Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa
File:                     1c66c136-216a-334e-9397-93f9ed1f75ca.roa (raw, json)
Hash identifier:          Cw0pedI+4nPXDQZjM5FnB5VNNHcO/P4Akxn3bGwPlgo=
Subject key identifier:   EF:09:A0:AF:36:A1:8B:1D:01:8E:A0:AF:55:A6:99:7C:1D:AE:AE:FA
Certificate issuer:       /CN=31d2846b-36c4-41a9-86c2-a98e92bef162
Certificate serial:       010D0C9F4328584F454299B666C4E05162016380
Authority key identifier: D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     398757
IP address blocks:        2620:0:630::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:99:b6:66:c4:e0:51:62:01:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2846b-36c4-41a9-86c2-a98e92bef162
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=e61715bf-fa0a-4c2f-b6ee-dd1b39acc1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:e4:c0:3c:0f:46:a0:b5:1d:70:7b:14:dc:
                    b1:9a:e7:a7:e2:7a:ec:58:00:8a:ff:66:ec:62:a8:
                    94:2c:cd:d0:24:51:d8:b3:74:2a:9b:1a:78:11:14:
                    9f:0a:fe:5d:c1:93:b5:3b:cf:05:d7:28:75:d7:97:
                    2f:58:32:1b:6b:4c:06:2f:57:50:4e:f3:25:5b:1a:
                    77:31:1c:d4:58:ff:29:b6:ff:3b:98:c0:92:cd:18:
                    47:28:53:b4:95:26:c1:a0:3a:cb:4b:30:68:f1:18:
                    a2:46:97:a7:c5:f4:e9:82:da:28:60:3f:b8:a2:46:
                    a5:e0:e9:ff:e4:63:19:21:70:b7:e8:0c:3e:4e:3b:
                    b3:92:f0:c4:87:99:f1:93:28:9b:a1:6d:fe:79:e8:
                    d6:fd:09:17:1e:73:94:2e:dc:da:8d:3b:4d:8c:35:
                    00:a4:9b:a1:65:ca:fd:d6:c7:2a:ad:f6:ba:aa:cb:
                    64:ea:cd:a7:1e:9f:2b:e4:f0:fd:32:b7:9b:62:9e:
                    7b:71:bb:f0:a4:8b:70:59:c9:0f:a3:41:23:93:1b:
                    b8:4a:e8:84:a2:9c:9a:b4:dd:94:12:3e:87:4d:bc:
                    77:93:1c:b0:36:3b:f1:85:4b:85:63:72:3f:c2:8a:
                    e4:22:ac:c8:ba:d6:da:6f:b2:c4:37:78:0b:bf:df:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:09:A0:AF:36:A1:8B:1D:01:8E:A0:AF:55:A6:99:7C:1D:AE:AE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl

            X509v3 Authority Key Identifier:
                keyid:D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:630::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3a:ee:3e:97:62:32:8d:44:cc:11:2e:89:78:38:92:57:16:
         7b:a5:2a:04:c9:34:72:3c:95:53:c8:7a:7d:de:2c:77:f8:cc:
         0d:9a:7f:d3:bf:76:9e:d3:dc:b0:e0:3e:fa:e3:69:3b:f7:26:
         78:30:f8:d9:18:e1:b5:97:ca:93:2b:d4:b5:09:7e:1e:98:34:
         f0:49:e9:8b:c3:af:0d:59:19:a3:fa:20:fa:66:21:d0:43:c6:
         46:c4:7d:de:f0:9c:9d:1b:22:eb:6e:c6:a1:85:f4:b1:ca:e9:
         4c:63:db:55:62:db:09:89:bb:99:96:c5:54:a4:c0:8f:7f:37:
         29:c2:09:77:83:8f:28:08:69:28:cb:67:55:e2:41:f9:fa:16:
         50:86:56:da:99:4c:2a:11:fe:49:a7:41:68:18:f9:e2:4f:89:
         80:86:cc:a0:ae:24:ec:1d:68:a0:75:90:5a:cd:b1:53:0f:73:
         9e:65:7d:fc:31:48:21:0f:90:7d:42:c2:67:36:f4:22:c2:f5:
         95:ba:dc:f5:bc:1b:9c:c8:5f:73:54:76:2c:51:f2:07:89:4b:
         01:0b:2e:33:ef:8c:a0:21:f6:59:47:45:4b:0a:f4:03:47:75:
         99:db:28:65:d3:29:d8:a2:1f:21:45:13:dd:82:5a:72:6e:1e:
         50:3a:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:59:35 2026 by rpki-client