Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa
File:                     1c6a78b9-c377-3b7a-833d-0306da95276c.roa (raw, json)
Hash identifier:          2ciH0x6p0fopKqLqCcq1OjbqiHkBKTkumbXyCXMhGYg=
Subject key identifier:   BC:23:13:57:ED:D9:14:75:BD:BB:27:44:92:D3:2E:D6:B6:69:C4:C8
Certificate issuer:       /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial:       010D0C9F4328584F20F7ACB50B6BCDE21A5A6F00
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     30176
IP address blocks:        2607:f698::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ac:b5:0b:6b:cd:e2:1a:5a:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=69a38384-508a-4968-9c90-12aa2cc34bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:e5:b6:04:2f:26:20:4c:16:de:b9:00:06:
                    1e:88:ae:5e:df:b7:09:af:6d:0e:c6:49:c5:bb:35:
                    1c:46:6a:a4:30:70:b4:b8:e0:60:45:92:fd:b4:3d:
                    77:d2:8f:cf:26:bd:fc:06:70:48:b6:f4:41:ad:7f:
                    82:3b:de:e3:55:ee:0f:1b:fa:56:31:76:e4:16:52:
                    02:64:f5:21:5b:0b:75:e5:ff:bb:ce:92:7d:67:83:
                    96:25:87:f4:41:a0:07:b3:3f:85:af:69:9e:34:33:
                    6d:c5:b9:7b:9d:15:42:e6:2a:fd:71:ab:66:3c:32:
                    78:36:ce:03:d6:73:7d:d2:16:3a:eb:d7:47:90:a0:
                    77:ae:d6:7f:62:3e:86:da:9d:85:61:c9:ca:e2:1d:
                    60:45:11:e8:e7:a5:93:84:60:18:46:42:b0:58:9c:
                    85:21:80:f3:26:4d:03:b4:57:0f:63:db:04:f5:d4:
                    80:a4:1d:ce:bc:23:a5:9a:30:2c:e4:22:c0:e3:70:
                    7b:3e:1f:58:fa:d8:d9:db:4e:1b:0b:8f:3e:0b:17:
                    b3:1a:5c:e7:40:db:bc:92:4a:f9:32:50:cb:67:6b:
                    2d:7c:6d:4c:74:a1:75:ef:ef:d5:84:b4:06:7a:9d:
                    b8:d0:06:30:4a:a6:57:62:c2:85:dd:ba:1c:fb:de:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:23:13:57:ED:D9:14:75:BD:BB:27:44:92:D3:2E:D6:B6:69:C4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl

            X509v3 Authority Key Identifier:
                keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f698::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:b4:50:27:a1:ee:da:88:c4:01:d0:61:e3:6a:d8:26:8d:
         75:f0:4f:cf:04:26:9c:65:26:33:d5:c1:ae:ab:36:3b:8d:2d:
         35:b5:88:4c:a9:ae:83:e2:81:a4:25:2a:af:cb:13:3f:36:40:
         f4:30:9c:e7:a1:2b:e2:d9:6c:fa:aa:08:01:ec:3c:b3:71:7a:
         36:87:31:6d:da:67:96:24:9a:8e:8a:ee:d0:2d:de:80:a9:f2:
         d3:65:c3:2e:4b:15:64:d8:95:7b:e7:50:af:bf:33:db:23:e7:
         1c:90:61:6e:c3:d0:bf:bd:f1:23:9d:38:5d:e1:d4:45:15:5e:
         2a:f3:f2:f0:6f:e9:85:54:0e:75:da:e4:56:ed:a8:42:fb:d0:
         28:1c:e7:30:b2:30:52:d5:64:0c:7f:8a:3e:9f:4a:92:81:cd:
         2f:d1:08:aa:c1:b6:2b:31:8d:85:b6:b2:21:b1:a6:07:f0:25:
         5f:f3:23:e5:49:8c:7e:d5:ee:f4:65:26:d9:b6:29:f9:3f:88:
         bf:c9:f8:46:cd:70:ff:ce:f2:5d:38:a3:0c:eb:8a:6b:0a:ae:
         30:b5:c2:39:2c:88:39:b8:68:2b:a9:0a:d5:cc:c1:4d:23:56:
         d4:c5:42:08:81:e2:56:ed:70:b2:e5:9a:d8:cd:44:95:4c:a9:
         30:7a:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:32:27 2026 by rpki-client