Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa
File:                     28d0aa5b-9621-3eac-b529-dc66454f737a.roa (raw, json)
Hash identifier:          ztumtgKY5zPsal8UaUujHx8sg/A2cqVryBVttxmWJXw=
Subject key identifier:   A1:8E:42:26:C3:AE:90:EB:6C:9A:1B:D3:AE:5E:24:03:A4:59:49:BE
Certificate issuer:       /CN=0a609de0-040f-42a5-990f-417b65a086a6
Certificate serial:       010D0C9F4328584EE0C205DEE866EC2A68866A00
Authority key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     20347
IP address blocks:        2605:7540::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:05:de:e8:66:ec:2a:68:86:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a609de0-040f-42a5-990f-417b65a086a6
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=3760b958-7b09-46f9-91c0-4bed08fd3c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:1b:c8:cc:41:cf:43:ff:8c:f5:19:35:14:
                    fb:a7:7d:eb:22:32:4b:30:db:29:ab:c8:0d:ec:2c:
                    07:a5:85:57:4f:50:78:a9:9c:fe:64:b5:95:f3:07:
                    92:0f:f5:87:90:ee:ba:2c:1b:3a:46:4f:9d:24:9d:
                    d9:8f:b9:84:db:4b:7d:43:cb:28:36:2a:e4:df:c4:
                    0c:ae:97:e3:06:59:d7:3e:2e:a1:b3:ad:59:0f:9f:
                    12:ce:bf:1b:bf:35:9f:6e:47:60:13:57:e4:ac:a8:
                    06:6b:a8:07:36:18:32:e7:82:c3:d7:74:0f:20:03:
                    4d:8c:f2:99:0d:d6:b9:87:02:87:64:a1:6f:94:f0:
                    ab:d3:cb:1f:f1:a9:de:35:ce:41:98:28:3f:27:fe:
                    46:bb:73:91:17:64:35:f3:82:32:0d:bc:f4:16:e0:
                    e8:3b:26:79:4e:57:1d:03:44:d8:9c:94:cb:f3:74:
                    87:3e:91:db:65:63:a1:60:ba:21:e9:dc:ce:d1:04:
                    29:53:56:8e:f7:ee:79:33:f8:fd:df:3d:01:b8:83:
                    b9:a9:c6:b4:02:f1:5d:95:2e:9b:c1:e7:fd:35:d5:
                    42:96:ed:72:08:d3:34:97:4c:4a:fb:7c:57:17:91:
                    e1:fe:ae:ae:a6:69:fd:6e:51:c5:4d:9f:9e:4a:0e:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:42:26:C3:AE:90:EB:6C:9A:1B:D3:AE:5E:24:03:A4:59:49:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl

            X509v3 Authority Key Identifier:
                keyid:F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:a4:bf:68:fe:3c:ab:15:a2:93:c4:40:69:55:e2:a0:d3:
         de:62:7c:57:58:a2:b0:63:02:a4:6d:9d:be:b7:5a:7d:ae:b1:
         10:c1:c3:9e:b0:50:85:8c:52:31:14:e8:07:33:5b:ca:75:88:
         b1:5a:76:0b:c1:83:d2:a4:1e:1f:47:75:89:f0:fc:fc:ec:5c:
         27:29:78:d2:74:12:25:9f:9b:f2:48:66:9e:26:b5:f1:e9:8f:
         54:c0:f0:92:ed:07:f8:6f:e0:dd:df:21:29:b5:5e:1f:29:7a:
         ca:f1:bb:51:ce:ef:cf:ae:3d:3e:e8:da:2c:26:5d:54:75:7d:
         3d:ab:d6:79:c0:e7:71:70:3c:d4:62:c7:6e:73:d4:12:04:f4:
         61:3d:19:55:ef:e2:10:62:bc:18:5b:97:00:7c:6b:bc:55:5d:
         c0:bd:5a:57:06:da:94:b9:41:39:f7:b9:d4:80:75:72:8a:dd:
         e5:e7:b8:52:c8:6c:4a:19:3b:b1:aa:2f:d5:67:a2:e6:e3:55:
         ef:6b:37:d8:7e:19:42:7c:af:94:f2:ed:85:fd:8a:be:c1:5f:
         99:92:37:2c:0c:45:f2:80:da:32:1a:0d:3f:e2:0d:c4:a8:8a:
         d7:6b:f8:31:77:06:7e:81:29:1d:5f:37:00:6c:6b:cf:91:d9:
         56:b9:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:05:59 2026 by rpki-client