Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
File:                     1941cca8-631b-3a22-acab-d02a1b20a72c.roa (raw, json)
Hash identifier:          ww7ap4O+9yx/yAf2i9nDJZPlVTVHzXuMC+zdzuMmuGg=
Subject key identifier:   EA:17:59:E7:86:6A:8D:45:14:2C:8A:5A:23:E5:43:6B:64:AF:A4:CD
Certificate issuer:       /CN=a7bb872d-e597-498e-8bd5-d2efae320554
Certificate serial:       010D0C9F4328584F4973ED8565D4A11DC7FC6140
Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20473
IP address blocks:        2606:ed40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ed:85:65:d4:a1:1d:c7:fc:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ad1bc5ad-f2b5-43e7-a838-dd0fce8d95b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:d0:f7:06:cf:c2:0a:45:09:34:a2:dd:89:
                    04:8a:06:48:cf:95:b1:57:08:b8:54:68:9a:b3:c3:
                    0c:43:bf:25:7d:d8:b2:05:d9:4f:12:22:03:08:2b:
                    59:4b:d8:4a:d4:5a:ec:42:2f:ea:a6:b6:7e:1b:6b:
                    24:f1:0e:8a:82:2c:1b:bd:38:e1:a7:15:b9:3e:68:
                    f6:d7:16:25:e9:61:be:ed:41:ab:25:c4:81:07:3d:
                    18:78:3f:f7:61:fe:59:c9:53:86:b3:5e:a3:ce:5e:
                    c9:03:90:0a:4f:25:19:3c:8e:9e:19:c7:7a:92:b4:
                    09:45:0c:ee:0b:cf:c1:5f:d9:77:67:7f:33:46:62:
                    17:61:7b:25:86:e6:35:75:f5:11:a6:3c:11:fc:13:
                    d9:cd:1f:ac:0b:71:28:23:01:de:60:24:0e:fc:7c:
                    f6:7b:22:9c:46:30:db:20:00:5b:4b:8b:b0:e3:5c:
                    2a:b7:13:1f:37:1f:d4:2f:62:77:eb:83:d0:b1:05:
                    f7:3e:df:15:f2:f9:a2:69:bc:22:87:ec:31:6c:d6:
                    cb:9c:49:44:fd:35:81:76:ca:3a:1f:10:30:ff:ed:
                    be:fe:85:5c:6b:03:0c:3b:35:a7:7f:21:a0:52:f3:
                    0e:bc:e0:79:4a:41:bd:4d:ab:53:55:3c:46:8e:75:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:59:E7:86:6A:8D:45:14:2C:8A:5A:23:E5:43:6B:64:AF:A4:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl

            X509v3 Authority Key Identifier:
                keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:f2:4e:87:a0:f9:d9:a1:5e:e1:a0:0c:4c:35:56:05:33:
         2a:e7:e6:14:5b:fd:c8:09:e8:84:0d:37:4e:ad:f7:b0:80:45:
         6d:96:30:23:15:7b:82:26:6a:7b:96:e4:a1:31:2d:37:c9:1f:
         9f:de:f9:70:f9:ba:09:8e:8c:5a:25:5f:32:65:b8:e8:cc:4e:
         e0:c6:d4:a5:e7:d7:71:f0:d0:db:22:36:c2:40:6b:b4:dd:23:
         ea:a3:5f:df:f8:5f:bf:cb:98:75:f8:7c:9e:b9:db:09:25:96:
         ce:0b:59:a1:df:ef:68:84:81:ad:fe:29:bb:f0:e4:c8:d1:6f:
         33:2b:5c:79:1c:eb:43:bb:4c:92:f6:d5:e2:6e:6f:df:e0:5e:
         6b:b7:93:2e:f4:ff:cd:d6:d3:3e:95:74:1a:f4:12:b4:3c:79:
         6b:2c:5a:6d:0e:c8:16:5a:5c:04:6c:70:c5:b6:f6:dd:ae:96:
         75:d8:4f:4b:8e:00:82:07:aa:c0:66:ea:0f:55:f2:18:8f:85:
         52:72:c5:47:63:4f:ea:62:4b:37:17:35:3f:64:d3:bf:ac:b2:
         8f:71:a0:09:be:af:04:cb:1f:ab:54:80:ae:02:1a:10:19:56:
         3d:2b:fc:d4:7d:dc:dc:6c:f9:a6:61:0d:98:11:bf:9b:cb:80:
         56:0d:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:14:12 2026 by rpki-client