Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa
File:                     1df56742-c777-32ef-bcab-01b39d58ce20.roa (raw, json)
Hash identifier:          oeUjHO2ib4pUxAtAjJ/abPh5i1NYprGpMWCqylZUzvI=
Subject key identifier:   FF:B4:DE:35:84:58:56:14:CB:A9:CF:B2:5D:3E:0D:9D:F6:60:71:FB
Certificate issuer:       /CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
Certificate serial:       010D0C9F4328584F4973D0EE7DA1C1948DCD78D0
Authority key identifier: F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401307
IP address blocks:        2620:118:c000::/42 maxlen: 48
                          2620:118:c080::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d0:ee:7d:a1:c1:94:8d:cd:78:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=720b38d7-1437-4c3f-a807-3b1d0ac4cd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:24:bb:61:ac:63:b6:0f:ee:88:13:b2:6d:
                    4f:7a:cb:00:77:e6:f7:09:9e:ac:4b:86:2d:3d:ac:
                    e8:6c:37:11:d6:8c:2f:71:53:09:d8:95:70:9b:bc:
                    e5:91:44:6d:e4:f6:d5:c8:9e:18:40:e4:36:1e:bc:
                    e5:1d:3a:18:0d:1f:7a:b4:5d:66:d0:93:5f:1b:f7:
                    7e:5b:37:01:63:ff:b0:77:37:d0:a2:2d:58:89:0e:
                    6c:25:98:74:1e:1f:c0:a5:c0:99:70:89:aa:15:cd:
                    a0:8f:2b:34:05:b4:dc:b2:ed:19:c4:ef:2d:a8:eb:
                    b8:a4:0b:28:c6:f5:dd:cc:ba:c8:77:19:dd:6a:a7:
                    e9:bd:62:5a:7b:02:89:81:62:db:88:8a:4f:fb:97:
                    bd:c9:8d:6d:41:8f:c8:c9:73:2f:c8:b2:bb:43:c1:
                    b8:df:55:e1:a9:49:5b:bb:87:24:98:94:fe:2f:b3:
                    11:f0:64:80:0e:f2:07:e2:51:e8:cc:27:72:6d:74:
                    05:23:dc:83:47:71:8d:be:c3:07:35:50:88:dd:83:
                    0b:ab:d2:43:5b:9e:32:8c:4b:3c:cf:1f:60:41:ee:
                    57:64:6e:34:86:1c:4d:e4:90:77:6a:44:05:85:2b:
                    4e:2e:1a:60:a7:f2:d7:21:cd:f2:6e:bf:cf:ab:26:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B4:DE:35:84:58:56:14:CB:A9:CF:B2:5D:3E:0D:9D:F6:60:71:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl

            X509v3 Authority Key Identifier:
                keyid:F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:118:c000::/42
                  2620:118:c080::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:b9:b1:01:5e:f6:10:52:1c:77:f8:53:33:0d:f0:a5:1a:
         bd:f1:72:bc:06:88:cb:0e:ef:7f:04:79:d5:f9:b7:34:c5:5f:
         84:b4:77:65:1c:87:ea:6a:7d:77:48:25:7d:f3:96:3c:f1:5c:
         ab:ab:f7:1d:51:84:8b:6d:9d:f6:6d:93:28:49:66:a3:3f:d2:
         11:67:b8:61:d0:b0:e8:04:27:ed:6e:50:22:9e:db:a5:ca:e1:
         98:ce:15:8e:93:62:71:70:7c:33:1f:fb:9b:0d:0e:5e:83:42:
         1f:e4:a2:6d:57:8d:0f:6e:83:f3:e7:09:c6:e5:37:c0:ce:8d:
         fe:a9:7f:44:04:b3:2f:09:9e:47:d6:dd:f8:ea:60:4c:0e:7d:
         fb:93:01:d4:09:28:3d:61:9c:d6:e5:79:7a:58:92:79:db:ad:
         e3:e6:36:1c:a8:56:5b:69:60:ab:a1:d0:14:bc:60:bd:bd:18:
         70:d5:40:0d:76:f4:21:57:38:0c:9e:02:a1:1e:6f:57:27:64:
         61:db:ff:5f:cc:8b:6e:e9:01:33:ac:2e:94:be:74:b1:e0:ab:
         50:e2:2d:e1:93:82:82:a0:1c:c8:b8:eb:97:ef:84:5e:61:8d:
         b6:28:49:85:4c:1c:d3:15:7e:6f:20:b7:cd:a8:fb:13:30:08:
         da:47:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:22:40 2026 by rpki-client