Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa
File:                     1c452224-3db4-3c25-8e3d-11a10373e9ab.roa (raw, json)
Hash identifier:          ALmwtuaDeeNABg5kHLwmEg4lnI99MY9Tef/UAIQhp1o=
Subject key identifier:   11:5D:FA:65:1F:57:F2:CD:EC:33:07:EF:17:F3:63:40:46:0D:1C:7F
Certificate issuer:       /CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
Certificate serial:       010D0C9F4328584F225CFFCC1CC14D432EE13480
Authority key identifier: 71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2620:a5:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:ff:cc:1c:c1:4d:43:2e:e1:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=6eeced26-c479-49da-9c6f-74a260cce567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:a6:43:dc:d6:63:ff:7f:ee:6f:da:e8:ad:
                    2e:c7:8c:ff:75:77:44:37:23:d3:45:17:e8:7e:3a:
                    66:8b:a6:4a:68:2a:d4:a7:4b:27:ca:48:59:02:4d:
                    a8:62:1a:38:81:0f:eb:17:60:a1:9e:72:be:75:d8:
                    c8:70:02:72:df:49:5c:54:87:ef:aa:dd:6b:6a:d2:
                    13:d5:c1:e7:52:8a:03:86:af:5f:fd:db:ec:9f:a2:
                    29:da:71:95:29:54:46:a3:1b:7c:5f:73:c1:53:47:
                    7d:fb:58:32:ae:a6:e7:bb:46:cc:7b:36:c6:ba:35:
                    cd:80:f4:de:84:4f:13:fd:99:4a:ec:04:17:9b:37:
                    36:15:45:42:d3:20:fa:e1:9b:53:31:a1:aa:81:a4:
                    74:87:cd:72:2f:d4:1f:51:fe:1c:0b:4c:f7:15:23:
                    af:ab:ad:64:cd:e1:cd:c5:28:f9:83:5d:d0:f1:a2:
                    47:9f:e5:c6:1c:6f:e6:6c:13:eb:e9:1b:a8:fb:e9:
                    9f:0d:8c:f3:21:52:06:c9:77:4c:e5:d7:47:6e:b8:
                    7e:c9:2e:7c:81:93:9c:71:47:85:7a:75:40:e5:6b:
                    27:79:b7:da:c2:0e:33:4b:42:bf:74:f9:44:17:44:
                    5b:8d:5e:80:3f:8e:ac:79:9a:c4:01:97:40:49:97:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:FA:65:1F:57:F2:CD:EC:33:07:EF:17:F3:63:40:46:0D:1C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl

            X509v3 Authority Key Identifier:
                keyid:71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a5:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:4b:d1:42:2e:f3:4d:1d:ec:f3:6d:b7:4b:93:1d:50:ed:
         c1:e3:27:38:13:35:87:33:0a:2f:ff:95:f7:21:3b:7d:01:82:
         c4:eb:8d:c9:3f:f7:ee:77:25:95:53:1e:c4:88:c8:8c:12:a3:
         f3:a7:3d:2a:c8:34:a3:fa:39:35:30:4a:6a:72:a8:5f:7c:4e:
         a5:5f:e8:f0:66:6f:af:22:08:df:28:df:7f:ca:db:57:93:95:
         d1:66:ae:a3:eb:fa:c0:7f:83:f3:52:91:2b:a7:ce:df:77:cc:
         d3:70:ce:ae:62:71:ea:de:71:df:26:7e:5a:2b:f2:e1:91:34:
         b4:61:a7:2f:9e:e2:67:48:bd:32:da:6b:0b:38:64:32:a4:f2:
         00:5e:c1:40:e7:16:ff:78:3c:02:28:2e:d9:64:96:2e:e0:0a:
         61:8e:e1:ef:2f:e4:4d:e6:df:e1:ff:33:1a:1b:6e:bf:df:df:
         0e:3b:fa:79:d4:62:35:2d:0c:db:df:66:69:30:0f:39:47:a8:
         3a:33:9a:06:9e:55:93:f3:d8:ff:d2:96:04:73:34:3c:b1:00:
         88:eb:d6:be:64:98:5f:7a:c2:5e:90:e8:02:56:31:7a:08:cf:
         68:d1:7c:64:39:1a:5b:1a:e0:e8:1a:b5:eb:72:0f:b1:5d:a5:
         0e:7e:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:59:40 2026 by rpki-client