Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa
File:                     c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa (raw, json)
Hash identifier:          F/+9In/KQUWmWhLeWRwJhW2dRrGgpQIfBPGG3DhGcxw=
Subject key identifier:   D3:5F:36:04:0D:77:83:69:DD:E8:4A:3F:60:FC:55:EF:57:EA:A3:05
Certificate issuer:       /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
Certificate serial:       010D0C9F4328584EF717B7F6A53D3F20C59BEC80
Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     8103
IP address blocks:        2001:520:101d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:b7:f6:a5:3d:3f:20:c5:9b:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=3c88d4f9-987c-4bce-bb35-653bfbbe8b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:67:26:7e:75:83:86:74:22:2a:79:aa:aa:
                    fe:ba:f2:72:3b:87:b3:4f:be:4c:4e:db:e4:e1:20:
                    ec:1e:e3:7a:f3:1d:4d:f3:eb:f0:4d:9e:78:4b:f4:
                    b9:2d:ce:c0:cd:1f:b5:f3:bf:6d:f5:0a:30:29:88:
                    11:58:9a:26:60:a9:55:b3:f2:56:08:3f:da:47:6f:
                    b1:c9:c7:7a:4c:1b:10:ab:dd:3e:e7:44:8c:b3:ee:
                    76:d4:69:98:9e:52:fe:b5:c5:c3:b0:76:04:5f:6f:
                    88:f5:95:6b:f3:3e:ae:d7:25:58:a8:7e:01:68:da:
                    75:61:9d:7b:16:c8:3e:df:b6:44:29:2c:96:34:36:
                    92:26:07:c5:aa:5c:ff:64:c3:a7:7d:4c:ac:ca:2c:
                    96:e8:da:27:61:4e:5a:95:85:47:97:76:70:d4:19:
                    fb:53:ff:d7:a2:bf:66:c5:39:99:61:90:6c:e5:37:
                    9b:80:e4:4a:24:fb:94:2e:27:5a:e4:f2:c9:f2:d9:
                    58:a1:a9:12:df:06:5a:c2:a1:de:2e:1d:bb:bf:fb:
                    03:86:d0:34:0f:74:ef:f9:02:5a:47:09:8d:0e:9d:
                    5a:e0:d1:96:15:cc:7a:e6:16:83:aa:ee:bd:9f:1a:
                    d5:af:40:4f:ea:28:60:43:48:47:36:90:23:96:82:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5F:36:04:0D:77:83:69:DD:E8:4A:3F:60:FC:55:EF:57:EA:A3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl

            X509v3 Authority Key Identifier:
                keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:520:101d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6a:0d:0e:28:af:9b:8d:0d:52:26:57:ed:ff:18:7c:d4:c7:
         8b:ef:33:da:b1:a0:14:a8:9c:43:7c:2c:59:68:8a:d8:b9:2e:
         46:0d:aa:33:86:17:cb:ef:3a:f8:51:11:17:10:22:8d:6c:e8:
         1c:d5:78:09:7f:2a:b8:59:65:32:27:74:4d:84:e1:98:63:d8:
         84:7b:cd:ab:92:68:bb:41:8f:19:12:61:1d:01:10:87:16:89:
         50:99:0e:e9:b8:a8:6c:f4:b7:d2:67:3f:e9:3d:02:6b:38:10:
         d0:c2:a1:7d:ef:58:5a:7e:82:11:9b:69:78:f6:67:79:20:f7:
         8b:ec:96:75:5c:fb:34:1c:c1:ee:16:c1:1c:63:b2:a9:b5:31:
         41:2b:d8:33:e6:5a:1f:d2:4c:82:de:c6:e0:a8:7c:ca:fb:49:
         f7:b7:7d:07:04:90:2d:1a:d4:4c:61:83:de:2d:e6:4b:4b:05:
         0e:2b:2e:55:02:30:80:ab:89:8b:a2:75:f3:3c:b4:bf:a5:fd:
         b5:74:f5:1f:f2:bf:35:a5:09:95:8b:33:66:a4:25:e0:db:23:
         3f:89:0f:d8:38:5c:13:8b:08:11:5c:8c:20:57:65:8a:7e:e4:
         93:eb:a2:53:f2:fe:71:d9:07:10:78:46:5f:6c:75:73:16:4d:
         05:b8:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:51:48 2026 by rpki-client