Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
File:                     c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa (raw, json)
Hash identifier:          Y+f8wm5zhNsQgJ3JMBA4dlTDaJsu1lejUcUBAZLR6Sw=
Subject key identifier:   4B:A0:E0:83:30:20:B8:FD:2A:E3:51:F1:2B:38:9E:8E:8E:27:1B:30
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F4328584F4975363E750882AF262A4DB0
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54665
IP address blocks:        2604:4a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:36:3e:75:08:82:af:26:2a:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=79a4d2c5-93ff-4343-aeea-44ef01647ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9b:53:2c:2f:a6:47:70:d0:be:47:f6:79:c0:
                    81:26:e8:3e:b2:07:27:d8:19:7b:d6:9e:a2:78:72:
                    06:69:b0:d6:6a:56:c9:9c:45:4f:c6:d2:d8:2c:4f:
                    20:10:87:03:e8:5c:1a:ad:a1:a6:6c:c8:26:21:d2:
                    68:92:a6:df:b1:43:da:c4:0b:df:76:e3:bc:6a:36:
                    5e:6d:b7:70:3e:17:d7:a7:cc:70:7d:f2:67:a8:d9:
                    2d:ee:40:d3:25:a8:95:44:c4:61:51:0f:77:e8:37:
                    3a:13:49:74:6e:a9:26:2d:55:96:f9:4a:cf:12:7d:
                    1d:c0:f6:fa:ea:9c:34:c3:06:d8:95:42:e1:8e:40:
                    f7:e0:c4:c2:45:a4:bd:83:35:a8:af:a9:47:4c:ba:
                    5a:f9:76:8e:1f:d3:72:6c:2e:ac:06:7c:39:ef:23:
                    9f:f3:3c:0e:1d:27:69:37:b1:c9:41:c5:01:61:9d:
                    c5:05:21:74:54:37:0f:7c:8a:2f:d0:86:39:f6:1b:
                    3f:4c:75:c7:e4:4c:71:82:8b:01:eb:bc:85:d4:8b:
                    5a:6e:60:4e:14:77:bb:5c:a4:93:cd:4c:80:a3:52:
                    bd:9e:f6:6a:80:63:bb:ad:f6:8f:01:55:e8:55:23:
                    97:e5:5c:01:3f:17:a1:b9:d4:28:f6:3c:27:05:a8:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:E0:83:30:20:B8:FD:2A:E3:51:F1:2B:38:9E:8E:8E:27:1B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:25:d2:83:c4:7f:03:76:10:7f:46:df:58:56:96:26:30:4c:
         f9:3a:d6:9c:03:69:c0:f4:f2:6e:51:f1:00:f3:70:f8:3a:1a:
         db:a4:a1:e9:4c:f0:10:6e:56:43:91:3e:0b:eb:4a:d9:91:e5:
         34:38:f3:7e:bb:2c:70:fc:82:02:50:85:00:ea:3e:ce:ac:27:
         78:70:52:3f:4a:ac:c4:ee:ba:44:74:37:7f:6c:c1:ca:5f:fa:
         a5:ac:7c:96:81:df:19:ee:99:d6:7b:28:11:b1:6b:af:79:22:
         3d:5d:90:ed:67:59:47:dd:17:2a:00:53:c8:88:71:58:b1:82:
         5c:e3:46:aa:5d:9f:0f:0e:17:71:3b:58:e2:e0:ad:d7:08:13:
         ab:b0:b6:13:44:ee:54:fb:07:a4:06:48:ea:4b:11:78:78:7b:
         6d:01:87:6c:ee:1f:65:d8:a3:4b:4b:0c:a5:62:bc:56:7a:f9:
         e2:a1:d1:29:d6:68:61:92:72:82:0e:68:67:7d:1e:ab:25:36:
         ba:2a:00:0b:e1:84:9e:41:6b:c6:5d:04:ee:84:ed:7a:b9:db:
         a4:2c:6e:ce:f9:0b:07:01:e7:19:5c:a5:78:d8:09:87:33:b4:
         bf:3f:6c:2a:d8:47:96:26:22:83:51:90:a4:40:51:7d:c2:a4:
         e5:8c:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:13:51 2026 by rpki-client