Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/145163f9-1765-313c-a389-221ae4503993.roa
File:                     145163f9-1765-313c-a389-221ae4503993.roa (raw, json)
Hash identifier:          8VXMQ22m9Punh+dnsvvbZthDxIpnX69rJtmUj2/pA8o=
Subject key identifier:   4A:7C:A8:C3:8E:78:CA:D9:7A:27:2D:C9:2C:21:2A:BA:57:4C:C4:0F
Certificate issuer:       /CN=748bac2f-38a7-4ee0-81c0-e846bc60f7bf
Certificate serial:       010D0C9F4328584F51D2A5186A487627DE8B7E00
Authority key identifier: A3:B9:89:3C:C4:9B:0D:83:21:AA:C5:48:24:40:AA:71:AE:8D:A1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/145163f9-1765-313c-a389-221ae4503993.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     33438
IP address blocks:        2607:ed40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a5:18:6a:48:76:27:de:8b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748bac2f-38a7-4ee0-81c0-e846bc60f7bf
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=322edaed-c7f6-4f36-a6bd-2741494a5a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:5a:0e:79:a6:9a:8b:f1:64:c8:3b:e0:11:
                    0e:5b:87:41:56:2b:9a:11:b2:fd:90:d6:ee:13:ed:
                    2f:06:28:3d:45:35:fb:e8:75:4f:52:e5:23:1f:65:
                    e8:cc:3a:63:70:68:2a:b6:0d:e5:5f:ff:a8:7c:9c:
                    fd:52:20:86:a3:03:7f:2b:da:ef:dc:31:96:01:14:
                    41:3a:38:f0:3e:3c:f9:21:d4:0c:5c:dd:86:93:60:
                    8a:35:6d:4d:f1:db:cd:53:ab:c0:4b:cd:80:33:79:
                    26:e4:5d:b3:c6:d7:6e:55:fd:53:58:52:fe:69:d3:
                    c4:5f:1a:59:17:e7:c0:81:17:14:b5:41:30:5e:7d:
                    bf:51:3c:77:d5:f8:76:52:ee:d2:90:41:48:ce:01:
                    c3:09:2c:c6:6d:a0:d2:d0:b1:76:d3:40:4f:5c:90:
                    24:7c:2b:13:7d:c0:93:e5:2b:18:eb:05:39:fd:68:
                    1b:9c:86:c0:7e:15:b7:9f:04:f9:d6:58:9d:e6:0d:
                    ae:90:bd:80:62:01:ab:40:f0:9d:5f:4a:1e:4e:9f:
                    ad:6f:f0:8e:50:cd:b0:29:e2:bd:5a:2d:d3:21:a6:
                    b7:96:5e:75:ff:f6:57:bd:48:0e:c7:53:29:b8:77:
                    2f:23:54:09:c1:16:d1:c7:f9:eb:79:78:1d:cb:1c:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7C:A8:C3:8E:78:CA:D9:7A:27:2D:C9:2C:21:2A:BA:57:4C:C4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/145163f9-1765-313c-a389-221ae4503993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.crl

            X509v3 Authority Key Identifier:
                keyid:A3:B9:89:3C:C4:9B:0D:83:21:AA:C5:48:24:40:AA:71:AE:8D:A1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:41:b9:1d:91:ee:51:ae:ed:01:34:9c:23:60:c1:9d:35:
         16:46:b8:01:13:f4:1c:5a:c4:06:4d:2a:fb:05:07:6b:b5:db:
         e6:c0:e4:b2:d3:41:dc:01:ee:0a:cd:30:a6:d1:ba:75:54:3e:
         16:1e:6c:cc:a3:f3:78:a1:dd:79:9d:1d:19:f7:af:1a:0a:85:
         ac:d1:64:de:3f:80:9d:a7:8e:79:9e:95:16:60:c7:83:85:f0:
         10:b8:8a:c6:e4:f3:ba:7a:58:64:f8:88:bd:26:23:99:3e:4e:
         73:7a:6f:d9:d0:93:93:0f:87:b3:8c:9f:72:04:54:15:28:b2:
         db:a3:80:c6:14:3a:0c:b0:8e:ad:99:55:23:f3:93:f7:c7:37:
         48:e1:3b:b6:51:e5:a5:9e:0c:2a:92:c6:fc:14:11:ca:75:e9:
         42:41:14:54:99:2f:76:44:1d:be:4f:41:d7:a1:be:af:1c:cc:
         03:5e:66:47:84:97:24:87:43:23:af:79:af:1e:c0:77:3c:fb:
         b8:8f:83:d0:c2:1b:48:7f:43:0e:39:f9:c2:3a:b9:6c:f0:ec:
         ea:45:5d:17:16:51:e8:1c:d2:8e:61:70:d4:4e:c3:e4:bc:e8:
         f6:9f:ca:81:45:0b:20:3c:36:d7:0f:c5:33:eb:e5:c7:4b:5f:
         a5:1e:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:20:39 2026 by rpki-client