Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96905238-1ee7-3d96-af1f-4c0726eabaf2.roa
File:                     96905238-1ee7-3d96-af1f-4c0726eabaf2.roa (raw, json)
Hash identifier:          j7tRwqW5qRiq+08JNHvHjeBVEhfCG7xwkjvqlf1YNHE=
Subject key identifier:   5E:4F:FA:76:36:D6:DC:DE:03:3A:39:28:1C:B2:42:D8:CE:A3:F8:10
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE7BCA18064E590B6784EA240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96905238-1ee7-3d96-af1f-4c0726eabaf2.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     34164
IP address blocks:        2001:4878:c254::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a1:80:64:e5:90:b6:78:4e:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=84d78793-f575-4da3-9a3a-e690e886bbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:e4:30:69:12:70:b6:fc:69:f5:73:45:a7:
                    dc:6d:ff:23:c2:51:74:18:19:e2:6b:58:3b:a1:ca:
                    e9:b6:5a:b0:98:10:8d:f6:8b:40:bb:13:81:94:c2:
                    8a:9c:16:6d:e9:6f:04:4a:24:b0:ef:d6:4b:77:de:
                    d5:5a:26:3d:21:e2:6d:70:b5:7a:ca:2b:1f:92:2c:
                    fa:0a:02:66:31:19:ce:40:5b:2b:e6:8e:4b:88:ab:
                    d8:59:0b:ba:d3:e2:fc:d4:98:4d:60:a5:5f:10:04:
                    49:31:3f:74:00:f3:6c:68:2a:ec:55:0f:d1:9b:ee:
                    59:6d:b3:75:76:d0:7a:42:1a:3a:f1:7f:53:ee:db:
                    b5:b6:e7:cb:74:0c:3e:ec:84:8c:05:9b:a9:b3:44:
                    cf:14:01:51:0f:ba:d5:1f:a0:02:3b:d6:c9:80:84:
                    b6:36:3a:3d:88:81:55:28:f7:4c:03:d5:82:8d:c3:
                    82:f3:02:aa:2c:5f:c6:ae:b2:97:b9:df:aa:e6:6a:
                    a0:07:ad:ff:ed:0e:76:3f:41:20:37:1f:16:53:97:
                    98:91:cb:d9:88:6b:69:82:ad:5f:2a:2c:2e:b5:35:
                    d3:ea:0c:e9:9d:d0:1e:8a:55:b3:82:4d:46:49:0c:
                    6d:8d:ec:7d:1a:69:5b:32:ec:13:ed:48:8d:2b:69:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4F:FA:76:36:D6:DC:DE:03:3A:39:28:1C:B2:42:D8:CE:A3:F8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96905238-1ee7-3d96-af1f-4c0726eabaf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c254::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:3a:23:29:4f:a2:3d:b9:37:15:d0:53:f5:68:bd:e8:b4:
         34:5c:1e:41:2e:f4:19:f9:27:de:0c:2a:a5:f4:e9:54:b4:87:
         7e:83:47:82:66:24:da:e6:99:c1:b7:8c:4d:04:50:7c:14:8d:
         4a:24:49:f8:a0:c8:fa:e4:3e:d8:a3:e1:fe:20:31:80:5e:f0:
         e5:16:38:87:33:7c:ba:a6:3f:c9:87:46:70:82:53:70:27:3b:
         b9:c6:8a:96:fe:0a:ff:f2:2f:ce:c2:38:3c:1c:51:73:91:b6:
         e1:59:56:ec:1e:71:e3:06:50:c0:cc:5b:3b:f9:b5:75:0b:69:
         b2:9b:3b:e0:24:fc:da:56:58:47:5c:0f:7c:aa:e0:22:bc:b9:
         b0:30:8f:c8:56:f9:65:d7:32:e9:75:26:b5:a2:d1:79:c2:b0:
         cb:0b:ff:1f:22:10:a1:43:db:04:af:e1:c0:fd:87:1e:07:45:
         6e:78:ef:1e:8f:53:14:9a:e5:db:06:2a:c4:cb:58:4c:51:79:
         a2:98:f3:de:cb:c4:86:d9:98:ae:48:f4:23:10:b3:95:43:28:
         b2:18:6c:90:47:12:4e:f9:73:9c:b1:d8:6b:15:9b:0d:cf:68:
         60:10:28:21:f8:f8:01:78:cd:62:46:35:65:8f:b8:e5:68:c2:
         9d:f1:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:11:37 2026 by rpki-client