Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
File:                     844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa (raw, json)
Hash identifier:          xBaF7Lg1HzEyS46c3Y4+AoQ63DLnpeUL55jSmKNExiM=
Subject key identifier:   14:8E:97:2A:27:67:BA:2F:AE:B9:C8:0C:E8:31:45:6A:09:5F:68:8D
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584EEEB755817E56C4729B18DB00
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2605:84c0:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:55:81:7e:56:c4:72:9b:18:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=03eb53bd-54c8-430a-89cf-9f556de9171c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:42:82:dc:f1:57:2d:3d:be:c3:3e:59:a3:
                    c9:eb:22:92:0f:b2:c7:b4:c2:b3:3f:14:24:8a:90:
                    d1:9b:ae:0f:3d:f2:3e:23:3a:e4:fe:0d:ce:14:ae:
                    8f:63:c5:82:e8:0c:3c:8a:29:92:5e:1f:94:b3:4d:
                    87:cf:c7:ec:82:10:35:a5:83:8f:fd:c0:fa:dd:08:
                    10:4d:3e:7a:5c:27:31:9a:00:e1:4d:d4:3a:70:e2:
                    d8:fa:d5:c0:53:70:7e:b1:0f:a4:02:39:f1:00:90:
                    f2:68:16:3f:8e:5e:3e:a7:63:b5:5e:5b:35:a8:4e:
                    e2:77:8e:5d:db:34:da:39:8e:6a:e4:74:3c:21:27:
                    78:ee:a5:80:fc:a3:89:76:f7:b9:60:ca:e3:e3:80:
                    f7:10:f1:7d:93:0a:76:df:25:df:50:40:8a:ce:47:
                    c9:c3:bf:1d:d7:4d:38:9f:5d:d3:49:ce:c3:74:7c:
                    d4:26:34:d9:ad:a8:e3:d2:53:93:a7:f3:fa:b6:4e:
                    5a:b9:31:58:21:60:b8:07:a9:ad:4b:e8:b5:45:2c:
                    90:28:84:f5:30:d8:75:5d:ee:61:ab:4f:61:5f:df:
                    65:56:0e:a9:d8:87:4b:5f:59:ba:aa:b7:a6:e6:15:
                    7e:ba:74:14:dc:e2:a3:01:e5:cb:fd:a3:a0:b5:d7:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8E:97:2A:27:67:BA:2F:AE:B9:C8:0C:E8:31:45:6A:09:5F:68:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:56::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:01:f9:97:d3:7e:2a:95:ba:41:f9:78:7c:40:0c:9e:3d:32:
         ce:81:42:94:a6:95:c8:75:ad:40:f2:51:60:9d:c0:ea:48:7b:
         5f:11:7b:a7:3f:a3:01:15:90:f1:93:86:88:19:71:03:51:e4:
         aa:c9:2b:0b:7f:c5:6d:df:cc:13:f6:7b:80:9e:32:2e:6b:52:
         3c:cd:97:c8:3d:b1:8a:51:b0:3c:38:00:50:92:6d:95:a6:d8:
         d0:be:26:26:8a:17:58:a1:49:21:43:23:ab:b4:05:a5:35:1a:
         55:1a:c1:26:72:45:e3:f0:5c:e4:9c:da:31:e0:87:33:a9:d6:
         f2:c8:cd:65:43:cb:b8:53:07:df:6d:c4:c1:52:bb:ad:d7:15:
         17:72:26:fb:9c:c3:2b:30:d0:ac:87:1f:75:cc:dc:54:b0:d5:
         d3:20:88:ee:90:87:9a:22:3f:52:dc:6b:9b:87:a2:24:cb:aa:
         fd:53:a4:eb:5e:e2:ae:ef:05:a3:55:bf:59:27:8a:e0:5b:82:
         43:6f:19:c3:4f:f1:e5:2e:67:d0:5c:51:77:d8:60:ec:85:9c:
         8c:bb:7f:38:15:69:51:90:b1:d3:0d:77:eb:64:ae:14:be:ed:
         5d:6f:e7:8d:e9:8c:c4:21:7a:69:e6:0a:ef:b6:ac:c5:c2:4f:
         aa:7f:ba:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:15:22 2026 by rpki-client