Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa
File:                     41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa (raw, json)
Hash identifier:          XxgrKuAI5CvPO1mhFcpd5NhezjUvauLyORgzxzwuoLI=
Subject key identifier:   5A:EC:00:04:1B:7D:21:ED:EB:DB:68:93:8C:11:E3:77:63:C6:0D:7F
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584F4988AA712C4229835A990380
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27539
IP address blocks:        2604:a900:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:aa:71:2c:42:29:83:5a:99:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f71ad3c6-9ecb-4e9f-a72b-d1dcfb0b55dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:cb:e5:a7:01:e2:8d:68:89:8a:88:ba:44:
                    2c:1d:79:89:8c:40:a3:91:ce:de:06:fe:ff:1e:bd:
                    be:e0:79:9f:bc:ba:6a:cd:97:04:39:fc:f1:30:12:
                    0d:7f:ce:97:80:11:49:3b:f4:00:e7:76:bf:be:b1:
                    41:77:69:dc:a3:2b:72:6d:0d:6e:6e:ff:c4:57:d2:
                    32:95:6e:f0:3c:cf:14:09:15:4b:57:c2:80:68:66:
                    7c:ac:9d:46:dc:26:cf:45:72:de:3d:d1:1a:52:8d:
                    13:1b:06:7d:39:a6:71:2e:55:0f:9b:ca:ef:1c:15:
                    1c:8d:28:2f:1c:d4:e5:c4:ce:77:b2:b4:eb:89:4b:
                    9a:3f:81:06:59:7c:81:26:19:46:6a:52:37:11:a3:
                    d5:81:39:d3:d2:ab:f3:ef:1f:9e:1b:23:ed:af:05:
                    84:d0:f1:53:9e:1b:a6:ad:54:0e:91:5b:0a:b5:e6:
                    dd:7e:40:58:3c:18:5e:90:08:b1:05:48:57:c0:79:
                    72:15:49:e0:3d:a8:4c:7f:ab:54:03:d9:3c:4d:f8:
                    93:17:b2:82:7f:0b:4a:74:0a:dc:d7:df:1a:21:d2:
                    3d:90:01:12:42:60:8d:f8:76:a1:36:29:65:ef:76:
                    f3:57:d8:70:24:1e:60:07:b9:85:bc:01:bf:53:cb:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:00:04:1B:7D:21:ED:EB:DB:68:93:8C:11:E3:77:63:C6:0D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:a000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:1e:ca:57:83:27:0b:4e:4e:05:f0:8b:94:85:a7:1f:fd:
         6e:41:6c:64:e5:b4:cd:39:41:4b:e4:2d:25:92:ed:b1:39:05:
         0c:de:99:31:c8:19:e5:aa:5c:9b:0b:e8:88:36:a3:09:49:6f:
         20:70:c4:ba:b4:76:84:d0:c7:64:4e:65:b5:8b:86:2f:9e:94:
         77:45:fb:8d:3b:ae:92:94:7d:dc:c9:22:fe:62:d0:91:d8:31:
         1f:50:b4:46:0f:78:c4:e4:58:62:30:a9:68:46:b7:96:81:d7:
         ca:d2:16:0c:a4:07:20:c2:cc:f6:3b:81:a6:26:c1:aa:88:f6:
         d7:09:e1:84:38:3e:34:b6:c6:52:5a:62:2e:47:d0:5f:04:cd:
         ea:d7:d4:68:45:e1:d0:53:ae:bc:38:b3:14:2f:20:20:aa:f1:
         02:5a:fa:16:87:66:bc:3a:4c:91:98:22:2f:2a:6b:4a:87:20:
         93:24:3a:62:7b:50:c7:38:75:e6:82:74:21:84:02:1c:f5:8f:
         c8:a6:73:1f:70:e4:e1:10:6c:cc:1a:f9:c5:dd:3b:fb:94:84:
         2d:05:45:43:4d:da:55:0c:cd:7f:5a:d9:1d:a7:dd:93:bb:f2:
         98:96:ef:f1:54:4c:dc:08:b4:dd:0e:77:e5:b2:69:96:0a:62:
         78:d6:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:52:40 2026 by rpki-client