Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/55442329-f8b5-3864-acb0-933e74bc52e4.roa
File:                     55442329-f8b5-3864-acb0-933e74bc52e4.roa (raw, json)
Hash identifier:          PHdpcKaDlGf7MX8ZixGUxXI3+Qt/BfPkiWwym58uKI8=
Subject key identifier:   99:14:4B:11:DD:EE:9B:61:20:B3:82:54:BA:F5:54:29:11:E7:AD:45
Certificate issuer:       /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
Certificate serial:       010D0C9F4328584F498A02D4264B78BF1363F180
Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/55442329-f8b5-3864-acb0-933e74bc52e4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401595
IP address blocks:        2604:d0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:02:d4:26:4b:78:bf:13:63:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4de9ce5b-56d9-4ee6-a5da-3d7cc495ed66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:da:0d:40:2a:70:40:01:c2:93:aa:b1:7b:88:
                    26:d7:83:d5:07:74:aa:f5:bf:30:b6:97:72:e1:8e:
                    4e:f7:7f:ec:ca:8a:2b:7d:9b:00:0e:9c:1e:91:b8:
                    60:c8:d0:80:3b:58:7a:eb:a4:5d:15:58:56:77:2b:
                    b9:ad:d5:fe:1d:23:5b:4c:c4:6e:b3:7b:33:8d:e1:
                    41:df:8d:5e:0b:b8:e4:88:38:fa:33:4d:60:fa:41:
                    c9:66:79:2d:65:04:0e:50:5c:56:c3:18:2e:0c:ef:
                    eb:92:d8:44:b1:41:0f:8f:4c:45:24:e8:cf:8d:31:
                    39:35:cf:ab:9a:ce:2f:11:7e:1b:c8:c0:29:bc:ac:
                    f4:69:3a:1c:08:59:b9:68:e0:80:06:66:39:44:a5:
                    c2:af:4d:66:9b:93:c9:b6:7d:4a:bf:19:1d:8a:fa:
                    2c:f0:bd:cc:eb:f9:48:3c:b2:49:8f:eb:f9:89:1b:
                    6c:ae:71:67:a4:6e:b7:8c:66:ad:5e:16:c7:0e:5d:
                    ea:c1:56:b3:48:25:db:39:c7:e4:a6:c3:40:f7:dd:
                    d8:79:ae:58:67:0c:8b:6a:e6:cd:c0:8e:96:65:c0:
                    fd:60:23:91:54:27:08:a6:c9:22:56:b2:f3:7f:f3:
                    91:cd:86:86:cc:5b:fc:05:4a:6e:1c:ca:9f:eb:4d:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:14:4B:11:DD:EE:9B:61:20:B3:82:54:BA:F5:54:29:11:E7:AD:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/55442329-f8b5-3864-acb0-933e74bc52e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:73:6f:93:45:11:7f:fe:08:d2:aa:03:f7:c5:81:76:f3:58:
         47:23:14:09:b6:9c:67:c9:c7:b6:fd:44:82:74:0e:38:df:6d:
         1c:6d:b3:d4:92:96:e3:ed:7d:a1:44:d1:c7:9e:8f:64:32:27:
         dd:ac:67:17:30:94:1f:d9:ab:17:82:8c:d7:f5:a2:26:b7:87:
         6e:23:87:8c:87:01:b7:1e:a1:99:d1:83:da:2e:2b:45:53:48:
         25:52:7c:cc:fa:0b:3c:42:50:d7:01:3c:16:e4:3f:b7:c0:f9:
         48:3e:72:e8:91:c7:0d:5d:3e:4f:33:01:8c:53:32:2e:ac:17:
         41:47:63:7b:bf:b8:60:b2:a6:cd:1a:ea:34:53:60:44:1d:9b:
         7d:93:5b:bd:80:5d:6f:10:b7:65:36:5e:c3:82:ec:03:24:59:
         f7:40:5a:7f:84:33:86:a9:e3:9c:f3:da:3e:05:85:7c:58:72:
         6d:88:52:32:48:6e:3c:2e:a0:0d:b6:ed:0c:89:f4:6a:d0:e6:
         c1:88:10:73:07:bd:0a:6e:81:93:74:ae:10:f4:d1:ad:bb:0d:
         98:68:4e:c0:2c:3f:b2:c8:2d:10:15:f6:ce:ce:43:29:88:51:
         e5:11:18:bd:b7:fd:18:cd:5d:0e:ec:4a:fc:20:8b:19:f6:c5:
         c4:f0:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:48:07 2026 by rpki-client