Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa
File:                     323e4eb5-73e4-3f1d-b613-2b7750199565.roa (raw, json)
Hash identifier:          6s6bTlZHjum9TsypjTx2IYTU9Af3Ly3O6xj2GdbQRDw=
Subject key identifier:   21:26:0B:A5:7D:07:E5:D9:B9:FA:AE:E7:9D:5E:A9:02:01:0F:55:C2
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584EDC91F0F7C0355CDFAA165200
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     30133
IP address blocks:        2001:500:67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f0:f7:c0:35:5c:df:aa:16:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=19dcf96b-0832-4f9e-9579-b4051cf3275a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:9c:ef:db:93:1b:09:2f:b5:8e:43:9f:4a:
                    10:48:81:cd:04:85:f2:a6:29:d9:cc:da:e2:31:b6:
                    95:0e:18:23:cc:58:ff:84:e4:24:c6:13:7e:2c:05:
                    43:df:91:e8:73:e9:d2:3c:f0:05:86:0c:9d:80:b8:
                    3f:8f:e7:c7:76:fe:a2:71:98:93:ba:49:02:9a:c4:
                    e9:0e:d3:ef:cc:58:c4:d5:f5:09:b3:d9:56:6a:36:
                    c5:8d:65:8c:ee:f5:0a:38:b1:be:d8:73:f4:e9:99:
                    f5:17:51:58:18:93:87:0e:9e:a9:5a:17:ba:1d:1d:
                    71:7e:56:c6:98:3c:a1:b9:5c:65:90:fa:dc:0d:9e:
                    35:53:16:38:f7:37:06:28:9d:e8:68:e4:4a:df:48:
                    89:db:91:49:aa:33:5d:bb:61:57:30:e9:a4:ce:43:
                    13:03:8e:5e:1a:0e:82:67:8c:9d:3c:0e:13:8f:18:
                    d7:29:0e:52:d7:9e:c3:3f:0f:fe:e5:ca:2e:f7:69:
                    06:5f:4d:66:b8:89:e9:99:81:bf:bd:83:b5:de:5b:
                    e4:29:7d:ce:6c:c2:11:ec:7b:01:a1:3f:c0:d0:11:
                    59:02:38:0c:87:db:01:8a:77:93:03:08:fe:e8:ef:
                    7e:97:2b:a0:4f:ab:53:2f:7f:ae:49:bf:a4:7c:2e:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:26:0B:A5:7D:07:E5:D9:B9:FA:AE:E7:9D:5E:A9:02:01:0F:55:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:bd:32:b9:0b:ae:2f:a7:24:3a:ef:91:cc:09:c2:31:1b:66:
         ee:95:f7:91:fd:c5:01:a3:53:10:3c:54:bd:2c:ba:53:6f:d9:
         77:79:dd:9b:99:a5:1a:eb:ab:c7:b6:5b:54:ac:1c:30:d0:b7:
         75:b3:fc:3c:54:b4:ef:9c:84:8b:fa:58:9c:03:ee:e8:76:be:
         98:e2:83:87:1d:61:b7:71:d4:72:fc:74:18:03:6a:ec:4a:26:
         89:e2:c3:b4:57:6b:d3:9f:e0:d0:f6:5c:bf:e8:6c:0e:18:1f:
         34:b4:53:7a:50:d3:9c:dd:ec:12:9d:b2:ef:87:66:19:f5:b3:
         c3:b9:3c:b0:da:85:19:07:bd:04:16:b0:52:8b:2b:26:fe:19:
         d6:58:f9:c3:42:58:b5:ca:94:a5:a0:f2:1c:32:56:02:e4:36:
         63:f5:c9:b5:87:af:89:fb:c5:53:1b:e3:57:9f:c1:fe:8b:d0:
         96:86:b2:ac:1e:ef:4e:2a:2b:4b:7a:05:c0:50:fd:6b:fb:34:
         10:23:6e:18:7c:9d:fa:0e:4b:8e:d2:dc:7d:e0:6e:7f:d0:64:
         25:0f:1c:35:e4:ec:b6:fd:57:19:46:bc:52:8b:91:84:b1:5d:
         8f:6a:78:7e:f1:e3:4c:fe:35:22:7c:36:ce:8d:3b:80:0d:29:
         a9:13:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:22:41 2026 by rpki-client