Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa
File:                     94457b64-2815-3821-9ce4-67d95b994827.roa (raw, json)
Hash identifier:          JQ8OO0leCVpwuL12jEDrdqJXhv7KiH5EBX2AiQdfnkM=
Subject key identifier:   2F:6D:EF:0E:96:99:F3:1A:FB:01:5E:6B:30:7E:00:AF:53:09:ED:42
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F4328584F498548346DE8997849FCCA00
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        2620:33:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:48:34:6d:e8:99:78:49:fc:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=26811b18-fa3a-4d23-82b4-d0bcfa43c7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:38:e4:ff:58:9d:83:2a:d0:3d:d3:19:8d:
                    e4:5c:6e:42:77:6a:cd:a1:e9:89:1f:c4:b1:7d:ea:
                    2f:7e:b2:5b:2e:30:d7:f9:a6:cb:81:d2:42:c9:e5:
                    00:ae:aa:d5:42:ef:39:12:74:d9:0a:b3:d8:8c:ad:
                    db:3c:79:b4:06:e6:e0:c2:79:12:19:aa:75:aa:a6:
                    5b:35:c0:43:b3:7b:7f:23:50:3f:15:8a:c4:fc:c2:
                    c0:ad:93:ee:af:c0:e5:86:7c:c4:4d:0e:dd:2a:d9:
                    ed:68:90:b8:d7:83:50:17:22:19:a7:79:22:3c:a5:
                    6e:96:bc:74:74:9f:e8:e1:c3:93:f7:6d:1b:94:a5:
                    aa:11:48:ac:71:42:fd:17:cd:e5:6e:c8:af:5d:a1:
                    b5:67:78:be:2e:58:f8:a5:21:12:3a:c3:ec:f0:43:
                    60:c9:48:0b:e5:58:83:28:13:8d:36:31:e0:49:9c:
                    d3:b7:de:54:9b:42:d1:ad:69:a0:4b:c6:fd:f4:b2:
                    2a:28:ff:c6:d7:5d:0e:48:5b:4c:2f:67:0f:c2:7b:
                    40:34:87:a4:c1:c1:bd:3b:9f:4a:b7:14:20:ff:b7:
                    30:ec:56:f0:9b:47:22:f3:43:57:90:95:0b:3a:44:
                    10:ac:d3:90:98:a4:03:11:2c:35:1a:c5:86:68:6a:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6D:EF:0E:96:99:F3:1A:FB:01:5E:6B:30:7E:00:AF:53:09:ED:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:33:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:8a:0c:74:e1:8a:c6:4d:eb:7d:37:d5:c6:be:9c:90:51:
         e1:68:e0:23:cc:04:21:5e:8d:b5:48:6a:fb:4e:13:96:73:8e:
         25:fc:ff:4f:66:6d:18:6a:45:f3:a0:4f:76:a5:7c:c0:e0:43:
         c1:b1:0b:72:f3:25:6b:1e:17:94:ed:66:38:f8:af:f0:cf:0c:
         21:32:3a:e4:45:9f:82:73:01:6b:1a:6c:4e:a4:43:30:65:b6:
         b4:9f:d6:65:f1:6f:ee:62:4a:b7:dc:e4:52:ae:dd:1c:6b:55:
         19:98:9d:62:54:09:0a:8a:b9:0d:0b:42:9f:dd:08:3b:78:88:
         62:8e:f2:bf:ef:87:2f:2d:70:a6:18:71:49:d5:8b:a8:69:80:
         8c:89:d3:3a:93:c7:69:0a:a6:fe:8d:f0:32:22:21:0a:d2:82:
         84:17:5d:cc:9e:f5:49:20:20:2b:f4:4a:1e:ae:89:9e:c3:04:
         65:76:e2:4f:1f:4d:c7:e3:68:27:85:32:73:40:a7:fe:05:41:
         25:b4:7e:08:30:58:d1:f8:4b:dd:f7:43:95:49:ef:8f:6c:6f:
         b0:af:9d:32:d5:b9:04:11:87:8f:08:d5:78:62:e9:f9:fd:d0:
         89:33:cf:1c:b4:a2:87:11:d7:e3:fc:0d:f0:0b:66:4d:cf:58:
         21:c4:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:32:28 2026 by rpki-client