Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa
File:                     1aa1c3e9-41e8-3676-849a-c74654b10751.roa (raw, json)
Hash identifier:          Tr1Zcvhf+eVvD48gvVMPZ2qIC3mjbxx3wG8eXso8VKI=
Subject key identifier:   AD:88:FC:72:A0:F1:55:40:51:ED:8D:AB:B4:41:BC:52:89:45:3A:57
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584F480D3FB78F39AF8DB103C380
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     25664
IP address blocks:        2607:cc80:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3f:b7:8f:39:af:8d:b1:03:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=7dd9d96f-41ea-478a-8fb4-4176127328a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:f7:24:f8:d0:3c:99:24:1f:5b:d9:7f:78:
                    38:d1:88:25:c8:2e:64:ff:33:77:b2:3e:0e:e6:d8:
                    68:35:85:91:9c:f0:9c:03:6c:9c:da:26:1a:18:92:
                    bc:cf:af:b4:48:8b:28:8e:f3:66:2c:03:16:5d:00:
                    2a:4f:72:bf:e9:80:20:87:ee:10:73:bb:a8:92:56:
                    bc:67:7b:a8:c9:66:5e:01:a1:14:af:5f:d7:e6:99:
                    95:eb:c5:bf:62:d6:2c:de:25:67:e1:e4:be:60:83:
                    df:93:94:6e:37:f5:dd:15:02:23:c5:ac:c8:0a:84:
                    6e:39:47:dd:71:20:f3:86:e3:78:ae:66:ba:1c:c7:
                    b9:cd:bb:f6:e8:e6:8e:f4:ec:4c:ac:b2:34:1e:27:
                    ac:cf:01:60:17:40:ee:8d:a0:4b:ab:eb:c0:35:f1:
                    ce:33:f7:d8:6b:e9:fe:ed:c0:2d:29:2c:75:3c:ea:
                    8f:72:0b:25:8c:0c:42:b9:9a:42:3d:54:22:21:a0:
                    dc:5e:66:c9:20:af:32:62:12:3f:81:b8:0f:fd:25:
                    ee:1e:70:66:66:cf:74:c9:0a:80:88:fa:1c:f3:b1:
                    ba:7e:17:bf:84:1f:ae:3e:6b:0c:49:17:d3:ff:bf:
                    d5:4a:43:d8:15:64:f3:c8:d0:db:a4:e4:c3:63:91:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:88:FC:72:A0:F1:55:40:51:ED:8D:AB:B4:41:BC:52:89:45:3A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:87:34:d9:32:f6:b6:7d:a3:a4:db:8c:39:2e:db:3f:c2:
         c8:54:02:26:80:9c:0d:ed:91:f4:2d:e1:d7:b8:42:c8:cf:ce:
         b7:9c:2c:65:b4:17:10:05:ae:57:37:a5:40:4f:c3:c9:a5:f1:
         bf:f3:5a:29:e5:9d:4c:23:4b:55:50:d2:a4:9f:99:bd:48:72:
         e6:32:50:57:61:1a:97:20:f5:cb:10:18:0f:ba:23:b8:d1:7f:
         59:6e:83:f4:4d:ec:ce:1b:7d:60:a3:f9:74:06:0b:c1:07:b3:
         96:7f:98:6f:8e:36:ab:44:80:5a:40:ad:03:b5:dc:5b:c4:56:
         6e:57:be:b4:56:69:43:5c:1c:94:ab:be:fd:86:65:75:13:8f:
         83:9d:e2:f8:24:fd:42:a4:bd:84:ed:8e:e0:38:ae:17:56:c2:
         b1:b6:ab:76:ad:27:cc:07:88:bb:e4:34:2f:a9:b5:16:48:8c:
         45:74:f2:f0:ab:32:e6:8a:2c:6a:49:c9:11:fa:bc:17:71:65:
         20:0f:01:2a:c3:b0:ad:48:7f:5d:12:94:1b:f1:32:69:c2:6e:
         4c:61:5b:2d:85:dc:77:bb:52:b0:fe:46:2d:ce:b6:f1:76:6d:
         a4:a8:0f:ba:5d:31:2d:3a:a6:2a:18:72:b9:ba:69:b5:e3:0b:
         ea:ea:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:58:34 2026 by rpki-client