw, json)
Hash identifier:          5Fx+NrwyrxxgX1GL/ALHUf5ouuZvfO1NcSawhBCN5eY=
Subject key identifier:   88:43:D6:90:C6:60:8E:78:CF:4C:78:CD:A0:CC:82:20:7D:E1:3A:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862A3EFE6E114FFF7D41800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        2603:3015:2b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:a3:ef:e6:e1:14:ff:f7:d4:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=59d86127-f459-49ef-bedd-017352989302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:5d:d9:c7:26:90:75:96:4a:02:a9:14:e9:
                    63:3b:00:28:03:9a:a9:65:db:1b:10:43:f1:9c:1c:
                    99:ec:38:c1:6e:30:3c:83:0c:36:c6:46:70:4f:2d:
                    da:f7:21:8d:ac:82:4f:3f:ed:da:aa:47:a7:ff:06:
                    bc:85:d5:a7:40:48:da:23:db:d2:41:f9:82:ff:b3:
                    e0:0f:26:57:a9:34:84:d9:81:da:98:0f:a5:b5:94:
                    62:80:80:75:78:1d:c1:b2:15:5e:2f:31:d4:58:cb:
                    14:c9:d3:13:94:74:c6:2b:f7:19:43:6e:8a:1f:40:
                    b5:5c:aa:68:ee:b3:32:30:70:00:da:92:b0:7e:1e:
                    a1:78:30:57:11:65:ee:63:df:89:fe:96:65:53:bf:
                    05:4a:6e:88:4a:cd:75:2b:da:1f:cf:f2:9b:b0:45:
                    f5:53:d6:2d:42:63:0e:fe:c5:48:1c:93:80:3d:8b:
                    29:f3:52:c2:2c:41:e4:6e:e0:70:34:d1:d4:40:51:
                    99:64:44:a9:47:e1:42:d8:59:78:12:d8:66:85:f7:
                    25:82:4a:51:be:ff:fc:0c:15:e0:1c:2e:02:bc:35:
                    ac:46:bc:12:80:49:4b:ac:6f:4d:27:67:0c:b2:78:
                    b0:8a:82:62:88:0e:75:cc:90:a7:5e:3b:db:95:d3:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:43:D6:90:C6:60:8E:78:CF:4C:78:CD:A0:CC:82:20:7D:E1:3A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:2b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:96:70:0b:2a:68:a1:cb:b9:54:bd:c3:37:45:e6:f3:63:60:
         a9:32:f2:d8:bf:26:be:9f:55:05:59:f0:56:38:c0:82:06:76:
         13:0e:93:0f:c8:7d:f4:13:31:0f:36:40:7d:d3:8c:10:87:7a:
         ae:14:77:cf:10:6d:a2:33:dd:78:fb:90:46:6a:f2:11:d6:3b:
         e8:70:75:d0:64:5f:44:3f:30:85:f6:ab:ca:45:a2:9b:7b:77:
         28:38:50:90:4a:84:9a:3c:03:dd:4d:09:e3:8c:26:dc:b8:42:
         06:4a:7c:21:ac:b4:49:b3:fc:c4:2e:3c:c4:10:e5:34:7b:6a:
         77:f1:57:01:05:14:7a:de:dc:30:8d:d7:7b:d2:1f:eb:27:57:
         84:e5:b5:85:f0:4f:8b:e3:98:91:48:65:14:e7:55:26:da:6c:
         f8:24:96:53:75:e7:9a:e0:6d:de:f2:d1:5a:3c:ba:51:cf:11:
         93:69:c3:ad:76:52:ab:17:66:04:8e:09:cd:c1:c6:1f:94:52:
         87:f2:36:1b:71:4e:2a:38:01:f9:1c:df:9c:62:6b:78:58:7b:
         65:a0:8a:23:30:44:3c:da:d5:5c:c7:0f:62:d1:e3:b8:e8:82:
         b2:5a:77:45:6e:92:3f:9f:47:dd:35:ad:c0:46:7b:9a:3a:66:
         76:47:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:33:33 2026 by rpki-client