Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa
File:                     a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa (raw, json)
Hash identifier:          z34cB8itNbqcbMhJIZGr3EvjaY8msksA1A07jCsf4Ho=
Subject key identifier:   39:89:5C:D7:39:3F:60:31:A7:F5:43:3C:3C:E4:DC:5A:3E:73:A5:D1
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F4328584F4976C3DAA2A181F2B8BB52C0
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2620:ac:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:c3:da:a2:a1:81:f2:b8:bb:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1afb76c2-d0c8-4921-824a-1ca4f9c5300e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:ae:2d:8f:42:fb:e4:2e:8c:70:56:00:e5:
                    9f:cb:0d:99:c2:4b:fe:92:dc:5c:16:a3:2f:ad:07:
                    9d:3d:75:e2:8c:37:96:5d:56:2e:60:11:8f:15:05:
                    36:60:4b:6f:59:b9:62:02:38:07:22:68:3f:9b:38:
                    1a:d1:bd:30:70:ad:8b:cc:45:71:a7:21:ab:91:23:
                    c7:67:fc:8e:7d:4c:e4:86:61:fc:39:67:8c:dc:9a:
                    31:24:b0:de:7b:de:33:c0:98:f9:a5:80:38:cf:c9:
                    fa:84:05:89:fd:85:16:f6:d3:b7:a8:b1:2a:a7:a9:
                    a5:58:61:c4:6a:13:0b:73:1e:70:f6:1f:e0:af:b6:
                    06:16:ba:11:aa:6c:16:a2:53:1e:34:01:f6:89:93:
                    60:03:47:cb:11:9f:7d:37:e6:99:b2:05:46:70:8d:
                    e6:48:88:b0:ec:39:36:50:9d:de:ee:5b:1c:c7:7b:
                    23:72:fa:99:29:85:2e:00:92:01:f1:b9:19:b1:d7:
                    5a:e7:05:f1:f0:89:ae:3a:c1:97:31:75:d8:59:36:
                    27:10:b4:db:35:e2:a1:29:fa:9d:f1:1a:ce:8b:72:
                    d4:90:bb:03:44:50:35:06:4c:42:80:b7:9d:54:fc:
                    b5:65:5e:dc:d8:a2:4a:81:f4:61:e6:61:84:71:52:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:89:5C:D7:39:3F:60:31:A7:F5:43:3C:3C:E4:DC:5A:3E:73:A5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ac:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:3d:3d:81:30:24:d9:50:35:24:67:c8:3f:85:31:01:c4:
         42:a7:77:a2:5b:20:75:7f:e9:19:f7:ce:0f:1d:d0:c8:69:6d:
         57:fd:5e:80:ae:86:1b:13:77:27:73:a3:bc:68:57:59:18:91:
         5e:a6:63:d6:9b:e4:da:00:90:58:08:27:80:e3:1b:38:83:51:
         48:f7:c5:ad:e0:08:e2:e8:01:ce:24:65:4d:3d:02:1a:50:fa:
         0e:a1:5a:4b:a7:13:21:0c:b6:81:e0:27:e9:d8:6d:74:3a:e6:
         51:7a:eb:d0:9e:03:70:ee:c7:d9:69:9f:4d:5f:6d:30:aa:da:
         8b:28:2f:28:38:bd:79:0b:aa:f4:32:d6:36:59:4c:27:ca:14:
         62:34:48:93:48:75:3d:8d:29:29:39:47:d1:fc:d3:7d:74:08:
         d9:e4:eb:e0:fb:d9:19:5e:2d:e6:08:ad:d7:f9:77:c4:62:57:
         e2:1d:59:1a:4a:52:83:a6:38:20:19:f9:6f:8f:60:11:9c:65:
         77:d7:fb:13:d7:bc:d4:04:2b:ef:db:1e:66:10:f3:d1:c5:4f:
         c5:52:80:bb:f0:69:f5:9d:08:f0:ce:fe:d0:1f:5f:56:8d:16:
         df:8e:8e:2d:ee:7f:ab:be:6e:54:6f:fd:1b:67:ed:15:34:ca:
         a2:a6:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:01:58 2026 by rpki-client