Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
File:                     69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa (raw, json)
Hash identifier:          vl398hOrhkRfzYnLgUu/iZmA7avenUvP/C+xOJHFPAI=
Subject key identifier:   F2:E0:BB:25:95:2A:21:DE:54:18:9F:9C:05:7A:F9:17:A0:B4:37:DD
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584EF18200B8D25BC417F738F500
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2620:121:5070::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:00:b8:d2:5b:c4:17:f7:38:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=52623384-d9a5-4060-9eea-c768312683f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:f9:16:66:81:af:2d:dc:ca:87:62:d2:06:
                    b5:47:b7:4d:69:b2:95:ba:df:85:f6:05:ec:e4:dd:
                    46:d9:1a:0e:84:e2:e1:34:58:86:dd:bb:49:3c:f8:
                    8a:88:fe:9e:f9:11:b6:b2:5d:f7:48:67:c2:06:74:
                    c6:4f:61:e6:fc:7a:fe:09:3d:96:1c:3d:e5:ab:06:
                    18:8d:06:84:aa:3d:0e:7a:3b:2d:cf:7d:d4:66:ab:
                    49:b7:2f:8d:69:dd:f5:f6:29:ff:20:7f:60:9f:f3:
                    d4:c5:de:e5:45:3b:8c:f6:79:c9:02:6d:ab:56:f7:
                    82:78:40:50:a5:41:ea:75:87:2c:d2:94:f9:de:dd:
                    12:21:33:43:e4:37:a4:63:86:5e:4c:4f:ce:f9:b0:
                    2c:0b:2f:d2:b9:fb:15:58:6b:da:91:72:d6:fb:e0:
                    0d:7a:7f:d2:3d:2a:ab:18:76:7f:03:1b:c0:47:8b:
                    f7:24:a6:60:e7:c2:99:0d:df:99:f7:5d:1d:1c:56:
                    c6:26:95:a9:7e:07:f7:ae:52:52:a5:98:fa:d2:87:
                    17:ff:12:19:9a:1f:ac:2b:53:ca:b3:b1:9b:61:46:
                    18:56:8a:9c:3e:94:f7:04:0a:17:00:ff:71:5f:8d:
                    34:96:29:fa:86:de:5f:3e:3a:65:23:0e:2f:72:c1:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E0:BB:25:95:2A:21:DE:54:18:9F:9C:05:7A:F9:17:A0:B4:37:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5070::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4d:2e:6b:1b:42:7d:44:32:5d:84:99:77:29:b1:80:e2:96:
         25:f1:93:47:62:70:8d:b1:14:c3:fd:26:d0:33:a4:5c:30:8b:
         c1:ce:f7:b5:5e:85:92:df:c4:56:db:45:d4:02:fc:20:60:9c:
         d8:65:03:88:ab:50:83:73:da:2f:b7:2e:be:51:81:94:d2:6e:
         40:53:7b:17:45:58:0a:a5:a0:92:80:45:68:94:f0:bb:10:19:
         a0:c6:85:11:85:0f:46:65:a3:47:5f:d7:dc:b8:de:66:ee:a4:
         2c:00:51:8e:05:c9:98:d7:45:1a:ed:23:d0:cc:05:f2:6f:c1:
         10:6b:6a:9f:9e:85:48:5e:c7:56:ca:b9:bd:e6:15:76:d4:6a:
         d3:92:6e:05:2b:40:e9:1d:b6:b4:5e:6a:44:32:73:9f:4a:9b:
         a1:68:7a:db:8a:0a:d8:52:bc:28:0e:60:c7:ba:1c:c0:ff:b3:
         b0:f7:03:f8:85:79:e2:e5:e0:56:14:cc:cc:de:fc:9a:c4:d3:
         33:d2:5e:2f:f9:76:0e:9e:03:c0:67:3c:51:34:ef:98:4e:94:
         a9:58:39:00:fe:61:e7:37:6b:7e:bf:5f:17:00:c2:c5:ca:4f:
         b8:94:01:85:7d:c8:41:0e:7a:1d:ee:6e:92:a1:28:59:35:5e:
         89:6c:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:52:35 2026 by rpki-client