Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa
File:                     7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa (raw, json)
Hash identifier:          laTqBfMjkl7ya4+R7Z7ajWyHI3mBYP6zTzkM6Dki0Ac=
Subject key identifier:   EA:6D:DF:70:2E:01:5E:90:13:A7:64:2B:01:6A:80:D6:B0:4E:31:9D
Certificate issuer:       /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
Certificate serial:       010D0C9F4328584EF01CCFAF4013451778A5CB00
Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2620:117:5077::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:cf:af:40:13:45:17:78:a5:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=bdb9037b-8269-485e-b1bd-10e46bf42682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:74:60:23:74:d7:09:5d:c4:2a:cd:da:d5:
                    77:00:c1:1f:e5:41:f8:ed:59:77:c6:f4:c2:69:69:
                    f9:eb:4c:d8:83:33:5b:71:5c:bf:81:9c:92:51:33:
                    e9:03:fe:c4:e7:e1:af:0f:db:9c:d7:69:f1:15:9e:
                    e9:f8:9b:c3:d1:46:bb:a2:4a:7d:7f:bd:01:b2:c0:
                    cf:5a:b0:61:f0:29:0a:a5:41:dc:d3:80:df:20:2f:
                    0a:c1:5b:6d:d0:50:59:19:42:ff:ed:d8:4e:22:f9:
                    6e:fa:7f:36:11:79:7d:44:3a:1e:84:cb:fe:2d:c6:
                    21:ab:92:41:e8:86:cc:db:07:d6:5f:b7:40:cc:ed:
                    6d:2a:34:13:5a:48:0c:8a:42:71:81:ee:ea:9f:6c:
                    92:c7:88:3b:ff:a2:52:9f:da:f4:8d:21:7e:3b:f2:
                    39:d3:ed:9d:0a:6e:0e:70:44:7c:4b:43:ad:1c:97:
                    16:a9:ea:a6:99:bf:0b:98:86:f2:f8:42:3b:f7:d9:
                    ac:35:2b:54:92:f9:e7:50:d6:cc:b7:fe:b9:5c:c1:
                    fe:65:fb:f6:ca:6d:4b:d5:a8:76:8a:ab:1f:4e:b8:
                    1d:7a:4a:dc:51:f6:58:f6:9e:20:22:66:2f:21:f3:
                    17:4e:16:0f:22:bd:66:19:f7:91:6c:53:59:2b:50:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6D:DF:70:2E:01:5E:90:13:A7:64:2B:01:6A:80:D6:B0:4E:31:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl

            X509v3 Authority Key Identifier:
                keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:5077::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c6:47:d2:bd:1c:05:89:a5:1e:f4:df:d6:41:2c:1e:f8:1f:
         55:e2:c5:39:b4:85:08:9b:f6:5d:e1:2e:86:ab:ad:6f:3e:f1:
         a2:a9:c0:5d:4d:d9:ee:1c:10:54:39:6e:c9:d0:9f:ca:ac:4b:
         94:b5:30:e4:14:47:ba:3b:45:9a:17:56:47:ee:b6:62:b0:8b:
         a3:16:be:8a:d2:4d:75:96:7e:09:62:02:d5:7e:3f:a0:08:6d:
         21:58:b7:76:c7:6f:e1:bc:ee:3f:38:43:73:a1:c3:b8:e3:e3:
         19:9b:72:d2:0d:fd:d6:b8:9b:1f:48:ff:21:71:57:63:25:a2:
         9f:e5:31:89:d2:7e:9d:a4:df:44:d7:f2:39:a5:16:e5:45:a9:
         b2:e1:a1:3d:d6:d4:4d:ad:e7:9d:e0:27:af:89:14:87:03:ca:
         c4:c6:3b:a0:a0:f8:bf:5b:6e:fc:b8:d1:a2:92:52:4a:dc:2f:
         f5:d4:4b:12:c3:f9:d6:89:5d:e4:e0:42:2f:92:c4:19:55:33:
         6e:1c:37:0d:4a:51:2a:ad:e4:b8:9b:17:bc:4e:9a:ad:d5:b0:
         cd:08:98:88:9d:c4:b2:61:22:08:4e:7a:6e:7e:20:97:6f:f0:
         d7:a6:83:a7:58:75:f0:58:c3:ae:fb:f0:7d:53:e0:b8:5f:b9:
         bc:f9:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:21:51 2026 by rpki-client