Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa
File:                     1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa (raw, json)
Hash identifier:          0AoIW+hCmXBsZ6duVQYJlrCgCcH9hdfTboXSZ3UsLfo=
Subject key identifier:   EF:45:5A:CC:B9:ED:6E:B5:0B:3C:4E:C2:B1:91:8A:65:61:32:33:FB
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584F4976A15E8517017CF1330F80
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36184
IP address blocks:        2620:103:6000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:a1:5e:85:17:01:7c:f1:33:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=984546f0-13b0-4f66-8846-93c415105de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:12:fc:98:73:e0:3b:08:ae:61:28:de:0a:
                    ce:20:fd:da:4c:8d:0b:eb:d6:27:24:fb:32:6b:4e:
                    3a:a8:2a:a4:6b:64:48:7d:31:ac:5e:ac:72:eb:54:
                    24:6d:97:a2:63:8a:9d:3e:4a:62:e3:bb:ec:9e:ec:
                    65:af:70:ce:81:01:bd:cd:95:70:4d:15:b2:d1:d4:
                    80:88:b7:30:77:fa:bf:5d:0f:ad:6a:8a:7c:ab:88:
                    d7:4a:32:ac:88:94:49:c1:21:09:32:54:c2:a3:11:
                    c0:1d:7f:58:ca:fc:c5:36:cf:1f:53:27:c1:80:6b:
                    c6:80:36:f5:47:f1:9c:ef:f0:56:27:6d:bc:f6:b2:
                    e2:20:63:d1:c6:0b:88:44:52:ec:c6:f0:fc:e5:5d:
                    35:f4:78:35:33:98:89:0b:cc:ff:37:41:38:c2:da:
                    e5:cd:43:94:37:73:7c:bd:cf:37:81:8a:2a:d2:86:
                    01:e0:3c:41:81:bf:4d:e9:c3:7c:ff:1e:e5:a6:01:
                    5d:e5:3e:2a:d8:2f:c3:1c:14:2c:71:54:a0:81:6c:
                    3d:89:c6:30:b3:9a:7f:54:9b:9e:02:43:28:e7:99:
                    9a:8b:61:d4:2b:09:23:78:fa:2e:31:be:86:8e:bd:
                    a0:63:b8:38:01:c5:f2:de:33:42:37:39:ed:98:dd:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:5A:CC:B9:ED:6E:B5:0B:3C:4E:C2:B1:91:8A:65:61:32:33:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:103:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:95:89:3f:57:52:fe:8c:9b:aa:82:d7:2f:c3:5a:90:56:6a:
         53:67:e4:36:83:f1:5e:af:89:8a:72:65:88:df:9b:78:7e:66:
         2c:16:35:13:ba:3f:9b:ab:23:db:21:b1:0c:df:1b:9a:2c:eb:
         0f:48:aa:36:a4:55:a0:8a:9a:f6:c7:c6:0e:a6:4d:d9:eb:f4:
         c7:5b:3b:35:4f:ca:9e:2f:6e:e9:53:e8:8d:ee:99:75:c2:92:
         95:c8:aa:7c:e7:ec:59:a2:d0:6e:e6:6d:53:91:59:d3:e6:03:
         d5:cd:dc:b8:79:df:db:83:57:fd:8c:e8:b0:46:ff:c5:07:ce:
         47:7c:66:f2:b7:bf:23:79:06:b8:58:df:a9:38:33:cd:76:a3:
         70:0a:17:49:ab:b9:0a:0f:5b:c9:37:4c:38:78:6a:cd:49:14:
         ff:8e:03:fa:fb:9b:c0:f9:40:a8:8a:3c:04:a3:b5:b2:27:70:
         57:e0:c1:ea:dc:91:28:af:c6:93:a8:e5:01:e8:d1:5f:f9:de:
         73:5c:ea:fb:0b:57:fb:05:e4:fc:03:40:55:aa:e5:11:4c:e8:
         cf:2c:ee:5a:88:a8:e6:21:b4:ba:c7:5f:a6:dd:a8:76:37:13:
         1c:0a:3d:8d:c1:0f:f5:c5:51:b6:3a:58:9b:78:a0:68:93:b8:
         23:56:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:33:33 2026 by rpki-client