Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa
File:                     998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa (raw, json)
Hash identifier:          rqAkXML+IAEVnetxboG8XzPvp7P2F9rdJbdN6waO2Ag=
Subject key identifier:   EC:E9:09:6F:4E:3B:19:DF:80:C1:96:B4:CB:8F:BF:F1:E9:65:6E:BF
Certificate issuer:       /CN=be206701-373a-467b-8de3-29a82f348469
Certificate serial:       010D0C9F4328584F4112B28AFDDE1A822F545080
Authority key identifier: 95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     62605
IP address blocks:        2607:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b2:8a:fd:de:1a:82:2f:54:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be206701-373a-467b-8de3-29a82f348469
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=07f2a2f9-d546-443b-9732-978c5f989cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:1f:cd:87:1f:42:84:12:ae:63:b6:a6:55:
                    66:48:a0:72:bf:de:8f:f5:54:20:4f:c6:83:91:f9:
                    b0:b3:4b:76:b1:11:03:4f:17:89:3a:65:13:9e:ed:
                    8e:23:4a:8b:1e:8f:32:cc:39:f0:83:9f:d4:86:9f:
                    6c:9f:62:f5:41:55:c1:df:a5:2e:60:01:4a:5c:7d:
                    70:71:5c:ea:08:1f:6a:16:41:0e:d4:c8:fc:f4:33:
                    c1:ca:05:5d:45:74:5b:bf:47:e4:af:59:c2:65:75:
                    91:cb:70:81:9d:59:f2:59:a5:bd:85:a5:cd:86:32:
                    e3:32:97:37:e1:d1:31:39:93:56:e3:6c:8c:a8:ec:
                    32:4e:3a:61:95:27:da:c6:90:6a:17:f1:88:5c:47:
                    b9:bd:43:c7:80:06:90:9a:fc:33:a8:13:36:f9:67:
                    f0:2b:7c:94:61:f8:11:9f:e4:b6:33:80:f3:c1:1b:
                    1a:93:3c:20:7c:b7:5b:b6:9e:e3:01:dd:aa:cb:f8:
                    ab:a2:61:88:da:d8:a1:3a:84:70:28:fe:5c:9e:87:
                    70:d6:96:76:39:ba:8f:59:96:7b:0c:14:48:02:86:
                    3b:64:44:f1:0c:4f:53:d9:46:8d:56:a1:ed:e3:11:
                    49:79:fd:7a:df:d1:fb:d3:ad:04:fb:ef:dd:14:90:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:09:6F:4E:3B:19:DF:80:C1:96:B4:CB:8F:BF:F1:E9:65:6E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.crl

            X509v3 Authority Key Identifier:
                keyid:95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b9:59:5f:9f:13:01:7b:33:9c:1d:66:58:b3:a7:39:2a:e9:
         33:68:88:b7:83:ec:b4:6c:1a:76:32:82:5e:fb:cf:c8:d0:3f:
         b0:07:e3:42:23:33:9c:4b:90:46:14:8a:c0:28:a9:95:f1:48:
         92:7f:c8:1d:cd:74:2f:ef:10:fa:f9:47:db:7d:8f:96:9f:ba:
         53:f2:32:9d:d3:f6:ff:6a:97:ce:d2:d8:be:e3:4a:ab:c3:d1:
         f1:f1:0d:00:57:b0:15:52:c3:78:1e:4e:f5:06:84:f0:3c:32:
         93:17:77:7c:3d:d4:7b:f3:9f:a0:81:b5:ed:34:ee:78:1b:58:
         32:6a:ea:e4:87:cf:12:16:da:51:aa:1a:58:f8:d7:75:ed:d7:
         eb:e8:b2:2b:08:70:84:32:78:b0:c5:78:24:87:f2:90:bf:ca:
         32:31:90:9d:7d:21:27:71:7c:c9:1b:af:e4:32:41:f4:fe:e2:
         19:51:78:7b:6a:ff:86:7d:e5:b3:a1:b0:1f:b7:14:d5:90:a4:
         96:7e:32:19:db:3f:1c:1b:de:e4:5d:fc:2e:92:07:cc:c2:ea:
         73:95:03:24:b0:f9:95:b2:33:04:49:c3:54:9c:08:b9:9a:7c:
         72:95:a3:7e:85:fa:ca:50:72:2f:f2:fe:21:c3:a1:0b:36:70:
         fc:18:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:22:19 2026 by rpki-client