Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa
File:                     4d710879-5174-37a8-b083-a00e701de633.roa (raw, json)
Hash identifier:          4xvAPpFZxBbxo/6nje46z0WFAV3Hytp4UFaBVo0wWsk=
Subject key identifier:   F9:76:CE:F3:02:C2:67:DB:4C:05:0D:9D:3D:E4:84:B3:33:33:E8:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C57F53599155371C9E4E8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8966
IP address blocks:        2600:1417:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:57:f5:35:99:15:53:71:c9:e4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=18cf47c7-e48b-4355-8847-e577d1b7e36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:57:eb:1e:dc:4e:46:ee:b3:fa:06:1b:14:
                    cb:ec:a6:f0:79:a5:cc:77:0b:11:ca:6c:2c:21:b3:
                    7b:78:b1:fe:dc:af:f4:89:a2:94:17:dc:1a:55:3d:
                    e1:9c:49:55:a0:76:8e:08:ab:54:17:90:12:65:f3:
                    24:a6:83:67:97:11:3f:0e:f8:10:b4:40:e2:50:97:
                    ed:36:0a:ac:58:21:62:5f:1a:83:6b:b4:bf:d7:11:
                    3a:e4:98:5a:22:14:c9:7e:fe:ce:ac:b6:49:5c:e4:
                    38:69:7c:8e:ca:d3:82:10:46:d6:c3:99:02:47:47:
                    da:51:34:46:6e:a3:3f:22:3e:3e:4f:69:1c:05:e9:
                    10:8a:1a:c7:d1:52:31:28:86:ee:a0:6b:a6:15:7b:
                    34:4a:8e:f7:96:e5:eb:98:0f:ab:14:e2:69:5b:bf:
                    0f:cc:02:27:ae:c2:91:75:8e:5e:a4:3c:68:18:ae:
                    7d:d5:65:bb:e7:73:0e:1d:36:a4:c0:e2:07:84:48:
                    b6:e5:62:5e:ec:2b:87:b8:12:cf:87:74:ef:c9:a3:
                    fd:9e:36:85:b5:b6:c8:c8:81:fe:ae:fe:ab:85:95:
                    ad:11:2b:8c:74:20:38:75:7e:10:2d:46:42:4a:08:
                    08:62:dc:91:dd:df:88:c4:49:59:55:fe:cd:77:73:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:CE:F3:02:C2:67:DB:4C:05:0D:9D:3D:E4:84:B3:33:33:E8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:b4:29:e2:71:c7:54:6d:82:08:0b:75:8d:f4:02:8e:76:
         fb:2a:87:9f:74:99:aa:f8:26:ff:c0:b1:ed:a5:f8:ad:8d:65:
         d9:09:03:b7:3f:40:83:ce:44:56:01:f8:94:2c:3f:e9:86:1b:
         4e:59:26:41:35:91:f8:e2:33:05:23:09:ba:12:e9:02:a1:fa:
         94:4a:ab:49:c3:2a:5e:3e:9c:0e:ca:07:a1:e2:85:ec:4f:ca:
         d9:12:b8:2a:5e:44:a2:6c:10:48:8a:1c:78:3f:e4:47:88:9c:
         66:64:4a:92:54:60:9c:fc:56:34:a9:48:24:0c:57:b2:68:92:
         ee:89:01:d0:20:f6:3e:de:04:ac:4f:a0:8e:c6:25:7a:81:9f:
         52:d6:a3:69:cc:8f:63:cc:36:56:25:2c:1a:ff:6a:ce:1f:94:
         45:66:ce:a2:74:7f:c4:5d:21:23:7b:60:56:2d:55:7f:fc:6c:
         03:85:2c:14:44:53:e0:06:de:e8:97:ac:f0:90:18:15:61:4a:
         6d:86:0c:f0:6d:d2:af:6b:3d:49:c6:ca:1b:95:b0:f4:68:36:
         cc:da:82:c3:80:a2:dc:10:ea:ad:b0:f8:d7:02:64:19:b0:45:
         2d:7f:8a:00:fd:94:1e:f9:d9:6b:dc:3c:31:ae:8a:de:d2:68:
         e2:31:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:13:02 2026 by rpki-client