Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
File:                     58ea7f89-b5b6-3671-a6c0-811e6620195c.roa (raw, json)
Hash identifier:          lGiCgmdZoal6TCm4bDIwouvJygA32y/PapqB7VZnS1Y=
Subject key identifier:   36:DA:03:F3:F3:99:25:DF:19:5A:54:0E:45:8B:D3:C8:4C:57:49:54
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584F4F0816CC988EB32C5282FA80
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     54885
IP address blocks:        2601:3000::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:16:cc:98:8e:b3:2c:52:82:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=07a9298f-a065-4ffa-acb5-97e968024d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e7:74:cc:80:45:b1:5d:46:fa:42:e6:58:0d:
                    5b:2e:94:3f:c9:db:fd:ba:15:28:5e:5d:19:fd:61:
                    16:ba:1b:5d:4b:83:e0:c9:f9:f6:10:7e:a0:90:d4:
                    61:fd:ed:da:31:4f:f8:ab:1a:9b:ad:5d:a7:0f:12:
                    6f:6a:ba:f2:80:fc:c5:dd:79:0d:2f:c9:57:a2:47:
                    73:88:de:f7:73:9a:14:de:a3:45:3c:b5:b4:14:ca:
                    f4:56:a1:88:c4:77:a5:e0:b5:89:99:b7:b5:ae:13:
                    0b:82:df:cb:11:ed:30:f9:33:39:31:37:ce:2c:ba:
                    25:e7:4b:1b:5d:ff:74:ab:e1:8a:4d:d8:9c:5d:d8:
                    9d:85:c8:95:98:0b:38:9d:7a:c8:e6:1b:b1:ad:f2:
                    5c:b7:51:f3:8a:91:8e:cb:20:39:b5:07:02:b1:b3:
                    d8:fe:d1:7b:df:d4:a9:84:d2:2c:1d:92:c5:b4:08:
                    db:c7:77:c8:9e:a6:b0:e5:a5:6b:da:de:25:3a:3a:
                    af:92:81:e4:34:a8:90:4d:9f:31:af:a9:a0:d8:6d:
                    8d:ea:02:a4:52:a5:a2:67:8e:66:2c:07:c2:ba:55:
                    af:7e:c3:02:fb:3d:76:15:7d:9d:d9:8c:ee:d2:6e:
                    44:02:33:e9:9e:23:57:c1:b3:ef:32:7c:74:95:c7:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:03:F3:F3:99:25:DF:19:5A:54:0E:45:8B:D3:C8:4C:57:49:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:44:e2:ad:3b:da:dd:06:66:1c:4a:72:6f:b5:a3:54:f5:
         0a:aa:0d:d6:8e:22:77:b7:ff:d3:06:0c:8d:08:55:4e:5b:d2:
         61:85:d4:00:e4:10:1a:48:2f:03:20:1b:11:d6:60:e5:b7:67:
         df:71:43:9b:9b:0a:d6:4f:37:74:88:f3:fd:67:ac:8f:69:c4:
         cb:28:c9:58:76:cc:bb:d5:d6:03:46:98:ac:8f:5d:cb:1d:06:
         20:c7:2c:aa:f9:d4:0a:46:04:84:ba:40:86:9d:7c:9d:f2:42:
         ef:14:99:df:f7:93:0a:b8:7a:ed:ee:29:96:b6:2f:14:6d:1d:
         e8:76:10:c7:b9:fd:91:9f:72:6b:6e:da:0c:e1:80:a6:08:13:
         b1:fb:a9:42:c8:3e:ac:21:b6:94:fd:48:1f:0d:51:bc:e9:34:
         3e:14:34:12:83:d7:85:77:f8:46:a4:e0:77:8e:8c:b7:b8:9c:
         d8:3c:3b:4e:83:ea:39:99:e9:17:b6:a7:7d:bf:f7:1a:9e:b2:
         c5:9e:57:ab:71:d1:c3:3a:bd:3b:7b:9f:e4:2a:b8:f6:42:ff:
         ce:ad:0f:2d:b0:80:92:2f:54:71:7f:85:09:33:08:d3:82:60:
         45:6a:80:2b:ba:73:d7:a7:d8:0d:fc:0c:85:03:26:b7:72:5d:
         da:a4:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:34:17 2026 by rpki-client