Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa
File:                     cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa (raw, json)
Hash identifier:          QdfEtBzP/tIm/VauyKEqicm+EmimHhOwVrHD+ueXjeY=
Subject key identifier:   ED:3A:51:54:97:64:A9:62:63:3A:36:5A:9F:C5:45:65:95:F1:D9:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78F8EFCDC15DD83FF45B680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:141c:3800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:8e:fc:dc:15:dd:83:ff:45:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9dff4520-949f-4bbb-8660-95c3a5a8d00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:36:02:20:a5:d4:df:b6:d2:95:67:97:1c:
                    d4:40:27:00:4f:a2:17:47:29:dd:a8:63:b2:a5:d4:
                    90:f3:7c:0f:de:df:41:38:cc:44:0e:48:4d:3a:0c:
                    24:6d:28:d2:14:73:22:e0:f8:33:50:b6:f9:ed:98:
                    e6:1e:f2:b3:77:f9:26:1d:00:47:ed:83:2d:b2:40:
                    8c:d7:43:ce:44:6c:a7:dc:54:5e:2c:96:5d:3f:fe:
                    0f:cc:c0:65:d8:6c:a7:53:49:63:11:7c:ac:da:6b:
                    22:cf:eb:3e:58:f2:da:c4:0a:e4:0c:d5:fd:5f:fd:
                    5d:86:b1:6a:f1:4d:29:54:f4:d1:fb:67:fb:43:90:
                    9a:41:b5:95:7f:d1:5b:74:fc:25:de:a8:11:ec:ce:
                    3d:38:cc:5e:40:69:1e:50:20:7f:f6:ca:de:ec:28:
                    d8:91:37:b0:65:36:26:1c:bd:9b:b0:f9:7d:ab:c8:
                    f8:72:ea:65:97:07:01:00:64:be:19:f3:6f:3d:fa:
                    2a:b5:7a:e5:a2:f1:63:80:0d:69:59:6e:c9:9c:ff:
                    e9:66:fe:5e:91:21:96:10:4f:72:bd:b2:0b:f4:99:
                    18:4b:75:29:bd:06:d1:26:7f:ca:fd:1d:70:c0:fc:
                    60:09:69:0b:46:60:40:70:e0:eb:f4:ee:69:4d:01:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3A:51:54:97:64:A9:62:63:3A:36:5A:9F:C5:45:65:95:F1:D9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:3800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:01:f0:c2:fc:45:24:38:04:40:aa:7b:c0:1d:a6:00:08:db:
         96:1a:1d:e4:f6:3d:bd:0c:da:08:f2:8c:c4:d4:1d:a5:93:85:
         d7:7f:32:b8:5f:38:0c:df:c8:5c:69:35:a0:21:12:d4:68:31:
         53:55:f4:00:0d:7a:4e:1f:94:e6:8e:0f:a3:b9:fe:77:1e:1c:
         a6:cc:4a:1c:a9:fc:16:9b:a5:4c:0b:d9:4e:2b:d3:f9:96:d5:
         33:36:d3:94:d7:f4:a3:5d:1e:ce:74:de:4e:b5:fb:7c:b3:3e:
         d3:39:d4:8b:be:a1:49:22:55:d7:dc:3b:65:bf:f7:4f:f9:d9:
         11:43:f0:57:80:d7:2f:f4:39:c3:b8:bf:63:9b:c5:62:d8:20:
         ad:b6:d7:34:af:4d:c3:8d:b6:93:cd:d7:00:cf:f8:11:03:48:
         87:79:2c:a3:30:f5:ca:e1:43:92:1c:5f:5f:2f:b4:5f:93:44:
         ff:2d:03:1c:75:31:28:3c:ff:79:b4:54:a1:c9:42:13:0b:83:
         cc:86:eb:0a:ad:45:a3:9e:f9:ce:f2:55:b6:6e:e7:d9:6f:b9:
         86:bc:65:2d:97:c0:98:7d:77:9c:88:cb:14:0b:d0:b6:5c:b7:
         1a:36:ed:61:56:1e:e5:04:6a:28:52:13:46:39:b9:25:7e:be:
         e1:a5:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:25:35 2026 by rpki-client