Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f111758-3a56-3e41-a08c-e39ac4ce539a.roa
File:                     1f111758-3a56-3e41-a08c-e39ac4ce539a.roa (raw, json)
Hash identifier:          h3mFkgAYESvMB5LHZMcY0hf9CLXO4VaXvkr9YtEiMwA=
Subject key identifier:   58:F1:4D:BD:69:CC:70:7C:C3:33:D9:B1:E0:4C:A7:CF:6E:4D:97:20
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584F49770EDAC250AE61DCB17540
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f111758-3a56-3e41-a08c-e39ac4ce539a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63150
IP address blocks:        2602:f988:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:0e:da:c2:50:ae:61:dc:b1:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3502737f-b3f7-4c46-937e-74c63fc5da36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:36:2f:52:d6:0a:aa:12:13:4e:bb:03:42:
                    23:f0:47:5f:47:8d:a7:72:94:12:05:09:da:7f:4b:
                    07:5e:23:1e:bd:d4:c5:1a:88:5a:b3:7d:83:c6:4e:
                    f5:50:35:68:55:3c:52:a4:d8:fe:fb:e6:9b:ad:46:
                    cd:73:e7:96:4c:41:26:8f:08:7a:7f:75:db:28:55:
                    f7:7d:b4:23:cc:c0:15:65:69:a0:fb:a6:bf:63:50:
                    78:72:59:5e:51:90:c4:36:7d:01:a3:91:ed:50:2f:
                    4c:df:9a:39:0a:5a:0a:42:8d:fb:3b:03:9d:5e:dd:
                    0e:dd:1f:c1:6b:7f:c5:1d:38:ec:47:85:ca:b9:f9:
                    a0:22:f2:70:d2:19:07:39:e1:8e:12:3b:6f:4a:19:
                    34:4e:cb:ba:c4:1e:aa:14:bb:07:e8:6a:91:29:9c:
                    e3:05:83:f7:8e:cf:fb:a1:65:3f:27:e6:b1:52:b8:
                    c8:3a:76:4a:a7:4b:a4:37:67:10:8a:bd:68:5d:fa:
                    6f:a4:c7:e8:db:f3:92:4a:d9:a3:3f:85:40:22:13:
                    e4:03:86:4c:b9:8d:36:2b:b5:54:dd:ab:10:f4:ae:
                    68:f7:f5:5e:0b:ee:30:13:b4:9e:54:f7:89:6e:5f:
                    09:a0:e7:e7:57:d4:f7:dd:e3:72:ee:27:6f:b2:f3:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:4D:BD:69:CC:70:7C:C3:33:D9:B1:E0:4C:A7:CF:6E:4D:97:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f111758-3a56-3e41-a08c-e39ac4ce539a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:c9:df:b1:01:ae:4c:79:ed:59:51:2c:75:6d:e2:34:24:
         f5:29:b8:ae:66:57:12:5c:b8:3d:4e:73:9c:6d:27:af:e2:dd:
         16:bd:36:3f:24:a5:f5:12:dc:fa:1b:35:8c:43:c5:29:ce:37:
         78:9f:28:b7:fc:fc:09:45:bf:31:1f:31:79:ad:3b:8a:cd:3d:
         12:3e:b3:74:e1:2e:1b:b0:58:96:8c:bc:93:d8:e5:dd:bf:d2:
         3c:60:37:65:8f:df:1b:71:75:ef:c5:1c:b2:85:a8:12:2f:6f:
         7d:32:8b:5b:02:34:2b:5d:b7:b6:8c:52:15:84:71:6b:92:54:
         40:0e:4a:6f:33:7d:cc:c2:00:32:c4:9b:3d:5e:8b:ee:6d:89:
         b4:ba:92:bc:d3:0b:22:ca:70:ac:5c:40:0c:b0:9d:d6:d1:16:
         5c:5a:95:db:9b:4c:e8:47:36:8f:0d:fb:f4:48:e8:d3:36:bb:
         fd:18:93:34:ee:81:a0:8c:f0:0f:e5:48:a9:ee:37:ff:b6:69:
         d1:ad:bb:0d:2c:0e:06:00:a4:65:86:79:ee:db:18:dc:fa:a1:
         c4:03:c7:0c:a2:c6:b3:9d:df:81:03:27:98:5f:41:f2:c4:4c:
         19:cb:f4:e9:9b:63:7b:eb:5e:d5:e8:44:b5:7f:22:c2:da:d6:
         d5:aa:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:34:38 2026 by rpki-client