Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa
File:                     2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa (raw, json)
Hash identifier:          xQT8l95f7Gq4T0PklEaHv10OO6OhQerushG8b0KKUWI=
Subject key identifier:   17:37:FA:4C:6A:AD:29:C9:76:F5:FF:47:2C:82:99:4B:E0:35:E2:EA
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584EA786E43F09DDE63000E958C0
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     198949
IP address blocks:        2607:cc80:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e4:3f:09:dd:e6:30:00:e9:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8af10289-dd57-40a0-859f-0d924ff8356d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:fa:43:32:92:d6:31:a0:b3:e4:7f:75:44:
                    b8:91:aa:e6:29:de:99:bf:74:40:ca:63:8e:9d:e0:
                    50:ee:34:ca:f2:12:ad:9f:c6:3d:82:7c:40:bb:2c:
                    d2:4d:87:27:26:93:49:6e:ea:8c:ae:3c:b8:39:ab:
                    1d:2c:84:0a:da:13:74:a7:94:d9:aa:1c:6b:36:83:
                    50:34:22:2b:75:a3:7b:4b:4f:37:e6:6d:96:59:65:
                    87:95:d5:1e:4d:50:ba:98:12:0c:36:7d:cd:04:6e:
                    6e:25:85:6d:ea:a2:72:66:1d:35:db:07:fa:46:c9:
                    01:74:a4:51:93:90:89:03:b4:f6:5e:5d:85:59:a0:
                    1d:37:e3:48:2c:ae:89:6f:58:9b:88:37:38:0d:74:
                    0c:b0:44:17:33:1e:8a:e0:38:4a:10:50:83:ab:92:
                    24:61:cf:3d:2d:da:39:6d:fd:3a:63:8b:1a:f3:f8:
                    f0:82:b9:35:c8:08:b7:d5:3c:7d:5c:79:06:f9:c2:
                    25:5e:89:72:cc:2a:4e:d6:ff:6f:2c:d9:a2:cb:5b:
                    21:16:a9:07:71:9a:b6:76:4b:70:e8:2b:98:21:b1:
                    eb:3a:e0:15:d4:f0:e1:8e:f2:79:63:2b:e7:17:28:
                    63:f7:31:6a:87:cd:ba:4e:65:cd:78:cf:ae:4a:e5:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:37:FA:4C:6A:AD:29:C9:76:F5:FF:47:2C:82:99:4B:E0:35:E2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:f9:ee:18:4f:dd:3f:9b:db:6a:ec:6f:3b:88:6b:a8:7f:cc:
         87:90:6b:37:f0:e5:ed:08:b0:26:a5:03:85:24:19:4b:75:3d:
         f7:11:2b:f4:ce:bc:b8:a7:37:0c:a2:df:62:4e:93:02:02:cc:
         52:46:ab:ee:5a:d6:4d:10:fa:8b:d8:04:01:0e:eb:32:6d:04:
         d5:cc:5d:51:cb:48:9d:16:18:c7:ca:5f:a0:1b:ad:f3:1d:0b:
         8c:2f:6d:e5:f7:4e:4d:85:5b:eb:ab:9c:ba:19:a5:00:31:a0:
         c3:d5:71:4b:64:08:2f:ed:f9:ea:ea:c3:b1:75:9a:7f:ac:c2:
         5a:4a:4e:52:af:93:4c:32:36:36:b9:23:85:16:7b:f2:39:d0:
         4c:b8:9d:d8:d2:e7:b4:8c:91:64:af:31:40:3d:10:7a:2b:4f:
         6c:42:c8:36:9f:d0:7d:54:9b:1b:b4:5b:a6:bb:70:4b:56:20:
         e4:0d:c1:1c:74:ce:aa:84:ee:57:04:d3:c6:76:fb:bb:dc:05:
         9b:7f:f9:18:73:f1:6f:42:bd:72:2d:e5:1a:f1:4f:b7:94:da:
         5c:ad:cb:ab:a4:81:7b:61:b2:12:e9:8e:80:79:06:24:c8:03:
         19:70:10:3c:e0:90:c1:7b:f6:46:1e:88:29:9c:61:17:c3:38:
         d1:2f:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:57:49 2026 by rpki-client