Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa
File:                     fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa (raw, json)
Hash identifier:          NEMsqXJFgG+w52WaYqxBxqWG/j+bG8QPMTOvf/tbWgM=
Subject key identifier:   F7:B8:41:F5:99:5A:41:31:04:D7:E4:8A:2E:48:6C:AB:10:B7:EE:51
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584F03A7973DBFAC93BA0E038B4C
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16839
IP address blocks:        2606:3600:1110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:97:3d:bf:ac:93:ba:0e:03:8b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=cef182ef-dbe1-45f3-9a68-2ceac62c6f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:13:d2:02:ed:78:ed:57:35:84:09:3a:c4:
                    dc:a3:cc:70:e0:c6:04:f7:fa:0d:aa:26:b6:a7:f0:
                    67:af:7f:e2:d3:a2:b3:44:dd:e8:2d:eb:7f:35:1b:
                    7b:11:0f:50:4c:1a:cc:af:5c:73:4a:58:95:64:43:
                    84:5e:da:9a:4c:15:d4:34:03:c6:7c:cd:83:b7:98:
                    7d:5e:45:e1:d0:02:17:40:04:71:57:62:5b:93:ac:
                    5a:03:87:77:87:ee:54:ab:86:ba:ec:1b:5f:b5:22:
                    46:b4:35:a8:b5:bf:d0:5d:bc:b5:54:80:da:7f:41:
                    4c:9b:ed:e8:33:c7:74:d3:12:41:8b:09:8e:22:97:
                    92:84:16:5b:28:f0:f7:5a:0b:73:27:3e:09:87:0b:
                    29:2b:7b:d8:4c:dc:b2:bf:5a:b5:49:cf:51:63:10:
                    69:20:0c:3e:9a:d9:3e:75:ae:d4:d1:59:6a:7d:61:
                    c6:e1:02:91:6a:dc:06:2e:cb:53:9e:e0:28:58:43:
                    b3:08:59:e3:32:e5:b5:ec:bd:3d:c6:fd:ce:e7:8d:
                    96:f1:25:6a:fb:cb:4a:e6:3a:36:cf:6f:f9:aa:ec:
                    ac:70:86:1d:d9:d9:c1:15:ed:58:3a:f9:e6:94:db:
                    b1:81:ff:4a:98:3d:29:db:da:70:10:a6:1f:8e:b1:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B8:41:F5:99:5A:41:31:04:D7:E4:8A:2E:48:6C:AB:10:B7:EE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:1110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:04:7b:42:b7:39:ae:0c:40:61:52:a4:ea:2b:d8:03:61:be:
         b4:31:d0:97:82:4e:70:0b:3d:44:ac:a5:9a:6e:79:89:b5:c6:
         76:a2:3b:6a:33:52:fb:24:cb:1f:0b:5e:08:07:9e:31:28:e0:
         93:dd:92:a4:c8:2c:53:13:3c:7b:ae:bc:f6:7f:fa:44:75:bc:
         7c:90:88:c5:6c:ee:78:24:33:37:39:16:fa:f9:09:f6:73:5b:
         35:47:47:68:36:dc:d5:04:f4:9f:0d:e5:b0:64:76:b7:32:b9:
         76:f4:cb:0c:f5:ff:d9:30:4d:36:98:85:4b:bd:86:a5:5d:fd:
         83:da:4a:57:e4:67:a2:19:2b:6e:a0:44:65:46:10:82:9c:64:
         44:5e:65:fa:ab:99:7f:35:1b:9a:a5:b7:6d:5f:46:6c:87:cb:
         64:33:8f:00:87:bb:2b:e3:48:34:89:f2:8a:f6:e5:75:a2:78:
         93:0b:70:49:6e:98:53:c6:2a:d3:01:62:db:07:1c:39:18:3a:
         ec:ef:65:94:a3:b2:31:63:c0:07:fa:d6:08:31:c0:56:11:f2:
         10:b2:bd:6e:e6:c4:e5:cd:d2:80:d8:81:b6:b8:4c:c8:ee:98:
         37:61:4e:55:e1:bd:81:3d:bc:78:ae:3f:8a:0c:8e:a3:86:35:
         0b:77:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:21:22 2026 by rpki-client