Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa
File:                     b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa (raw, json)
Hash identifier:          c+u8Sc+q+488+fsxxaMhOcmkMcDlB2OicXMHTogZOJI=
Subject key identifier:   FA:32:D6:48:79:0A:02:E8:99:74:7F:0C:03:F4:E5:0E:21:34:A6:33
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F4973E2B9CCC6E13A980BFB00
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46261
IP address blocks:        2605:a880::/32 maxlen: 64
                          2607:3f00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e2:b9:cc:c6:e1:3a:98:0b:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7422526f-0294-4b9f-962f-febc152df9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:93:82:56:b2:61:b1:7c:31:44:9a:ef:63:db:
                    d2:67:c3:67:ba:da:12:e8:8a:f2:64:36:e6:21:8a:
                    24:b1:ca:01:d1:19:bb:53:2f:43:22:76:8b:8b:d0:
                    0a:96:b5:e5:ea:e0:73:b8:de:f4:a4:67:b7:03:e4:
                    73:1f:53:18:bb:10:f6:af:49:a9:f5:ad:04:3c:9b:
                    15:63:e7:2b:99:68:d4:40:ae:25:75:55:45:30:82:
                    a5:15:f1:99:4a:bc:77:c0:59:84:77:86:18:ff:8a:
                    c8:e6:48:51:76:f1:7b:5e:8f:44:37:b7:bf:c2:77:
                    f5:5e:3a:d2:9a:04:f1:c2:d1:b7:e1:17:81:4f:7a:
                    dd:0e:b5:ba:9e:78:1b:5e:01:2e:34:23:2d:57:7e:
                    aa:4e:e1:e9:9b:c5:c1:9d:73:13:aa:ae:ae:bb:a1:
                    c9:5d:08:e2:55:4a:2e:ba:a2:30:cd:26:29:22:9a:
                    6a:40:71:eb:fa:15:31:ea:d2:62:47:74:74:97:18:
                    37:c4:82:99:6b:dc:80:23:2f:a9:07:5e:60:0f:c6:
                    d7:43:d7:4f:a3:e9:3a:ac:cb:40:0b:b8:da:23:63:
                    dc:55:c1:17:60:de:72:ca:c3:61:a7:ff:6b:cd:5c:
                    84:2b:3e:9b:e3:c5:e5:57:c3:d5:18:99:96:95:7e:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:D6:48:79:0A:02:E8:99:74:7F:0C:03:F4:E5:0E:21:34:A6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a880::/32
                  2607:3f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0b:18:3a:b9:f1:24:37:19:7d:17:fa:d0:c1:68:95:b0:9b:
         27:3d:32:20:10:c5:e6:b2:03:8a:4c:70:42:d3:9e:51:8b:a8:
         05:ff:bc:92:4d:58:dc:33:e3:c4:9c:9c:dc:fb:05:d1:94:09:
         d1:c3:1d:35:9d:39:10:19:2a:90:2f:22:ff:7b:94:0d:23:f0:
         8f:97:4d:b2:60:6c:69:22:34:93:26:35:16:38:4d:3f:4f:c5:
         9f:39:ed:db:02:45:30:b9:c3:86:9f:4b:51:05:11:50:b7:27:
         5a:8f:46:f8:28:84:4a:7b:5e:e9:21:af:ee:cb:c8:ee:e6:44:
         44:57:2f:3b:cd:cc:39:93:30:22:9a:00:2e:71:e6:4e:4f:5b:
         fa:2e:39:7c:04:f4:e2:72:ff:f1:4d:78:9f:20:aa:8f:21:90:
         aa:5a:27:c8:23:79:df:8a:8d:8b:58:5b:ea:67:7f:d4:7c:b6:
         82:f6:91:8f:f0:2e:4b:f8:6a:01:b1:23:cf:09:9d:14:b0:4d:
         a4:71:82:4a:45:da:ce:f2:d3:ab:bb:8a:fc:30:b9:6a:60:96:
         2d:b9:7e:e6:63:2d:29:00:4e:1a:27:3e:e7:70:36:3d:09:df:
         a9:3e:3a:37:4e:06:1d:6e:16:ce:a7:3b:93:6d:3f:5f:5d:0e:
         0b:66:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:38:36 2026 by rpki-client