Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa
File:                     67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa (raw, json)
Hash identifier:          Lvl6mJPuGsSTapGGGIDFGWKkiFCFFEeHy8N6qplT9sQ=
Subject key identifier:   59:97:8B:3F:DF:8B:FE:06:2E:E8:55:20:DA:8F:3F:E9:38:35:54:2A
Certificate issuer:       /CN=36851ba9-e601-4ee5-b047-fce86c798909
Certificate serial:       010D0C9F4328584F331D2232D978ECB77A47B1C0
Authority key identifier: F0:B5:1B:BE:7A:40:03:77:E8:48:29:F1:C9:FD:00:34:9A:13:A2:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19446
IP address blocks:        2607:b440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:22:32:d9:78:ec:b7:7a:47:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36851ba9-e601-4ee5-b047-fce86c798909
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=1271b748-05fa-468c-837d-ba19f764e0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:66:02:64:b9:1c:54:38:31:32:02:08:2b:
                    1e:3b:af:3a:7e:40:65:51:84:75:ba:b6:5e:17:a1:
                    45:41:cc:d1:d6:41:0a:d6:4f:d7:5a:80:97:47:49:
                    b5:e7:40:96:ba:1c:f8:d8:3a:e5:4b:f4:2a:b6:d1:
                    a8:57:68:3a:6a:10:e8:04:6f:cb:e7:d0:98:13:95:
                    f3:d5:2e:82:94:bd:38:7a:c4:0b:31:73:9f:a9:b2:
                    e4:d6:e4:36:ec:86:b1:5a:08:55:df:ad:b0:5a:1c:
                    da:10:a0:21:bb:43:24:3c:04:c8:01:a0:81:73:30:
                    90:69:30:72:2d:34:b1:89:57:4b:38:fc:ab:b2:12:
                    7a:ee:f0:7b:12:5d:4a:23:ba:d0:c6:02:48:33:00:
                    7d:b3:ef:28:98:43:58:aa:8b:c9:83:27:36:cc:b8:
                    75:bb:c3:43:80:b1:ff:dc:9c:2d:55:be:d4:af:35:
                    f3:12:61:0d:86:72:47:d5:82:34:69:1b:49:6d:a6:
                    72:12:eb:35:2c:a6:29:e7:3e:f5:01:90:9f:08:5e:
                    33:34:64:d7:8b:87:15:2c:14:80:42:7c:7b:49:72:
                    07:32:74:da:33:2a:62:e3:3b:1f:87:38:34:11:ef:
                    b0:cf:28:e7:31:c6:e5:be:b4:20:26:fc:89:08:a8:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:8B:3F:DF:8B:FE:06:2E:E8:55:20:DA:8F:3F:E9:38:35:54:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/67b7cdf4-c13a-3995-b23d-ac13acc5f1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B5:1B:BE:7A:40:03:77:E8:48:29:F1:C9:FD:00:34:9A:13:A2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:42:ea:1c:42:e2:56:e1:7c:ae:25:4e:28:e1:fe:f3:24:
         65:58:23:0d:fe:9c:be:e9:35:2f:d0:ff:d9:a4:de:39:23:5b:
         02:4e:6a:4d:24:ec:de:1d:e6:0b:8e:fe:cd:23:00:41:8e:bc:
         d6:2a:2f:31:cf:ff:cb:03:9d:58:ac:7c:d5:48:48:f1:0f:b5:
         3e:50:db:5c:c7:aa:c0:b7:2c:97:8e:29:24:1d:7c:7c:0c:48:
         35:eb:f9:42:e6:fb:dc:a1:8c:57:0f:1a:3a:2b:73:e7:b2:ce:
         be:1b:14:c7:22:48:57:e6:a8:ba:da:7d:7c:44:fa:a4:72:ab:
         45:a2:53:a3:d6:f3:2e:c0:b3:c1:1f:4b:83:41:ea:ab:7c:5c:
         82:a8:ec:20:fe:1e:ad:d4:6f:22:fa:a1:66:08:d8:c0:75:21:
         9f:84:3e:f3:54:d1:66:6f:10:71:22:0c:57:c5:40:09:da:ce:
         9e:4a:50:7e:1a:6b:0b:72:d1:60:78:40:0c:8a:f9:01:e1:ab:
         70:59:33:28:31:f4:59:1c:ef:48:9f:1b:95:86:17:95:c4:3d:
         17:5d:63:ac:70:5f:e4:ef:6e:80:09:c3:fd:82:6f:c8:19:57:
         13:be:a2:dc:a3:7b:bb:c5:92:58:c6:fa:f6:60:18:a2:0d:d9:
         3f:5d:4f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:10:05 2026 by rpki-client