Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
File:                     c16ed97c-8646-379e-b507-327349487263.roa (raw, json)
Hash identifier:          07UFDflvOhTaj00Jo+pSItbukpS0glyUlyRilO2KVhw=
Subject key identifier:   AB:2A:8B:7A:73:64:03:DB:0E:F4:3A:2C:B1:40:39:55:CA:83:DC:FE
Certificate issuer:       /CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
Certificate serial:       010D0C9F4328584F497707FE58A7CD3ADB7D7300
Authority key identifier: 27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     215568
IP address blocks:        2607:cf40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:07:fe:58:a7:cd:3a:db:7d:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=150c6876-6f2e-4473-8135-283b5582afbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:72:df:ba:6c:5c:9c:7a:a0:9c:f3:1d:5e:
                    35:32:1c:22:d9:93:5e:05:50:f0:66:d3:75:a2:9b:
                    1e:80:04:72:a1:8b:77:27:e3:51:aa:4a:a5:17:ff:
                    c5:8d:05:e5:d7:0b:af:23:2c:08:ea:d4:8b:2f:c7:
                    4c:3b:5c:11:da:e6:6c:39:7b:50:09:4e:63:be:a2:
                    23:8c:53:19:4c:d5:b2:09:14:ef:af:68:55:16:e9:
                    a7:92:3b:fc:bb:76:b5:ad:ec:75:24:29:bb:4f:cf:
                    73:f2:e2:4c:d4:22:db:96:8b:c1:0a:8a:ef:be:c9:
                    c6:68:07:61:a0:99:fe:15:d7:5a:cc:59:ac:65:cd:
                    37:07:8d:fc:75:66:cd:33:74:33:a5:4d:50:d8:75:
                    3d:01:de:e4:28:f4:5e:a1:ec:db:05:cc:58:ef:69:
                    e6:9b:6d:3e:4e:68:58:16:3b:a8:ae:2b:13:b6:8b:
                    96:86:14:65:a7:43:8d:8a:d3:dd:c8:fa:fb:ae:71:
                    51:29:87:45:e8:8a:04:0e:94:1f:6c:2a:00:41:7e:
                    7a:92:60:85:e9:aa:e0:65:26:26:49:d6:07:c1:46:
                    13:22:56:91:bd:f7:bc:f9:31:7f:ad:92:48:87:df:
                    21:cf:e8:a5:98:30:b1:bf:3f:ff:d3:e4:d4:50:d7:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:8B:7A:73:64:03:DB:0E:F4:3A:2C:B1:40:39:55:CA:83:DC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl

            X509v3 Authority Key Identifier:
                keyid:27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cf40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:68:01:b4:75:8c:9b:66:83:31:8f:29:07:00:e5:2a:3a:c3:
         a3:bb:8c:d7:96:1b:c4:2f:01:d2:d4:9a:50:d6:da:a5:70:ef:
         ce:e2:79:d9:55:e5:0a:e6:9e:c2:c4:f5:13:e6:b3:c1:28:94:
         93:30:35:8c:0b:f0:56:08:09:f2:82:dd:19:6f:41:be:03:f6:
         db:47:1b:0a:60:6a:6e:64:05:7a:09:d6:23:02:64:4e:8b:85:
         2d:a6:3d:f2:62:10:d1:98:a5:07:38:15:df:2b:9e:13:4f:22:
         2f:1a:3a:d6:1e:d7:0b:02:fd:eb:8b:19:55:b4:6e:7d:50:70:
         98:d8:6b:1e:1c:9e:68:d4:b8:e4:9f:82:c7:c3:32:2c:06:1f:
         f9:16:55:db:47:8a:d3:02:86:d7:c3:24:e9:3b:49:4c:0b:33:
         18:19:35:c6:4e:2c:99:fc:f8:2e:75:0f:0c:b1:7e:0a:c9:f7:
         24:9e:5f:26:60:50:b4:06:c1:d2:e4:0f:8b:4a:7c:23:d0:54:
         88:1d:8b:8d:70:51:53:d6:1b:d8:70:af:37:34:c5:8a:55:13:
         43:4b:f7:fe:79:d9:a6:6f:b4:55:b5:10:c7:0d:31:c2:7e:23:
         d1:09:44:24:48:ac:1c:51:f8:0a:5b:19:b1:f2:07:b9:ef:36:
         b6:46:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:13:48 2026 by rpki-client