Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/737aa89e-b61c-3df1-be92-198888ada9d9.roa
File:                     737aa89e-b61c-3df1-be92-198888ada9d9.roa (raw, json)
Hash identifier:          d7PJtwYWqbQlImBsONl0q65jJ5pnHgCnbV7bZ9NZx6s=
Subject key identifier:   0F:65:C8:50:3F:77:DB:EA:D8:6A:57:F7:C9:91:71:1E:52:4E:F4:50
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F498456FB85A1C0A1044EF880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/737aa89e-b61c-3df1-be92-198888ada9d9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1417:3f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:56:fb:85:a1:c0:a1:04:4e:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=944ba019-cfc0-43ec-9565-dec5a86f9e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:d1:14:63:67:c3:2e:e2:39:d2:cd:4c:98:
                    95:8e:84:2c:42:f8:45:bd:ba:fc:62:77:de:45:79:
                    d2:2f:9d:f4:1f:61:0c:60:c9:7d:f4:65:c3:0b:31:
                    69:24:78:1c:7d:2a:e8:53:c8:ba:68:a8:dd:ac:06:
                    da:9c:7c:4a:cd:99:f0:30:67:e4:84:0c:19:85:1d:
                    6f:62:97:3b:be:0f:48:11:a2:68:e2:41:74:80:c5:
                    29:44:04:b9:b4:c1:35:53:56:d6:be:65:32:00:61:
                    6c:f9:a6:55:8f:f6:3a:8d:96:ac:9d:5a:ab:30:c2:
                    3d:e3:2e:b4:a0:73:0f:1b:dd:a4:78:d5:05:74:83:
                    6e:12:a4:41:38:b4:5a:63:90:16:c4:d0:33:00:5c:
                    00:fc:47:f4:28:d9:ac:05:25:a7:9a:4e:cc:66:7b:
                    9d:b9:f2:9e:60:bc:7f:35:3a:e8:64:0c:10:c0:b0:
                    1a:21:fc:7e:ec:f0:0b:bb:50:fe:d4:e3:ca:e9:7e:
                    2a:29:94:b4:66:f0:fc:e3:9f:d1:a3:71:d5:12:17:
                    02:64:b3:90:79:08:93:16:ac:d7:7e:d0:fa:23:f4:
                    2c:fa:23:49:2e:3b:d0:cb:49:3d:c9:e2:0a:90:8f:
                    49:f7:84:53:3c:22:aa:00:f7:2e:b8:54:0a:11:8c:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:65:C8:50:3F:77:DB:EA:D8:6A:57:F7:C9:91:71:1E:52:4E:F4:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/737aa89e-b61c-3df1-be92-198888ada9d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ba:2e:90:1b:01:19:6a:fe:fb:e3:ca:d8:99:96:73:94:fa:
         30:50:90:5d:af:1f:24:3b:2c:42:b9:c1:cb:00:e3:6d:1c:4c:
         06:aa:ce:47:3d:80:bf:96:7f:1d:94:52:85:b6:e0:77:5b:bc:
         2f:4a:a8:5d:a6:69:48:89:66:4d:28:bb:92:2c:88:3f:7a:39:
         e5:2e:da:05:ca:32:aa:4f:fe:43:c9:0b:5b:0f:c0:ef:9a:cc:
         1c:0a:22:20:d5:c1:9b:cd:32:c3:1d:ea:41:b7:e0:33:6f:e2:
         bc:74:4d:c3:a2:70:3d:25:fe:f8:88:e0:03:c2:32:51:17:56:
         ba:cf:76:22:57:de:7d:3b:3f:61:71:73:e8:cc:7d:ba:21:c8:
         36:b8:bc:ba:7d:83:b5:65:f6:8d:d8:41:ca:35:ca:89:2e:06:
         e1:87:a1:bd:ed:70:b2:91:98:08:68:d8:8b:d1:b1:b4:f4:50:
         e3:ce:73:05:da:9a:fe:81:ed:59:26:f7:57:61:45:45:dd:2a:
         a8:4b:23:2f:ad:a1:b3:f3:9f:55:de:e1:65:f8:f7:29:10:bd:
         70:c9:8e:6a:81:9f:71:57:63:37:e1:d7:a5:48:17:86:f5:a9:
         5a:24:bb:5f:13:11:86:03:a7:ab:cb:92:dc:28:bd:b1:fb:76:
         21:5a:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:26:30 2026 by rpki-client