Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
File:                     2953b610-a434-3572-bb79-1dcab516be48.roa (raw, json)
Hash identifier:          GaX3XUaoe1f1k+dvAnPuBMUb9N7o336TVp6vsk8KOVs=
Subject key identifier:   B1:DE:08:1F:A3:81:DB:7D:85:B8:11:58:FB:C8:2C:BD:18:D2:15:2D
Certificate issuer:       /CN=c939804d-392f-4714-a1f1-89eb4660daf7
Certificate serial:       010D0C9F4328584F63F80DE08290F10F89335110
Authority key identifier: C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     11990
IP address blocks:        2605:fa80::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:0d:e0:82:90:f1:0f:89:33:51:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c939804d-392f-4714-a1f1-89eb4660daf7
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=04c81bd2-da55-4d65-878a-27d3fb3c7e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:e4:19:18:c5:0e:9e:51:e0:6c:09:98:50:
                    70:ac:c0:f7:fb:e3:f3:f0:b0:ec:52:53:e0:ee:87:
                    b3:ab:4e:64:34:f8:86:8b:da:d8:51:74:e4:55:18:
                    a5:1c:99:19:66:16:1c:d6:a0:3e:d9:98:0b:31:c1:
                    d1:7b:4a:c3:90:c5:93:66:55:f4:0f:a1:7a:f2:c6:
                    19:5c:76:60:77:e9:a0:0f:a6:ed:57:44:7d:2f:55:
                    64:c0:4a:2a:89:8f:6f:4b:1a:d3:94:49:04:a4:e8:
                    ee:4c:d0:23:e5:2e:88:26:d9:7f:e4:8b:3e:57:98:
                    50:52:de:2c:57:14:3c:4b:a8:de:5a:8c:e0:a6:ff:
                    a1:94:32:61:d3:d2:22:4e:51:36:8d:1b:4d:2c:20:
                    9d:0f:03:ed:14:79:22:b4:f2:fc:bf:7b:8e:bc:89:
                    39:86:1c:ac:7e:f1:5c:02:86:f3:41:06:1e:6d:90:
                    60:3f:8e:36:3e:3b:f4:74:07:3e:dd:a5:68:eb:f1:
                    18:58:27:0c:e4:0d:8c:73:73:88:03:0f:42:e8:d8:
                    10:1d:6b:94:ec:57:e6:3b:fd:e4:4a:cb:f4:d7:a1:
                    1b:d7:1c:1b:f1:68:c0:22:5d:53:2f:d6:84:ba:a2:
                    53:ff:f5:d2:49:08:c4:f1:b6:80:91:e5:05:21:27:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DE:08:1F:A3:81:DB:7D:85:B8:11:58:FB:C8:2C:BD:18:D2:15:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl

            X509v3 Authority Key Identifier:
                keyid:C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fa80::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:17:af:b6:c8:77:33:e2:d3:0a:42:71:64:39:b7:2e:40:0c:
         a5:9e:cc:94:64:44:00:a4:30:58:2c:f8:a1:e5:03:ab:99:2a:
         05:af:d0:a4:fb:69:b6:b6:7c:ba:85:5c:de:ff:5a:57:d3:14:
         a0:63:11:42:4a:61:b3:cd:96:dd:e9:11:9f:d2:4d:73:c6:65:
         c0:a9:5b:f3:d2:d1:1e:2d:d2:2f:7d:50:f8:c8:15:50:b0:3f:
         3d:df:c4:31:de:28:a7:e6:d4:2c:bb:ea:bd:48:97:0b:01:e7:
         10:19:6b:db:9b:89:54:53:7e:5e:4e:99:58:3d:dc:0c:0e:c8:
         6f:97:6b:c9:45:ce:f2:54:e0:48:8c:5f:a5:9e:a9:eb:1f:86:
         55:77:54:00:fc:a8:2a:db:4b:bd:24:99:aa:ef:21:6c:a6:06:
         5f:15:7c:3e:6c:34:3e:6e:6d:6b:ff:96:36:86:86:66:28:6a:
         ef:7c:6e:fc:89:21:11:9d:a7:06:75:03:55:8d:47:9f:a6:e1:
         91:d4:dd:b4:54:24:0c:57:3d:ae:d5:cf:ad:fd:7a:3a:1c:98:
         f2:a8:6c:b9:b3:77:89:18:7f:76:72:d4:bb:17:37:85:9a:ad:
         c9:c7:96:68:1d:66:9d:15:61:7c:97:df:3c:f0:a8:0a:f9:80:
         95:fb:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:46 2026 by rpki-client