Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa
File:                     fda04578-1852-37e8-942d-696b643a77de.roa (raw, json)
Hash identifier:          FDsnYLvxVzXBWiIqGqKOB3DOfpMBVpcRNFSi6ffUhwM=
Subject key identifier:   D6:9A:CD:5A:53:7B:B0:5F:D8:C7:04:4E:0F:21:C3:F9:9D:48:42:E2
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584F4974DE51E5751C204319FC40
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6517
IP address blocks:        2607:ffd8:ff02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:de:51:e5:75:1c:20:43:19:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2239c076-71db-4ea2-938e-0d985a6ce0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:58:81:34:d4:11:09:1a:49:79:dd:54:ab:
                    cd:bc:a2:51:f0:87:9d:a9:84:3b:82:77:46:e0:9c:
                    39:3e:61:59:7a:a6:d4:ef:7c:bd:f5:48:6f:99:68:
                    05:07:62:de:b4:a2:79:ae:87:83:36:04:b5:d9:13:
                    cc:75:5e:27:c3:33:59:ac:6b:c2:56:fd:bf:57:10:
                    d7:0c:c0:cf:a2:84:e2:63:58:cf:7c:17:e1:56:ab:
                    5f:e1:0e:36:04:00:ec:02:71:0d:48:cd:f6:59:03:
                    9e:2a:77:ea:fc:64:e0:31:cc:a8:c6:89:e3:ea:da:
                    98:b4:63:d5:4f:b0:81:83:c3:05:39:b5:ca:17:ca:
                    2d:b3:07:ae:7d:c0:a3:ef:2b:be:60:5d:73:3e:07:
                    96:73:71:22:54:fd:eb:3d:d6:19:bd:e7:cb:84:8d:
                    a7:67:da:72:ca:ac:5d:cd:17:a5:8b:18:e8:6a:e7:
                    bc:e8:b2:0a:23:40:60:b9:f4:00:28:2d:18:09:30:
                    f7:4c:01:03:15:33:d6:0a:06:59:5c:56:ad:52:cf:
                    a2:1f:fb:d8:2e:09:08:bb:8a:bd:a3:e7:7f:58:13:
                    44:39:1a:18:04:a6:2c:30:08:a3:07:c2:aa:99:67:
                    f3:bf:4c:9a:a1:74:78:88:63:a4:d7:4e:8a:89:dd:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9A:CD:5A:53:7B:B0:5F:D8:C7:04:4E:0F:21:C3:F9:9D:48:42:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffd8:ff02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:29:b3:4c:92:6f:b8:98:e7:a3:71:f1:0a:dc:a5:4a:e4:4e:
         8a:94:92:36:82:36:ca:dd:74:67:6f:f1:4a:3d:0c:6a:f0:a3:
         46:bc:d2:cf:b7:39:46:f0:ab:ff:fc:8f:84:f5:33:31:17:c3:
         f5:ac:29:97:0d:6c:45:13:a0:d9:e4:41:5a:da:d1:55:aa:61:
         93:b0:42:98:f4:28:8d:73:5f:15:7a:a2:d0:4d:e7:d0:c5:b5:
         7a:ca:cc:bf:d6:63:a5:30:a0:6c:83:ee:06:f2:33:f4:8a:a9:
         eb:76:25:64:4f:28:84:29:bc:f1:cd:63:5b:22:26:43:0a:6f:
         37:7f:67:2c:4d:e8:1e:8f:e1:24:6a:46:ce:35:60:01:5c:f1:
         a7:08:47:75:48:0c:e9:69:e1:67:5d:9f:b2:b4:de:58:c5:b3:
         d4:3a:28:5c:bc:ff:66:4f:70:c3:a1:1f:61:9b:b6:7b:5f:f1:
         f8:f2:59:d3:46:c1:c2:b9:89:cc:66:91:4b:97:96:0c:14:68:
         0a:95:69:c8:2e:1f:2d:02:ec:2f:cc:d6:9e:cc:d2:8d:02:46:
         21:4d:83:f6:d5:bf:dd:1a:84:5a:94:89:d6:2a:2d:63:58:2c:
         3c:a9:bc:c1:85:e7:0a:eb:78:5a:d7:a8:89:f4:a9:b5:dc:e0:
         72:0b:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:54:03 2026 by rpki-client