Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa
File:                     953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa (raw, json)
Hash identifier:          0WRLfj2I1v8FMmpzOGOyK0uMb7LiW9fMxAWYXybaJjc=
Subject key identifier:   B8:E3:26:7F:2A:66:FB:3F:89:D9:1E:CB:49:07:0D:79:33:D9:70:3F
Certificate issuer:       /CN=2123fd68-596c-4806-bd9e-91167a6dc6d4
Certificate serial:       010D0C9F4328584F454299F42F736D6828F928C0
Authority key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     401442
IP address blocks:        2604:ba0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:99:f4:2f:73:6d:68:28:f9:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=aaee823f-375b-4b82-b33d-2cf6acf715a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ad:14:c3:79:87:59:60:4a:e8:0e:2e:fa:1f:
                    f7:c5:81:68:80:2e:22:fc:39:a2:54:86:15:99:13:
                    7a:4f:c3:c7:38:a9:90:40:45:87:11:e2:39:cc:f9:
                    fc:54:92:d7:69:9e:5f:4a:93:ca:b5:1f:84:04:04:
                    46:b3:38:41:23:c1:09:8f:d8:cc:2d:f0:64:9a:99:
                    6f:e6:23:42:75:62:5c:58:bb:cb:bc:58:ba:80:a2:
                    27:dc:c7:e5:84:db:da:b2:7e:c4:18:77:e5:21:30:
                    ee:13:a8:0d:d2:0d:fa:ad:9b:4e:68:6e:0a:d4:22:
                    d6:48:cf:e1:f2:bb:ce:61:18:48:c9:74:0a:ac:5f:
                    51:95:20:6d:14:73:18:ae:00:2a:be:58:1f:a0:df:
                    b9:81:86:7f:f9:18:2a:18:4b:29:04:0c:51:cd:fc:
                    e1:82:49:b8:5d:a0:de:f9:f2:0e:82:cb:f8:ee:ba:
                    bb:5d:2c:0a:e5:07:c0:06:68:5d:ed:76:bb:76:ba:
                    2a:f6:df:89:cb:60:de:06:fe:bb:8e:e0:09:ec:90:
                    bd:59:28:b0:32:1c:7b:cd:aa:53:34:3c:b3:53:4c:
                    a1:de:55:84:b4:ea:e3:d6:4a:91:65:8c:33:52:39:
                    f3:33:a5:16:53:0b:97:b5:79:56:58:09:93:ab:2b:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E3:26:7F:2A:66:FB:3F:89:D9:1E:CB:49:07:0D:79:33:D9:70:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:43:2b:06:16:9f:fb:5e:6b:04:a3:d1:00:3b:dc:42:49:91:
         a8:32:7a:b0:42:fd:91:20:f1:b2:f3:4c:b3:82:50:a3:5f:9e:
         1f:d3:6c:57:f8:97:9b:b2:50:fa:91:f2:95:8a:15:7d:69:c7:
         fd:13:a1:27:29:67:61:69:b9:fd:ec:d9:be:9e:c6:92:40:35:
         2c:09:b6:5c:14:cf:3b:4a:4e:07:3e:89:82:32:6a:33:d5:86:
         b7:7d:3b:31:c7:c1:4e:e7:9c:ae:44:6c:66:87:12:99:a0:60:
         a9:04:54:62:74:55:88:b0:2a:52:a8:5d:fd:fb:3a:b0:1b:2d:
         73:00:b4:80:59:39:ce:75:bc:57:8b:ac:2e:7f:fb:cb:29:5f:
         2e:90:00:fc:0a:c3:e3:4b:dd:27:ed:4f:3a:24:1d:ba:65:d0:
         b2:75:58:c8:78:ad:d9:56:22:99:fc:a3:1a:3e:f5:53:c9:1b:
         4e:37:33:50:1b:2d:73:db:ef:60:b8:a8:4e:02:25:53:16:e6:
         89:91:67:1d:51:42:00:f7:8c:89:1a:a8:75:ab:d2:4c:16:c6:
         a7:e0:13:9f:75:ae:87:2e:52:26:3a:b4:e4:2c:c2:06:9a:85:
         ec:ac:07:a0:81:b0:2c:f1:65:e6:34:46:69:4a:6a:5a:a6:40:
         36:a7:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:47:09 2026 by rpki-client