Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1157c451-e3b1-37b1-96f8-02d9b827bfc4.roa
File:                     1157c451-e3b1-37b1-96f8-02d9b827bfc4.roa (raw, json)
Hash identifier:          QPIMDkfWViuQRKouWLCJL9YmCeti2q/BIWoLkr4kU94=
Subject key identifier:   9E:6A:6C:09:4E:8D:2A:AD:02:47:5A:1D:34:91:D3:3D:9F:C7:4A:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F49845D2EC92FF84282683800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1157c451-e3b1-37b1-96f8-02d9b827bfc4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1407:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:5d:2e:c9:2f:f8:42:82:68:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ba90501d-4c0a-4604-a4ba-1c7995b86e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:ec:c7:95:b9:ec:f9:2d:ca:04:59:f3:2e:
                    4c:61:d1:bc:e3:00:c1:04:fe:90:f8:e5:89:56:e6:
                    a3:dc:cc:e9:e6:9b:66:f2:de:6b:26:eb:45:8a:ea:
                    33:b7:b3:b8:2c:ce:51:db:b1:a2:2c:6b:05:05:68:
                    87:97:18:89:8d:38:fc:db:56:49:a9:ba:05:c3:d4:
                    03:fc:bf:7d:3a:6f:fb:77:8f:d8:a1:a9:bc:03:52:
                    32:b5:b2:ec:4d:1c:d0:e7:90:84:c7:9a:e6:42:bc:
                    95:48:8a:0e:00:09:7c:2b:13:9a:d1:fb:c2:ef:02:
                    40:c0:d2:a2:1e:cb:2b:ce:44:8c:de:88:9a:99:17:
                    39:2d:38:82:69:0f:d5:b5:fd:08:50:d3:76:9e:a5:
                    25:2e:6c:45:d1:31:1e:36:c3:4c:a3:2f:b1:d9:f7:
                    00:c9:db:f3:32:cb:32:75:f3:8f:7b:aa:72:31:01:
                    90:89:ee:e9:65:51:8e:d8:f7:d3:64:66:fe:d8:9e:
                    13:d2:60:7d:45:c4:af:55:01:54:6d:3b:4d:64:b0:
                    dd:6e:c0:7e:ff:8d:9b:a5:73:5e:a1:5d:49:54:cb:
                    5a:62:41:e7:1d:c8:06:e4:a1:4a:25:cb:cc:ab:6b:
                    29:ff:9a:da:b2:ac:0b:4d:8c:c6:84:e7:0d:5f:66:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6A:6C:09:4E:8D:2A:AD:02:47:5A:1D:34:91:D3:3D:9F:C7:4A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1157c451-e3b1-37b1-96f8-02d9b827bfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:e800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:ea:db:96:49:14:47:9f:7b:ba:80:dc:80:bc:8f:a5:df:
         03:f7:5a:4b:22:7f:7c:49:ca:71:12:22:0e:df:67:14:06:bc:
         7b:c9:f0:70:cc:12:99:f7:91:32:67:1a:bf:7b:51:c7:65:3e:
         07:fd:67:a4:aa:ec:4f:26:be:1e:1b:62:bf:ac:5e:71:d7:1f:
         25:ea:37:b9:8b:d3:9c:1d:18:3e:52:e8:90:75:34:bd:97:0c:
         c5:b5:10:c8:a9:49:88:18:2f:7b:69:2a:e6:48:f6:ab:c1:75:
         28:37:35:90:d2:7b:8d:5b:8e:b9:3d:c8:89:b3:e0:56:f5:2a:
         a1:be:d7:f7:59:b9:18:4d:56:c6:0e:1d:0f:47:96:6c:ce:1f:
         82:de:a5:5f:04:2d:77:77:58:a0:e4:ad:1c:41:12:19:62:bf:
         55:f9:31:2a:2a:ba:51:5d:83:91:71:95:a0:93:96:28:f1:11:
         42:87:3a:2f:63:5e:ae:dd:56:10:e7:54:0b:29:1f:ef:9e:64:
         0d:bf:88:d7:8c:b7:4f:d5:cd:5f:70:b3:d7:5a:cc:37:f1:fc:
         37:94:67:f7:6f:3d:4b:d3:ea:a5:55:db:30:ec:4d:7d:e6:b0:
         11:cd:91:8c:6f:15:b8:ad:59:fb:4d:17:b0:fa:6e:09:f1:80:
         33:f8:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:40:59 2026 by rpki-client