Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/50c6deee-a638-3c24-a004-7bb723f2e681.roa
File:                     50c6deee-a638-3c24-a004-7bb723f2e681.roa (raw, json)
Hash identifier:          EaRTx4nvrmcQRWizDzaBiNKPCTlLO1lWZzDItx9QMs4=
Subject key identifier:   3D:D9:9D:B9:C7:BD:4B:07:84:03:01:94:30:F0:31:F9:A2:1A:62:CE
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F189797F562065D66BA969580
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/50c6deee-a638-3c24-a004-7bb723f2e681.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:97:f5:62:06:5d:66:ba:96:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=aed9c582-9de0-4e36-970e-62d6658a3ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:07:0f:5f:eb:79:be:db:d6:35:f8:bf:8e:
                    c3:15:97:8a:e7:25:af:95:0f:ef:60:d2:d4:1c:8c:
                    b6:bc:6b:de:cb:20:0f:e9:df:bd:00:ed:a3:9e:c7:
                    dd:09:4f:0e:c5:77:c0:38:87:36:31:93:5c:13:9d:
                    db:38:31:9d:9f:6d:38:d3:cf:fc:3a:78:da:70:32:
                    47:21:97:d3:a6:cc:6d:12:9e:b0:0d:ca:be:21:37:
                    c7:26:bd:7a:6d:b5:ff:83:b1:1f:1d:51:05:54:a6:
                    cd:65:14:01:38:bf:bc:73:67:f6:1b:66:ce:f8:94:
                    86:7a:83:8f:5b:74:44:b7:e7:2f:04:25:2d:3c:d4:
                    05:bb:f7:22:df:03:66:bf:e5:6e:3a:44:cb:7f:04:
                    23:ce:1d:9c:4f:23:b2:4a:ca:7c:90:2f:22:1c:8e:
                    4a:38:4e:fe:3a:9f:e4:0f:ac:e7:0c:9d:9c:d8:6a:
                    39:31:d6:70:7d:44:d1:1a:47:8e:7c:53:21:4a:b2:
                    de:f3:f6:c9:ec:b6:56:2c:f3:7d:24:31:b9:8e:42:
                    14:69:0a:f6:b3:60:a5:0d:dc:2f:a6:64:f9:d0:cb:
                    03:c2:89:f8:78:6c:d0:01:68:8b:c7:21:8f:9c:6a:
                    28:59:80:02:c8:85:ef:79:7f:23:f0:10:b3:11:85:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D9:9D:B9:C7:BD:4B:07:84:03:01:94:30:F0:31:F9:A2:1A:62:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/50c6deee-a638-3c24-a004-7bb723f2e681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:fe:ea:d2:a2:ef:db:7c:c8:19:75:4c:ec:1f:d6:01:bc:
         a7:b8:33:d4:51:1b:33:bc:bf:ad:99:0d:1e:91:48:d8:6a:4e:
         84:c9:0a:fc:0f:47:c8:27:e3:1b:17:68:6e:1f:57:a2:38:82:
         fa:e4:3f:93:35:6c:73:69:b6:57:87:3e:de:c2:c7:ab:7c:b3:
         eb:86:e4:19:2f:70:e4:67:4b:a7:6c:2b:6b:b4:df:88:6d:07:
         81:c3:b1:a3:cf:c3:04:3c:04:f8:a3:4a:09:e4:9f:33:f8:fb:
         88:28:e4:ae:cc:7d:29:e2:d3:90:73:ef:7d:eb:75:ec:63:66:
         48:55:b7:58:66:0a:31:96:c6:6e:0d:44:0d:96:c5:d8:f1:be:
         8f:ae:a1:7d:21:a6:aa:5a:ef:6c:b3:0d:60:66:d4:8a:ce:80:
         02:ea:d2:42:ce:91:8c:db:70:56:8f:6a:e4:ea:27:7e:d9:c5:
         8d:0f:65:ec:51:bc:13:28:1d:e3:2f:c9:cf:ce:0c:65:20:dd:
         cf:71:e8:db:5a:7e:c4:33:af:99:1a:94:4c:5f:4c:b1:e6:13:
         cc:5a:b7:39:41:5c:ee:ec:15:6d:17:3d:22:71:da:aa:ac:5e:
         9f:42:25:e1:39:72:9e:6a:69:e9:cb:b7:30:91:8f:a6:68:e9:
         78:27:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:47 2026 by rpki-client