Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7cbef844-881d-3484-aa95-211e051f773f.roa
File:                     7cbef844-881d-3484-aa95-211e051f773f.roa (raw, json)
Hash identifier:          nzMEuS6EJ9RoZ7D4pcsYxle5lZ6/HvE5V1zaaypXMGY=
Subject key identifier:   81:96:15:BA:66:8C:79:56:30:B5:F0:77:AB:1D:16:A1:12:23:52:CB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE38C9933D928C0FC550B5300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7cbef844-881d-3484-aa95-211e051f773f.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     12222
IP address blocks:        2001:4878:a242::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:99:33:d9:28:c0:fc:55:0b:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=11b67db3-9893-4513-b80b-8b8aa1aea540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:de:63:d1:b0:29:ac:de:bd:9f:50:98:eb:
                    e6:12:fc:c8:72:34:3f:47:8c:bd:ba:0c:7f:02:a8:
                    d0:43:18:8f:de:44:d7:51:f3:c2:8d:d6:e7:f4:2a:
                    5e:77:9d:4a:20:46:53:20:d5:39:39:2c:77:3d:ca:
                    1b:6f:61:24:53:26:93:e3:4b:30:ef:7b:ce:ad:1b:
                    82:2f:72:5c:10:70:79:98:bd:57:9a:2a:0f:08:5b:
                    01:67:9f:e8:d8:da:f0:ce:d6:26:dd:ca:2e:46:12:
                    06:c6:30:3d:13:37:11:8e:8b:14:93:0e:30:b6:95:
                    a3:56:fb:c7:77:67:22:10:a6:a4:c4:26:42:92:a9:
                    c4:ec:88:a3:2b:92:4e:fb:90:54:25:e7:78:9a:98:
                    10:13:0f:d4:4d:eb:98:75:e2:e7:53:12:a3:0a:2f:
                    ed:25:c9:1b:ce:a1:28:5c:1c:39:38:5c:a8:33:42:
                    7c:23:80:12:ee:33:ec:78:87:b3:53:45:58:93:2e:
                    cc:43:7c:e0:bd:76:15:0c:be:28:ff:d8:7e:67:40:
                    38:58:da:9e:dd:f4:e9:51:18:a1:c4:1f:70:a0:27:
                    a3:8c:7b:30:c0:e3:c3:d7:15:02:76:58:e2:6f:e1:
                    cb:e1:c6:0b:9d:15:b9:50:7b:7a:16:a4:58:3b:0a:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:96:15:BA:66:8C:79:56:30:B5:F0:77:AB:1D:16:A1:12:23:52:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7cbef844-881d-3484-aa95-211e051f773f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a242::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:9d:f2:b9:74:c4:6e:fe:80:7f:2a:50:82:d5:13:26:e4:
         46:5e:dd:83:47:3d:14:85:a8:e9:e9:c7:d6:46:58:04:74:57:
         58:4a:b9:62:da:8c:dc:9e:a0:71:4b:4b:47:4d:64:2f:83:25:
         c6:55:77:53:40:0e:9b:bf:7b:87:77:fd:5a:b1:df:50:97:27:
         bd:f6:76:a0:fc:1f:14:ec:4b:f7:91:f3:39:47:e9:62:12:b4:
         ca:94:25:9d:6f:82:ff:8e:f5:f6:9f:7f:76:90:e1:56:3b:ba:
         fe:5b:0d:2b:e9:0f:3d:35:2e:e9:2e:64:a6:ea:1c:c7:05:8b:
         32:b6:99:5b:c0:b1:48:1f:65:fb:4e:73:6a:79:83:a4:09:ce:
         7a:11:30:68:ff:3b:9b:d1:ba:e8:b9:84:16:52:44:4f:50:93:
         d5:f2:29:d0:28:fd:a8:30:46:76:a6:f5:60:54:06:13:76:37:
         49:89:bc:e8:9a:2a:98:53:c2:3d:60:c6:58:3a:cc:c8:72:bf:
         9e:27:35:7d:92:0f:0a:e5:8f:dd:f1:c7:a5:1c:c1:fb:fc:5d:
         98:fd:ad:0b:b4:b5:1c:3a:26:0f:f5:16:36:62:b5:e6:12:34:
         9f:f4:ba:ba:11:3e:66:c8:e1:32:cb:1c:77:94:a4:22:73:52:
         eb:2b:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:09:40 2026 by rpki-client