Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77bd2caa-52e1-3c63-af5f-b3c45ca27735.roa
File:                     77bd2caa-52e1-3c63-af5f-b3c45ca27735.roa (raw, json)
Hash identifier:          lz6CPFnmwAS6PVkQNrawHfkuwaXypocHmmSknovWq88=
Subject key identifier:   66:BD:51:09:1B:9F:D9:3C:0E:E1:0D:B5:F5:B8:63:D8:D1:05:BF:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EAE1E8839D80D23744A428EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77bd2caa-52e1-3c63-af5f-b3c45ca27735.roa
Signing time:             Fri 31 Jul 2026 09:40:41 +0000
ROA not before:           Fri 31 Jul 2026 09:40:41 +0000
ROA not after:            Thu 29 Oct 2026 09:40:41 +0000
asID:                     35994
IP address blocks:        2600:1406:7800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:1e:88:39:d8:0d:23:74:4a:42:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 31 09:40:41 2026 GMT
            Not After : Oct 29 09:40:41 2026 GMT
        Subject: CN=48a22e6c-93cf-4a7e-a495-6bd2e8fd05ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:4c:5e:98:2b:1b:95:99:9b:8e:24:b8:eb:
                    62:2e:1a:9c:6e:dd:25:45:5a:20:be:f2:59:58:8d:
                    ae:26:a6:81:a7:dd:58:20:cb:95:ca:4a:aa:05:30:
                    94:c3:b6:6b:67:22:5b:97:e6:e1:18:12:26:e6:21:
                    be:0e:9f:84:3c:c1:2d:16:7a:2c:5c:a4:0f:06:4d:
                    1d:40:d7:96:93:60:f9:24:69:b6:c5:98:2c:c5:9d:
                    f2:5d:f7:db:d1:28:50:11:97:61:7e:db:23:4a:12:
                    75:aa:53:61:c4:d3:ba:b0:08:53:4b:0b:a1:8d:31:
                    c6:ba:a2:1f:d9:56:53:de:f6:16:29:30:1a:aa:f9:
                    b6:10:c5:64:1a:2c:72:c4:23:e3:93:78:71:47:be:
                    9d:87:42:e3:ff:be:e2:25:94:21:18:c5:ae:2c:02:
                    10:c8:70:4e:20:8f:69:f7:f2:0e:ac:99:da:95:ba:
                    82:4c:c6:8f:3d:fb:0f:15:57:a0:79:63:d5:a3:7c:
                    cf:ea:d3:a8:ab:c4:e1:24:1f:56:ce:18:f2:3f:87:
                    d8:0a:96:a8:5e:18:ad:69:19:06:f3:4c:8b:69:26:
                    11:88:07:e9:46:88:3b:c9:76:c8:12:73:e6:01:a8:
                    f7:d5:4b:7b:e1:88:fe:7a:e3:1d:83:b1:d4:7e:4a:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BD:51:09:1B:9F:D9:3C:0E:E1:0D:B5:F5:B8:63:D8:D1:05:BF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77bd2caa-52e1-3c63-af5f-b3c45ca27735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:7800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:25:fb:7b:da:49:51:13:ed:e8:5f:2a:19:c6:d8:7e:cf:
         fc:14:21:56:ad:ca:c4:3e:26:db:0f:bd:9b:35:3d:fb:fc:e7:
         57:9e:1e:2d:d6:53:77:d3:d3:ab:e5:1e:6f:f3:bd:63:7b:d6:
         18:f0:08:18:6b:5b:cf:57:8a:2e:65:bf:07:b5:69:3c:47:2a:
         0b:ba:4d:44:9f:00:6b:25:0d:bd:d8:69:94:5b:dd:e6:f2:09:
         6e:36:ac:8b:f4:6c:b4:08:4a:7b:16:e2:f7:3c:64:74:2b:af:
         d1:c6:12:9a:24:ff:02:3f:4c:79:ba:bd:41:07:92:d0:40:f2:
         04:82:d3:77:36:f2:81:c5:c9:14:0f:57:ba:73:a8:5f:4c:20:
         a0:f2:cf:57:1c:1a:0c:ae:a2:55:31:0c:9a:d2:34:bd:0d:f8:
         53:7c:6d:cb:f5:4e:57:9a:26:11:c6:31:9e:4b:65:82:9a:4c:
         20:cd:16:23:de:b1:45:67:f1:d8:4c:6b:7f:34:a4:bc:f5:d8:
         65:2e:5f:b4:85:9e:6b:4b:84:6b:2d:5c:bb:1a:c6:1a:41:20:
         d3:50:2f:4b:f7:b7:34:f5:f3:e5:5c:d8:2c:76:96:8f:b7:bd:
         cc:ad:fc:13:6c:67:09:40:af:25:0a:58:44:9c:f8:52:1d:26:
         b6:f7:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:00 2026 by rpki-client