Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa
File:                     174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa (raw, json)
Hash identifier:          JCbmGfEn00yhZYsLhRv6swJRrSTZ1yCx+ME57fPEZT4=
Subject key identifier:   79:9E:73:DC:54:87:B2:55:2E:A4:1F:97:8F:08:A8:94:4E:5B:60:82
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584F34826E1874086BD3D063C180
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2620:116:800e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6e:18:74:08:6b:d3:d0:63:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=fa9db5e9-c07e-477e-82e3-fa7565cf537d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:d5:35:81:a8:80:ed:71:de:50:a3:10:c3:
                    cb:b7:87:89:21:20:64:85:9b:73:dc:4f:52:8e:b8:
                    40:59:9d:7f:78:41:9a:5a:2e:2e:5c:c1:ce:5d:02:
                    b4:ab:a1:91:fb:4f:b4:4d:95:e5:1f:d6:fe:78:60:
                    2f:dc:80:5d:5e:7a:65:3d:d7:78:d9:6b:84:64:57:
                    62:60:cb:bc:46:6c:42:ee:40:63:72:ff:19:91:ce:
                    09:22:b2:48:d6:4f:41:3b:f3:3f:35:ef:8e:58:70:
                    06:a2:2a:34:5b:31:ac:76:77:8c:51:67:81:96:47:
                    18:88:83:71:62:fd:15:18:2b:31:0d:0e:5c:e4:24:
                    4c:f2:c9:61:45:d3:22:da:21:ba:02:08:33:7c:0f:
                    20:5b:4d:50:26:b7:88:a5:75:4f:45:e7:23:c6:4c:
                    15:53:79:89:0f:e2:de:7f:8b:6a:c0:4a:f6:99:fc:
                    db:2d:7c:fe:eb:1f:fe:32:c9:07:65:67:b9:59:62:
                    5c:1a:32:f3:5b:80:0a:41:29:de:9d:ee:e6:5e:f0:
                    5b:91:38:1d:65:fa:c2:d2:21:4e:f0:71:94:05:85:
                    45:ea:df:b0:94:68:70:fa:3d:3c:a0:31:fa:14:60:
                    63:c1:65:83:75:36:91:cb:24:33:e3:d3:bb:a7:b3:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:73:DC:54:87:B2:55:2E:A4:1F:97:8F:08:A8:94:4E:5B:60:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:64:ef:b7:ad:c2:2a:3b:1d:b1:af:ee:8d:51:38:25:7f:97:
         eb:8d:a6:31:93:d8:34:33:1d:06:ed:78:eb:38:88:e5:82:ad:
         17:3f:27:fa:66:96:7a:11:97:3f:ab:35:25:6b:56:86:aa:d3:
         cc:0b:f5:18:31:90:e4:13:a0:ae:b0:65:18:4a:b3:67:86:43:
         bb:39:15:04:48:e5:26:9d:a9:3c:34:e0:45:48:8b:7c:ff:82:
         03:0e:4f:dd:80:21:b6:63:09:96:ad:d8:e5:42:cb:83:77:34:
         62:c3:92:81:f2:3a:30:fd:03:8b:31:14:6d:16:c9:e6:df:1b:
         14:09:8d:97:85:0c:e6:09:9d:2f:2b:32:0b:c9:1e:eb:35:5b:
         dd:b2:9a:9f:23:5f:67:af:ea:aa:eb:7c:4f:71:5f:33:f0:03:
         0e:3b:61:70:02:cf:ab:ca:f1:e0:0c:8f:a6:cd:c5:38:fd:3a:
         ae:18:b4:b2:9d:77:07:ee:e5:7a:c3:92:77:6c:d8:3a:6e:54:
         f9:98:a4:fa:00:95:3e:2c:57:5e:21:db:eb:00:cf:3f:2d:4d:
         9a:7f:2f:9b:60:e2:5f:9e:db:93:08:9c:0a:ff:6a:bd:be:93:
         5d:cf:90:87:e7:23:ed:40:a1:ad:41:b1:09:90:7b:c1:c3:da:
         ac:d2:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:07:06 2026 by rpki-client