Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa
File:                     f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa (raw, json)
Hash identifier:          ZSSbJO8/0j6hN41nRSEB57eb+h1FiRQ+I3Sjx+E4KiA=
Subject key identifier:   F1:F0:21:15:5A:24:64:DF:CB:B4:4D:D1:D6:F3:1E:72:B6:63:B4:E2
Certificate issuer:       /CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
Certificate serial:       010D0C9F4328584EF9E220D5E8D1FAE5BC151F40
Authority key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     401736
IP address blocks:        2620:d7:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:20:d5:e8:d1:fa:e5:bc:15:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=e06e3026-de60-49aa-93ac-a2f80110349c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:27:06:9b:52:06:8b:5c:d7:27:6c:4d:dd:
                    ea:0c:91:a1:4e:93:20:21:3a:5e:65:83:1a:14:d4:
                    6a:4f:eb:6f:44:12:de:ad:74:d0:26:f0:9a:01:dd:
                    68:96:74:0f:48:d0:46:b7:e8:65:ec:06:c2:1b:95:
                    71:54:73:b8:f5:a3:f6:a1:4e:cf:3f:3e:56:c3:60:
                    7a:5a:15:2b:af:91:93:1f:ab:3a:5e:90:47:99:d7:
                    a5:84:2d:30:1d:0d:e7:b1:9f:1f:69:58:a0:63:f1:
                    6f:bb:d2:c6:86:b8:a8:9f:8f:ca:90:3e:02:83:1a:
                    df:ed:48:7d:e5:8c:4e:b7:30:dc:e4:28:82:c5:2b:
                    a8:dc:c9:22:7d:38:62:57:6f:a4:de:2a:c6:e5:cb:
                    99:b2:bb:b5:ad:a6:00:c5:b0:b2:2d:a8:08:8b:93:
                    e9:5c:41:d5:d1:86:2f:a8:e4:1b:1c:2a:ab:7e:dd:
                    6d:2a:34:e1:d8:1c:d8:53:66:de:48:25:dc:7d:f2:
                    7b:f8:69:0a:d0:e9:b2:ac:41:7e:49:53:cc:31:73:
                    0c:89:42:6a:dd:03:3b:34:c7:7e:35:17:06:71:db:
                    1c:ae:2d:33:7f:38:24:86:bc:84:aa:16:0b:f3:fb:
                    dd:0b:8b:b4:77:24:f7:d3:a4:1a:75:cb:3b:d1:d2:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F0:21:15:5A:24:64:DF:CB:B4:4D:D1:D6:F3:1E:72:B6:63:B4:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl

            X509v3 Authority Key Identifier:
                keyid:8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d7:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:2b:c4:23:a8:ac:ce:32:1a:d3:cb:6f:9b:1d:f2:06:7e:
         fa:78:9c:f6:26:bb:5b:ce:20:0b:c7:73:28:0a:a1:5e:eb:3b:
         4d:c2:b3:fa:22:28:64:61:a4:c7:8f:1a:ee:a5:dd:61:26:b6:
         95:7e:f4:e8:a4:ac:27:d4:65:6e:47:3f:d1:67:1a:8b:99:ef:
         45:c3:cf:d5:c7:07:bd:63:34:c1:02:43:49:63:e3:ba:0a:63:
         5e:80:0c:16:1e:83:26:e6:36:f4:35:66:18:d3:1b:56:68:e5:
         65:a8:a9:28:54:66:f1:02:ca:4f:ad:9a:ab:3e:57:e2:34:b2:
         6f:a8:59:b2:0b:17:41:af:8a:a1:a6:91:40:61:50:d7:58:4f:
         ad:72:56:f0:85:98:d3:76:b5:9d:cf:d6:58:c7:75:ca:55:d3:
         9e:59:1e:76:29:05:d0:91:c7:2f:41:43:77:74:38:0c:cc:e4:
         9a:b3:65:5a:2c:1a:fd:36:c5:61:4a:09:1d:c5:f5:65:62:3b:
         e5:a8:8a:c0:4b:38:4f:6d:9b:86:a5:36:3a:19:68:f1:7d:8d:
         dd:23:06:e3:e5:8d:dc:b5:8c:2b:e2:c6:0c:b2:0b:cf:7e:84:
         b9:7d:5b:8e:e8:c1:54:95:5c:d0:2d:1c:94:80:c0:71:53:a2:
         d7:1a:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:24:47 2026 by rpki-client