Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
File:                     1f74085a-91aa-3331-9a65-b05046d33510.roa (raw, json)
Hash identifier:          m4U6iXu97j6faHs9pQrKdOEUCFGjhiZ5HMg15knFnsQ=
Subject key identifier:   1E:84:F4:B2:CF:3C:35:3E:6C:B1:32:3E:8D:E2:F1:DD:18:D3:29:39
Certificate issuer:       /CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
Certificate serial:       010D0C9F4328584F49893D84454ED500B0A49600
Authority key identifier: A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40716
IP address blocks:        2602:81b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:3d:84:45:4e:d5:00:b0:a4:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8e49cffd-765d-4736-9c8e-1c8a8efc0889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:fb:23:ab:65:49:c2:36:68:64:3b:e7:35:
                    e4:16:dc:c0:20:29:d0:2f:fd:ed:25:47:10:19:d2:
                    5c:ae:fb:e4:6e:c6:42:d0:e5:e4:67:a8:e5:0a:39:
                    40:cd:4f:08:ce:2f:23:1a:84:2c:cd:ca:44:3e:e3:
                    0d:5c:a8:b5:ec:8d:1d:1f:4e:13:6b:17:1a:0b:71:
                    fd:5b:9f:a9:75:59:94:a0:55:f5:f5:16:b8:e4:56:
                    08:df:93:9f:20:01:c8:70:09:ac:4f:55:c3:89:48:
                    9a:11:52:bf:e5:b9:35:99:9a:fe:88:39:79:81:bc:
                    64:43:19:7b:2c:07:de:4b:9e:9d:ab:eb:ef:3e:f1:
                    a3:72:f6:36:e5:6e:70:53:b2:78:19:58:cc:87:7d:
                    06:3b:bf:32:c6:3e:b0:fc:87:7e:27:1d:8f:ad:c8:
                    c5:61:7e:e7:44:5a:6f:4d:6a:dc:67:2d:86:aa:52:
                    3d:5e:71:bc:54:ca:00:fb:92:49:e7:b2:ad:53:45:
                    04:d4:a6:18:0c:2e:cb:55:24:9e:67:b4:45:51:f7:
                    f8:5e:f2:aa:45:07:83:99:e4:c0:0b:12:fe:3b:8c:
                    c0:dd:49:16:b3:f6:7c:6a:a5:9b:6c:10:59:fb:46:
                    de:68:60:3d:21:43:05:c1:15:fa:7c:99:5b:0d:f2:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:F4:B2:CF:3C:35:3E:6C:B1:32:3E:8D:E2:F1:DD:18:D3:29:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl

            X509v3 Authority Key Identifier:
                keyid:A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:d5:ef:d3:40:30:f0:8b:9a:ef:b9:c8:77:93:0f:6e:b5:
         1d:fd:39:34:e5:ff:8e:10:8e:c5:dd:35:6d:5a:fa:ad:ce:94:
         4c:ba:d7:49:25:77:5b:ae:bf:65:02:b7:a5:d4:5e:a0:57:49:
         62:9e:74:9b:b2:32:b6:d8:86:61:d3:c1:79:b8:d6:e2:08:6c:
         49:27:ab:fc:5a:29:ee:bb:7a:c0:5d:89:dd:cd:9c:f4:56:1f:
         2a:2f:d1:28:38:cc:e8:f8:18:05:ea:cc:83:7d:ca:03:b0:f0:
         11:8f:8c:ba:79:77:df:66:b1:b9:0c:20:84:e9:6d:09:eb:a9:
         9a:b5:fd:14:da:cf:d2:cf:c0:dd:e4:86:f7:f9:cc:a4:fc:4d:
         c5:f3:3d:90:30:18:74:4f:6a:80:c2:f2:14:4c:56:ff:22:ee:
         2d:7e:03:f0:bd:c4:1f:e9:52:cc:f4:be:4c:b7:67:12:df:6b:
         ad:58:2b:25:0f:81:61:7f:2f:40:74:47:6f:e9:43:85:03:01:
         54:67:0c:de:6f:10:69:bc:c2:30:b4:21:12:1a:18:7f:3f:54:
         8a:4e:c0:be:69:7b:e1:0c:e5:e6:1e:b7:5b:d9:5c:3e:ad:88:
         2f:a6:b6:fb:fc:9c:7d:26:94:65:8c:f8:88:e1:27:98:fa:ae:
         bc:3b:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:01:51 2026 by rpki-client