Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/85864bde-d7e7-3310-92dc-bb5a494a8b58.roa
File:                     85864bde-d7e7-3310-92dc-bb5a494a8b58.roa (raw, json)
Hash identifier:          YwYRPE3gCbvnD487L+9qiAiFFav8KmP71H/jvaMhw0U=
Subject key identifier:   FD:E2:9F:6E:4C:7E:98:FA:2E:17:8B:0A:8E:7C:BC:66:7E:E1:BD:47
Certificate issuer:       /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
Certificate serial:       010D0C9F4328584F103795C53D83A2FA6BD03D80
Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/85864bde-d7e7-3310-92dc-bb5a494a8b58.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     401815
IP address blocks:        2604:1760:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:95:c5:3d:83:a2:fa:6b:d0:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=251db112-b8f1-4247-ab99-14269a47c885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:d1:5f:55:0c:fa:ee:2e:9e:54:23:f7:33:
                    1b:5c:2a:e7:e9:99:a1:ab:56:69:46:ca:be:6b:4e:
                    26:dc:f5:19:87:2b:86:57:ee:4d:ba:f6:d0:86:13:
                    61:b0:ab:e0:d0:52:b1:12:9e:5d:e8:e5:36:87:f5:
                    52:33:3b:17:a4:1f:36:e2:0b:91:9f:fb:8d:67:30:
                    e1:2d:c2:74:e7:b1:4a:13:6e:58:68:33:9c:ab:08:
                    ef:66:e1:8c:f2:c9:bf:ee:21:f2:22:78:3c:cf:64:
                    17:2a:35:5f:92:01:d5:98:ec:68:4e:e1:bd:e3:84:
                    23:23:73:ed:29:95:84:c9:b1:d9:36:38:2b:c9:f2:
                    ae:e4:ff:31:a8:be:03:e3:95:16:ba:13:72:c6:f9:
                    bc:0d:eb:67:19:07:3a:7c:0d:96:7e:44:b4:d7:af:
                    60:4d:af:c9:c3:65:ca:d0:ff:1b:bf:80:b6:ab:31:
                    81:95:48:13:2f:04:ed:e2:7b:cb:04:ce:b6:8b:8b:
                    71:28:e7:d6:2a:ef:d9:d2:a5:7e:48:8f:10:7f:c0:
                    bf:e9:bc:95:17:b9:ab:85:98:f4:ca:af:80:e0:ab:
                    82:8b:66:7a:54:c4:c2:6d:10:1b:7b:45:ed:ec:59:
                    7d:3d:d0:83:9a:27:3a:5f:a1:f9:34:c6:36:53:de:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E2:9F:6E:4C:7E:98:FA:2E:17:8B:0A:8E:7C:BC:66:7E:E1:BD:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/85864bde-d7e7-3310-92dc-bb5a494a8b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1760:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:07:9f:19:2c:d6:4a:e8:9a:e1:b1:ff:10:17:78:f2:f6:00:
         fd:3c:c4:ca:bb:66:39:ba:ab:b6:c4:db:81:ae:3e:f8:26:5d:
         21:c4:f1:f7:86:2b:97:a1:c2:5d:8c:ef:6d:06:84:4e:0f:2c:
         35:91:d0:ad:f8:8a:97:35:60:a8:13:05:4e:6c:8f:37:b6:82:
         4e:48:e0:97:bd:63:46:85:e8:69:d1:17:ff:1a:04:eb:2d:f3:
         39:df:05:f9:2d:99:2d:b5:26:95:0d:f0:9a:ea:8f:12:72:a7:
         09:29:26:fc:df:f4:df:32:f6:36:a5:7f:22:18:03:7a:e0:ee:
         c2:3e:50:49:1c:22:43:d8:c2:7c:6c:65:7b:fc:31:2e:96:e9:
         84:51:d9:5a:e3:eb:47:76:fe:08:0f:fe:34:80:c9:4a:62:e8:
         2a:98:d3:55:d8:3a:2d:12:d2:81:d8:93:9d:ae:f5:ab:0a:d6:
         34:a8:4e:6a:c2:48:e2:85:29:4a:d4:f5:9d:ac:da:dd:f0:10:
         24:e9:c5:38:f6:76:db:53:bd:cb:79:11:3a:ff:26:ba:13:df:
         87:05:26:7b:56:8d:f2:67:65:d4:5b:ec:dd:27:c9:92:b5:e1:
         87:e9:fa:46:03:00:0e:42:2c:52:43:73:53:f2:7f:9f:63:da:
         d5:3f:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:28:53 2026 by rpki-client