Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa
File:                     7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa (raw, json)
Hash identifier:          IG6PGKIStnuuJMHl0zYWKAcpeDky+DKr+PNv3WXpIEI=
Subject key identifier:   25:93:8A:D2:3A:9D:1A:4A:C6:E9:FA:FC:F7:1F:4C:F2:27:87:78:2E
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584F5768125C75BFF1FBEF2AF2C0
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     4473
IP address blocks:        2607:9bc0:1030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:12:5c:75:bf:f1:fb:ef:2a:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=4c5415fc-cb5a-4387-be44-35db813c3690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:c0:6d:91:a8:2b:36:36:c8:0a:7c:94:ed:
                    79:37:eb:80:85:6f:49:19:22:05:b5:3d:b2:f3:d1:
                    97:c3:3d:16:09:98:7d:d2:46:47:e0:22:a1:37:26:
                    ab:6e:ea:a5:01:da:75:b8:f5:75:f7:97:77:9b:b9:
                    e2:76:7a:19:76:b1:b7:7c:cd:5b:5d:50:25:fd:d4:
                    00:1a:23:28:8e:ab:73:ff:80:a2:e8:8d:28:8f:f9:
                    0f:07:47:64:e3:09:a1:5f:f6:a4:dd:41:f8:08:e6:
                    d1:db:a7:80:99:ee:c4:6c:63:bb:6f:aa:f0:c0:40:
                    4a:ae:0d:66:64:e7:0d:b8:42:4f:46:70:e1:ed:0b:
                    c4:81:e9:39:82:a0:77:39:75:04:78:b6:02:57:9f:
                    47:b5:e5:51:32:50:18:f4:f0:84:61:54:bb:65:28:
                    7b:e3:33:b5:98:4d:d0:db:d5:4a:6e:8d:7e:d8:72:
                    75:2e:37:0d:85:bf:f2:b6:06:2c:4c:55:4a:40:34:
                    1b:9e:28:25:8f:03:e6:c1:f9:9e:d6:d7:b2:a5:87:
                    be:0e:1b:2e:6c:87:a6:b8:2a:21:f7:5a:24:6b:90:
                    79:9b:2f:dd:e8:cd:e9:bf:44:50:99:42:f4:8e:b3:
                    ab:1a:ae:8d:88:24:93:48:d1:9b:29:c2:32:3d:9b:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:8A:D2:3A:9D:1A:4A:C6:E9:FA:FC:F7:1F:4C:F2:27:87:78:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a3:ff:ec:f0:2d:d4:21:c4:0e:ec:f6:91:fd:01:7c:d7:de:
         d5:a9:0f:be:9e:98:e2:90:8b:24:c9:09:57:11:83:76:61:c8:
         7c:96:45:66:15:16:67:08:30:bb:8c:4a:dd:94:22:b4:41:12:
         c3:29:68:06:8e:fd:d0:fe:f9:13:40:62:c9:c6:5a:fb:3c:ba:
         26:1d:1f:90:a5:87:ac:69:69:35:ca:a0:41:68:ae:ca:6a:59:
         cc:00:30:f9:73:f5:02:c3:7a:2f:de:1c:79:e4:c3:21:98:5c:
         10:54:ac:b4:d5:d3:08:fa:09:75:51:59:9e:f0:b8:2f:4a:cd:
         35:b6:06:6c:96:ca:30:b3:a3:31:73:d4:b3:a5:bb:ac:58:99:
         ec:3e:4b:e2:4f:bc:0e:bf:d3:6d:b1:60:97:7e:ed:fa:e0:a3:
         0d:4e:43:98:cc:0f:e2:7b:66:08:b1:f7:f4:6f:58:b0:c8:c4:
         6f:9a:31:5d:4c:67:22:9b:25:84:ed:66:6b:a6:6e:af:a7:c4:
         e7:2e:80:cd:cb:b2:a4:f1:1f:89:c1:08:59:f6:aa:83:6f:12:
         0b:10:fa:ac:36:34:7d:f9:78:3b:1c:6a:bc:45:95:32:63:c9:
         17:36:93:fd:aa:72:81:3b:77:2d:f7:55:83:23:2e:3b:96:54:
         42:65:7e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:31 2026 by rpki-client