Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e3d028d-6f01-3e23-b2c8-2f1faaadce17.roa
File:                     5e3d028d-6f01-3e23-b2c8-2f1faaadce17.roa (raw, json)
Hash identifier:          f31MDofKXKU3ZJIiDNHmxeZV86FW3L24GCTkP+kkGus=
Subject key identifier:   C7:6F:34:20:52:CE:B2:69:1E:5C:7E:E6:85:04:40:5E:F7:1B:27:3A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE0C1F5397264755229E5EF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e3d028d-6f01-3e23-b2c8-2f1faaadce17.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     35994
IP address blocks:        2001:4878:4003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:f5:39:72:64:75:52:29:e5:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=fd655850-c939-41d2-96c6-edd7014661ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:6d:37:69:62:63:77:35:b3:4b:d8:ca:7f:
                    a9:b1:e4:d4:83:2b:03:7f:ca:06:f3:50:55:1c:95:
                    25:9a:cf:79:10:08:9f:d2:4f:f4:6d:94:3f:5d:31:
                    b2:e5:51:06:1f:e0:95:7b:8b:ea:12:fc:21:60:7c:
                    b1:f7:40:14:6b:01:6e:f8:6b:b6:2c:ec:8d:a9:3b:
                    55:cd:a6:2c:13:a3:eb:8b:bb:b9:93:5b:67:c3:db:
                    88:b8:49:03:fe:89:db:82:9b:4e:e9:cb:84:28:5f:
                    c1:e2:43:eb:65:5e:c7:9e:3e:8b:d7:46:2d:e0:c1:
                    63:30:1e:ca:a8:7e:a3:29:f4:e9:dc:fe:ad:03:16:
                    87:ea:08:68:a9:b6:af:3c:83:99:b7:50:d6:a7:6c:
                    79:cb:08:43:d8:fe:17:65:cc:a4:64:7e:c3:49:f3:
                    a1:bf:4e:70:9c:9b:db:53:e0:9f:4f:5d:fe:37:ef:
                    aa:ed:77:7a:41:0f:57:a0:d5:b9:8d:ac:27:13:2f:
                    0d:83:71:0c:f5:89:4d:ba:0c:0c:da:05:fa:f8:3b:
                    8e:3e:92:03:bc:1a:a7:c0:95:19:ba:e0:aa:19:8a:
                    a0:2b:ce:1d:9a:f8:05:b0:a0:39:74:13:9d:3d:1d:
                    a8:87:6d:5a:52:fa:a7:b4:18:48:5a:70:81:18:0f:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:34:20:52:CE:B2:69:1E:5C:7E:E6:85:04:40:5E:F7:1B:27:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e3d028d-6f01-3e23-b2c8-2f1faaadce17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:61:16:1a:27:8e:ae:9c:8b:1a:1f:3d:ec:8b:f9:20:c2:2d:
         af:1d:dd:f6:63:90:82:ce:ef:b3:74:9d:38:5c:ad:77:74:42:
         7f:8d:58:62:55:2f:ee:2f:b4:80:fd:8f:c1:52:b5:b2:9a:21:
         06:5a:8f:e3:1b:9c:f6:8c:8b:98:2f:fe:cf:e9:45:6d:a1:47:
         57:74:d3:b6:a2:10:11:4c:07:d2:78:59:44:cf:a3:f2:08:a8:
         44:52:ef:af:87:eb:5d:7b:82:c0:f8:29:69:5e:f2:12:f8:6c:
         93:6a:26:7b:d0:99:09:0a:d7:85:da:10:f5:c6:81:1f:37:78:
         0c:1a:f5:45:df:c6:f7:1d:d3:90:0c:22:00:98:66:c3:90:ed:
         a8:2d:d2:f1:44:98:5d:a4:4a:d5:6e:71:85:0e:4f:2e:12:31:
         af:1b:0d:43:da:45:de:3c:5f:51:b3:76:08:d9:af:eb:60:2e:
         f0:0e:22:64:63:96:a8:d6:c1:e5:5d:05:8d:8a:41:01:ca:7e:
         75:a4:0b:66:67:0b:04:26:46:bc:5a:03:05:b1:73:a9:3e:f5:
         6c:88:43:41:42:fe:79:4d:5e:1a:79:b9:81:20:04:c5:e3:60:
         aa:1a:2e:60:1c:d7:a1:7a:67:72:6a:23:8d:6b:90:2e:bc:97:
         b8:59:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:16 2026 by rpki-client