Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa
File:                     84a1f65b-11a0-36ff-9041-d379bbbafa46.roa (raw, json)
Hash identifier:          jVki0XEK7nFibJTwlCStC9GoQRNdI1hwMvzj+m36cek=
Subject key identifier:   FC:7D:7C:0E:FE:E6:A3:A3:00:34:A7:8E:BD:47:51:B1:94:04:B1:37
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584F4986F48A6E70B1D06FBD7EF0
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        2001:504:96::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:f4:8a:6e:70:b1:d0:6f:bd:7e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=55bbad03-d4a4-47d3-99f8-f32f8fc51340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:59:8f:56:d7:95:bf:df:f8:dc:bb:79:91:
                    f8:b4:35:90:26:2a:04:fb:ed:63:63:71:5a:3d:4e:
                    91:e3:4d:64:4c:ed:3e:16:20:0d:85:ac:0b:52:84:
                    06:f4:dd:51:b8:b4:5f:b1:b5:89:b1:7a:19:55:c5:
                    c0:b5:e4:ae:6f:eb:46:2e:7e:ef:29:98:c8:3c:c3:
                    d6:8c:2b:f8:72:0c:b1:3b:03:de:58:64:4c:46:1e:
                    83:e4:be:14:b2:6c:b1:2e:10:34:5e:3c:99:2e:9c:
                    e2:d7:99:6b:64:86:7d:87:5a:f0:bf:76:44:49:ba:
                    d3:d7:db:cb:ce:b2:97:9f:58:22:91:16:24:2c:e1:
                    be:43:b8:86:66:62:b6:c2:47:81:20:2a:4e:dc:08:
                    21:06:fc:56:5d:ab:77:2e:6e:8d:2d:dd:2b:8c:c3:
                    6c:a7:44:b3:98:0d:a8:b9:2a:c6:ce:c3:38:60:c0:
                    58:b0:5f:bd:34:33:e2:a1:b3:e9:bc:de:a3:4f:2b:
                    55:c2:bd:6a:09:4c:93:26:37:b8:ff:d5:48:49:30:
                    34:73:bb:6b:80:6b:15:7e:8d:45:df:23:b7:df:2a:
                    46:b0:aa:4d:ca:ae:59:af:b4:79:8c:77:d5:54:af:
                    33:ab:9d:e8:39:d2:42:ab:b6:ea:0d:2a:26:ab:a2:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7D:7C:0E:FE:E6:A3:A3:00:34:A7:8E:BD:47:51:B1:94:04:B1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:96::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:78:2e:6a:35:38:0f:a1:81:0f:87:1e:36:90:60:be:fd:51:
         6c:cf:57:85:c2:8a:58:65:8e:9c:00:8d:7a:92:8d:12:23:af:
         bd:72:1e:81:7b:57:5b:f3:40:bd:07:60:90:0d:b8:b4:2e:21:
         44:91:f0:54:35:28:12:0d:99:2c:26:d3:dc:06:5b:5f:79:65:
         42:b0:27:31:57:d4:ff:de:93:f2:85:8d:f1:fb:41:75:3b:c7:
         b4:94:db:3f:ec:af:b7:48:45:c2:66:06:48:7b:3b:0c:b7:5b:
         c2:8c:32:47:61:6f:b1:5e:73:55:09:e2:f5:d6:b8:d3:bb:56:
         6c:84:f4:22:82:44:6c:a9:1b:6c:de:85:b0:1f:af:d4:82:de:
         e6:ac:14:d1:ec:50:bb:b2:e1:37:eb:df:f4:2d:05:2b:98:c9:
         74:32:97:a7:49:ec:e0:66:bb:ba:3c:3f:b0:11:28:3a:8d:fc:
         c0:18:9a:89:b6:d4:60:77:58:3e:5e:2e:e9:e9:e3:af:88:68:
         1f:5d:28:aa:37:9c:07:ff:d3:45:12:bb:2d:60:6d:22:2a:75:
         e3:20:ec:4c:33:84:e1:f6:ba:26:32:49:c7:de:93:6d:c3:1e:
         48:c0:eb:f0:11:c0:fd:a1:49:b2:b7:94:c7:5e:ba:93:ac:3f:
         72:20:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:40:31 2026 by rpki-client