Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/3e07209e-7971-3527-927a-54e54b174470.roa
File:                     3e07209e-7971-3527-927a-54e54b174470.roa (raw, json)
Hash identifier:          NSoN6gDRXQ2oL0Lb6w9X3ObJRIl2m6L6TiiiOdT38s0=
Subject key identifier:   9F:E9:5D:1D:B7:EA:6C:37:7B:99:81:98:D3:6A:32:36:0C:6C:19:C3
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F4328584F4973BFD47FCC35AB846DE8C0
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/3e07209e-7971-3527-927a-54e54b174470.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26677
IP address blocks:        2607:fd78::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:bf:d4:7f:cc:35:ab:84:6d:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b6528487-1c7c-4ad3-9f72-6e044bc988c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:c9:cb:c0:ad:cd:9b:58:94:02:25:49:eb:
                    de:36:06:fe:09:ac:c2:b9:63:61:f5:49:23:ea:d1:
                    ad:d6:41:75:b0:da:04:11:9b:33:3e:8d:fd:c0:69:
                    10:b8:53:b9:d0:c7:93:30:74:c2:4d:fe:92:66:f0:
                    05:c4:98:63:81:96:74:d0:9b:6e:88:c6:f1:b4:7d:
                    9d:bf:cc:60:e2:62:36:5a:e6:f4:89:f7:0e:d8:84:
                    f2:0c:db:63:67:c0:a6:5b:15:24:f1:a7:31:01:a5:
                    75:ee:f6:2f:6d:95:5d:62:b2:70:ce:f9:0e:67:41:
                    de:ac:dc:d7:b8:0e:6a:71:5a:f5:6b:f6:15:6a:8c:
                    c2:db:29:a9:61:a6:d3:37:6a:1c:7b:de:88:ab:97:
                    32:e1:93:31:ae:80:a0:18:13:fb:fc:bd:38:37:71:
                    a4:db:91:c7:3e:02:cf:61:56:7d:7d:ce:8c:91:32:
                    5a:97:cc:12:e0:4a:02:37:3b:f1:b9:8c:75:36:60:
                    b1:2d:10:2f:d4:d2:3e:91:0d:9b:b9:8a:ec:bb:ac:
                    10:10:14:33:ae:7d:eb:54:11:21:f1:b5:63:11:9b:
                    23:12:ae:07:8a:01:44:65:97:cc:33:9d:bf:d4:79:
                    fd:05:61:81:33:53:e7:12:2e:95:50:56:8c:76:b8:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:5D:1D:B7:EA:6C:37:7B:99:81:98:D3:6A:32:36:0C:6C:19:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/3e07209e-7971-3527-927a-54e54b174470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fd78::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:64:3b:59:db:fa:90:86:51:0b:70:db:95:af:08:d8:23:
         6f:16:82:c3:d1:c6:8a:e4:25:c5:76:2d:b0:8e:97:4a:ab:25:
         9b:54:c8:36:b5:6f:d1:19:bf:40:6c:71:20:f4:f9:57:91:e5:
         dd:a7:5e:bd:bc:14:d9:d1:81:47:f6:c5:13:cf:cf:1b:56:d4:
         72:61:0c:fd:bf:e8:b6:01:8a:01:6a:5a:11:88:24:1c:72:71:
         01:e1:b2:7e:23:b6:5a:de:60:3f:2a:2b:0a:e3:21:58:9f:a2:
         5a:ea:69:54:e8:4e:e6:a0:2b:4c:cb:41:a8:52:fd:87:17:50:
         2a:aa:85:a3:84:40:61:1a:65:02:9f:8e:19:c2:18:be:5d:83:
         f1:d8:79:6b:5d:89:41:a4:4a:2c:cd:3a:d9:ab:0a:03:3f:bf:
         4a:4a:25:4c:ba:c4:99:07:90:52:b3:15:8d:b7:b2:26:6a:53:
         48:2f:20:8a:56:ef:f2:f1:2d:d2:37:02:71:06:07:8b:28:d0:
         fe:3b:72:68:20:ab:b9:33:de:b2:03:4b:b9:eb:17:00:c0:af:
         4e:7f:84:f2:99:fe:38:6e:f2:3d:c8:76:f6:49:87:d2:cb:bc:
         bb:85:99:70:e1:3a:81:7d:7c:bd:c1:3f:ce:13:ac:cb:5e:4e:
         cb:e9:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:34:32 2026 by rpki-client