Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9ed1551e-215f-387d-b217-24e5e90e137a.roa
File:                     9ed1551e-215f-387d-b217-24e5e90e137a.roa (raw, json)
Hash identifier:          6f9dGjwCSDZ3XHUuPbftewIHNS+MXx55I8FhC+Z3HRc=
Subject key identifier:   5B:CA:4F:12:58:B4:CA:73:73:F1:3B:EA:E2:3C:12:B7:76:28:3D:9B
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584F480D3B2A100DFDBDD7B40A00
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9ed1551e-215f-387d-b217-24e5e90e137a.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     25664
IP address blocks:        2607:cc80:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3b:2a:10:0d:fd:bd:d7:b4:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=2da28abb-b229-4fa4-ab76-ecea3ee08f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:db:e0:8a:cf:f7:a7:95:24:0e:2d:1e:70:
                    9a:b0:b4:51:2e:cb:7f:2e:dc:25:43:0c:7a:9f:de:
                    be:db:65:30:65:ff:5f:de:83:9c:e4:ca:f7:e9:53:
                    5b:b0:41:02:4d:de:e3:69:63:5d:3a:ed:ce:bd:f6:
                    20:68:b2:21:fb:3b:1d:26:5f:87:67:1d:3d:56:b0:
                    b4:fa:58:c1:03:82:28:c7:e9:1b:61:c1:af:fd:95:
                    80:36:c0:ff:98:ab:b5:d8:4c:e9:30:e5:76:b4:eb:
                    d9:f6:df:48:bf:f9:03:29:aa:9e:be:1c:82:e0:76:
                    99:3c:49:fe:7f:0d:9e:c0:ae:fa:a5:d6:e4:3f:e8:
                    b1:44:6c:a5:7c:86:61:45:f5:89:0e:1e:19:8d:44:
                    58:e1:55:2a:4a:20:38:1d:fc:a2:d3:7c:5d:bf:e9:
                    fa:a7:f8:fe:25:55:46:38:44:f4:c4:39:ae:f2:d1:
                    f5:4b:18:f3:f1:4f:d4:0c:c5:ce:8f:6f:58:be:39:
                    b7:13:79:81:84:f4:2b:8e:25:ed:94:d8:40:ad:e6:
                    a1:9d:a8:d0:81:80:ea:3b:c8:a2:e4:00:45:d0:9f:
                    56:09:2e:25:b9:70:9a:ef:0c:99:7e:14:70:27:f5:
                    ae:fc:94:8a:cf:81:a8:52:4e:07:fd:ce:97:cf:d6:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CA:4F:12:58:B4:CA:73:73:F1:3B:EA:E2:3C:12:B7:76:28:3D:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9ed1551e-215f-387d-b217-24e5e90e137a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:3000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:0e:05:91:d8:db:5a:44:13:8c:18:f2:25:86:f5:dc:46:
         25:8b:81:e2:83:aa:3f:d6:58:f5:a1:b0:94:c9:5b:88:20:ae:
         c2:dc:4a:a9:e1:9f:ba:f1:8d:61:37:60:5e:e7:e5:1b:b6:c9:
         6b:b0:99:0d:1a:40:63:8c:9b:dc:89:4d:68:25:b9:03:93:82:
         bf:c8:6b:e8:de:5c:39:62:70:c1:62:00:ef:ae:05:e9:b2:42:
         5b:fb:5d:53:67:07:4e:17:81:ca:21:be:7a:6d:d1:93:93:fd:
         9c:38:8b:70:b7:ef:82:28:fc:9d:cb:b0:42:12:66:d9:a1:9d:
         5a:85:00:73:26:6e:b9:99:d6:ce:d6:4c:61:9d:76:fb:de:80:
         11:56:a1:fe:37:b9:da:52:52:b6:7e:99:e7:30:3c:72:b4:b7:
         76:60:53:05:00:7b:9f:ae:c9:ea:7a:8c:b0:f6:3b:c1:0e:a2:
         71:07:5e:06:40:3b:f4:7f:33:06:e0:ca:38:e2:c1:27:d0:09:
         cf:75:1d:c1:4f:ac:e4:50:84:f9:98:d4:ad:53:4c:2a:c5:fc:
         35:37:c8:ba:bc:57:c5:97:b8:7d:06:e7:b2:47:61:fb:03:48:
         47:b6:d9:c0:ef:ca:fb:a7:8b:f6:1f:e5:dc:ec:db:2b:78:e6:
         e7:43:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:59:35 2026 by rpki-client