Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa
File:                     27be7397-7a00-3f80-80d6-0af1003bcb73.roa (raw, json)
Hash identifier:          446xEhoeabGm3SprqJ1dhjgu87ZtNCxXkLHebvm0tvk=
Subject key identifier:   0B:67:A3:8B:ED:EA:2F:A0:61:01:AB:36:ED:C2:0B:EE:0B:B2:29:62
Certificate issuer:       /CN=89278746-5270-4955-a4eb-d96ac3a3dce1
Certificate serial:       010D0C9F4328584F1CC79B572BDE5CB5A99BE300
Authority key identifier: A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     401831
IP address blocks:        2604:17e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9b:57:2b:de:5c:b5:a9:9b:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89278746-5270-4955-a4eb-d96ac3a3dce1
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=e0a65bf7-2ec5-4367-9886-cf0aa47197de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:72:4a:ac:ba:a3:1f:01:bf:e3:1e:77:80:
                    86:8c:43:1f:1a:f2:61:37:ac:61:c5:c6:1a:29:30:
                    55:25:58:8d:7c:24:fc:a1:0f:0f:4e:23:6e:48:e4:
                    58:11:64:e0:09:c6:d5:ef:c0:f2:fa:f6:81:d7:3c:
                    b6:d4:eb:f8:81:d2:a1:cc:64:57:18:04:b9:88:98:
                    a4:6b:06:fd:e9:5a:c7:1d:a4:d3:6b:a4:66:90:91:
                    24:6f:c3:f4:b8:a0:f1:92:84:4f:c0:21:c7:e5:28:
                    fe:37:82:cf:cc:4a:59:0f:e2:5b:83:a9:43:a2:fe:
                    db:9d:7a:17:00:77:4c:0f:d4:7f:a5:59:a5:75:98:
                    c9:3b:a2:cf:28:03:9b:e5:20:39:41:58:a8:f7:40:
                    6a:be:d8:25:64:5f:6e:12:0c:47:b3:67:84:9c:13:
                    13:79:e5:1d:79:0a:1d:d7:77:5c:19:ad:9c:0c:77:
                    95:08:8c:0f:4c:dd:35:2b:ac:9e:84:a6:c8:4a:43:
                    43:f1:68:4b:66:3c:41:18:36:be:78:02:46:38:73:
                    f6:35:f8:49:6c:dc:41:dd:43:bb:d6:42:26:21:2d:
                    1d:5f:e6:66:e9:2c:ff:39:f3:94:85:d8:3a:ce:65:
                    39:30:0a:fb:8f:c8:e9:08:c9:3a:7e:be:73:46:03:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:A3:8B:ED:EA:2F:A0:61:01:AB:36:ED:C2:0B:EE:0B:B2:29:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl

            X509v3 Authority Key Identifier:
                keyid:A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:17e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c9:91:15:08:69:84:f0:b1:64:53:21:98:73:da:86:7a:1d:
         e1:a9:d2:05:98:27:b2:2b:a5:40:d8:95:d3:d2:51:e9:1f:32:
         54:15:59:63:42:e3:8b:4b:a0:c4:3a:51:b3:3b:a7:a9:1d:af:
         af:26:ea:64:13:2c:3c:84:a7:cf:a9:56:90:64:7a:b0:42:69:
         90:60:96:23:a7:18:b6:91:bc:b8:05:68:4f:5e:d4:81:bb:d5:
         e2:06:56:73:87:ec:7c:11:9e:1f:ee:9e:aa:bd:e4:8b:09:7b:
         b4:53:ea:86:3e:49:71:79:63:de:99:87:81:ae:db:3e:9b:9e:
         5e:15:70:43:35:1e:ea:af:3a:81:a5:16:cc:46:95:f6:09:5c:
         ab:0d:9f:d5:58:b3:07:69:32:59:c4:80:cb:f2:44:70:49:d9:
         b9:d3:36:b9:13:da:fd:99:4f:92:65:05:e5:88:d5:79:a2:85:
         fe:43:32:c6:cc:23:bd:ad:98:ca:bf:95:d2:bf:ad:89:74:f7:
         3b:87:73:4e:41:47:0f:37:54:89:6e:a3:43:8c:65:8b:d7:7a:
         be:e8:4c:f8:c0:f1:e4:d4:6b:f9:23:39:d5:3c:4e:26:62:d5:
         45:b9:16:41:96:87:5e:e5:8e:5a:81:c4:77:36:6c:3a:81:57:
         79:23:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:40:59 2026 by rpki-client