Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa
File:                     2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa (raw, json)
Hash identifier:          Nl9QC2bYM/Ai2sGtoV9kfbL+A1pXRY4ERII149TJW+Q=
Subject key identifier:   31:0E:87:AC:8A:A0:74:D2:60:A8:05:02:F5:05:C9:24:D7:4A:AB:45
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584F4986683AD8A3368804ABE480
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        2607:1c0:320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:68:3a:d8:a3:36:88:04:ab:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3f95fd8a-df1e-43bd-bcf5-aaae9bc9ad3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:99:3f:5c:f1:b8:e7:ad:43:f5:ac:7b:40:
                    5a:22:1c:5e:df:c0:93:bc:80:86:34:57:84:de:18:
                    89:2b:19:8b:e3:a0:3d:38:60:7e:7b:2d:b6:88:65:
                    b0:60:2e:fe:f4:45:0f:b7:b0:43:9d:ca:f2:09:59:
                    c6:a2:d4:63:ab:3e:df:4f:50:44:0f:72:10:a3:5c:
                    aa:8b:df:ef:c6:aa:2c:b0:31:aa:12:29:1f:df:f2:
                    f3:5d:12:b8:be:32:1f:6d:a3:e5:9a:46:3b:6b:78:
                    f5:e9:e4:31:b1:f5:04:4b:f4:55:a9:59:35:75:f4:
                    3a:05:b4:5d:7e:f8:2c:d1:67:fd:2f:ac:68:39:6d:
                    e3:f1:9a:35:51:64:2d:f5:15:01:a5:0a:30:9d:5a:
                    7b:8a:9a:a0:bc:85:15:a5:c1:40:ac:ae:0c:1e:fd:
                    df:85:3f:5b:e9:29:b2:86:06:7d:0c:6a:0f:46:b1:
                    66:f8:e2:86:fe:fe:65:a2:4b:60:da:a7:67:99:51:
                    7c:a6:79:24:0c:02:57:ab:70:c6:cb:a6:07:1c:82:
                    32:fa:28:55:72:2a:12:68:bb:ed:6b:da:2b:c8:4b:
                    ce:14:d0:e2:6f:53:3c:a2:59:8c:82:58:f0:f0:00:
                    8d:74:0e:b8:67:b9:c8:c6:f3:16:bf:6b:6b:a3:67:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0E:87:AC:8A:A0:74:D2:60:A8:05:02:F5:05:C9:24:D7:4A:AB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:78:38:b6:96:bb:be:0b:2f:04:c6:51:ce:44:07:fc:2f:a8:
         f8:dd:5e:86:aa:72:f7:e0:8a:b2:31:d7:85:5c:99:dd:6d:5d:
         00:0a:20:61:c4:ca:be:ea:e8:7a:a0:48:24:b5:74:89:f6:ca:
         d8:ad:a4:81:bb:b2:cf:c5:4e:7e:e7:29:55:e6:df:f8:96:84:
         98:e9:8e:76:e9:2f:0e:57:b3:45:a8:ed:c9:b4:2e:6f:66:3e:
         d9:65:6e:b6:8f:f0:48:da:c1:1c:d7:71:92:68:de:2d:83:37:
         aa:e0:d2:e5:a3:27:6c:be:c3:52:a2:b7:48:b7:7b:b6:11:36:
         12:a0:6d:3b:7d:12:31:3b:19:e7:27:b5:43:56:e4:5a:ef:a2:
         0f:f9:47:9b:66:06:47:4f:99:99:35:f0:ab:93:e8:da:ac:bf:
         3e:f9:25:d3:00:c5:37:10:92:77:60:d5:db:94:91:44:4d:bd:
         54:90:e9:64:1c:e8:5c:0e:02:78:e7:51:90:c5:c2:47:fe:31:
         78:05:2b:f3:14:df:fe:65:c8:9b:ff:e3:e8:a9:bb:f6:07:e7:
         33:45:0c:77:bb:6c:5d:fb:0e:b1:1f:eb:7d:3e:99:2b:4f:63:
         1f:ed:d3:4b:57:01:41:c1:09:8e:ce:8a:50:ba:dd:58:3c:cd:
         f5:b6:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:20:39 2026 by rpki-client