Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/cc2fa242-341f-32cc-b8ed-d7f93ec078a4.roa
File:                     cc2fa242-341f-32cc-b8ed-d7f93ec078a4.roa (raw, json)
Hash identifier:          iVyTSAytV50WRXzICq0p2pTwQNM77zSs6OmjnRv3FIo=
Subject key identifier:   FC:2C:9B:AB:55:2C:81:1F:71:3A:71:3C:F6:E1:1B:F2:B1:E7:71:30
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584F4973CE403233C070EBBBD1E0
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/cc2fa242-341f-32cc-b8ed-d7f93ec078a4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2152
IP address blocks:        2607:cc80:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ce:40:32:33:c0:70:eb:bb:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b48f8a02-e91e-4908-849f-7a190bff66d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:46:2b:e0:81:fe:8d:8c:c8:d5:e9:aa:01:
                    c7:66:a3:3a:5c:1f:6c:32:a0:68:eb:32:ca:0d:77:
                    97:99:c0:fc:8c:bc:0e:ee:ab:64:f0:33:42:d7:6c:
                    7b:c0:c4:9f:1b:54:42:8d:d3:73:08:fd:93:85:f6:
                    80:76:46:5f:2a:da:64:e2:c3:ab:e5:3b:c9:74:67:
                    50:be:45:6f:57:06:43:ac:81:81:36:cd:ff:3c:a8:
                    da:29:98:b7:84:b3:7f:8c:6b:16:56:47:32:ab:3a:
                    13:39:2a:ec:1c:de:51:a1:90:24:9f:3c:2f:98:82:
                    42:e2:23:4e:eb:36:cc:8e:be:3d:cc:fd:b0:24:82:
                    63:5b:e8:f0:d0:20:9b:96:c8:bf:aa:6f:a5:41:cd:
                    12:32:fa:e4:32:ed:c1:6f:f0:fb:d8:60:4f:a6:4b:
                    d8:a6:c5:aa:c8:21:e2:75:b6:f8:40:50:66:4f:64:
                    e4:ad:2a:90:ca:61:e9:54:ba:a6:fa:ba:2f:04:37:
                    03:ff:14:e9:80:b8:31:54:22:fb:c0:5e:4e:e9:cd:
                    5d:98:27:66:04:74:08:2d:24:ac:87:d7:48:f7:15:
                    3e:91:50:57:3a:1c:e9:75:da:84:81:2d:8b:b7:15:
                    63:a0:7a:8a:57:89:60:e1:ec:4c:a6:6c:27:3a:a2:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2C:9B:AB:55:2C:81:1F:71:3A:71:3C:F6:E1:1B:F2:B1:E7:71:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/cc2fa242-341f-32cc-b8ed-d7f93ec078a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:6c:35:ca:d7:57:aa:b9:82:9b:e4:68:74:09:df:f8:f8:
         3f:12:16:2a:63:97:73:6f:4e:8e:9b:da:3d:89:e9:c1:32:e6:
         d4:54:dd:43:de:ff:b9:23:7b:2c:ae:a2:70:cd:fb:01:b4:90:
         0b:49:ef:3a:9b:fd:e0:f6:e2:2f:5a:4d:f6:a1:b7:b4:8a:11:
         6b:49:9a:2d:e8:23:46:b9:95:e2:f4:a7:49:69:bf:7c:6a:d9:
         d2:31:69:26:6a:a0:6f:7b:99:87:7e:2f:2c:c4:d7:45:48:97:
         13:7a:98:be:47:b9:81:4c:65:a5:4a:35:38:d5:15:09:4c:8a:
         48:c1:ee:7b:fe:84:b9:72:b1:55:a6:fd:2e:97:0f:ce:f8:60:
         89:88:86:e0:d9:ab:e0:e2:f8:47:1b:2b:21:32:6c:af:71:57:
         db:d7:c7:76:d9:21:bc:1a:81:5d:d4:29:11:d4:9b:f8:06:f8:
         16:6a:a2:41:6c:12:dc:c5:c6:72:c7:89:78:5e:ac:cd:ea:5b:
         2e:17:82:02:fc:3e:68:f5:1e:c9:bf:59:c6:fa:8c:0f:aa:be:
         aa:6d:17:47:60:42:89:24:ce:da:84:6a:2c:51:16:bd:e6:ce:
         7c:ab:5e:ec:d6:b5:6e:d1:f9:65:7e:6d:ac:26:28:e1:71:e4:
         b0:ac:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:35:42 2026 by rpki-client