Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/62c7affa-91d5-3e6a-9d6f-d9f13f6bc8f4.roa
File:                     62c7affa-91d5-3e6a-9d6f-d9f13f6bc8f4.roa (raw, json)
Hash identifier:          Sw3eCpmWTa0bKnTqn6ZjWsGE/0kdlQpNVBdEm2LS1pU=
Subject key identifier:   A4:A8:6B:F5:BC:FC:CF:AB:2A:B5:BB:C4:7D:AF:51:A0:A3:E3:52:90
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2EEFF725FEECC97BAE580
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/62c7affa-91d5-3e6a-9d6f-d9f13f6bc8f4.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        2605:4300:1c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:ee:ff:72:5f:ee:cc:97:ba:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=f21c0958-e78d-498b-9176-c0185b15ea3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:cb:4c:95:61:78:58:8a:1e:f1:16:c8:63:
                    04:40:e3:7d:1f:9e:0f:a7:8f:2f:dd:21:21:7a:a1:
                    c9:6b:f8:16:70:dd:dc:80:ea:42:ab:90:81:1e:f2:
                    40:d6:50:48:3b:2b:dc:8b:48:8c:bc:c3:39:31:a8:
                    4c:c8:87:d7:7f:5a:ad:3d:3c:2d:92:9e:78:db:3f:
                    8a:20:c7:a9:d9:50:2f:b5:c2:ce:a2:59:ae:59:0f:
                    c3:4d:40:53:f5:92:7a:94:d5:3b:81:5f:83:c8:ab:
                    c1:94:bd:ef:eb:b2:4d:f2:c0:01:47:a3:5b:36:ca:
                    53:73:4a:de:f5:0d:44:87:02:97:94:98:23:1b:74:
                    ca:d9:44:b4:92:d3:19:2c:ad:41:e0:f6:b0:7e:be:
                    70:f6:ba:89:7d:41:93:7f:4f:cf:f2:f2:90:31:9f:
                    9e:e5:1c:54:cc:c9:b6:75:03:cd:e5:01:a5:74:00:
                    d8:fa:07:b9:30:68:f6:9b:f7:c6:00:a8:eb:06:f6:
                    72:c7:ee:bf:6c:fd:7f:74:93:5e:3f:32:ea:01:66:
                    94:62:2a:01:2b:56:42:2c:0b:cc:53:6c:08:f3:3f:
                    b9:3c:af:a7:d0:fe:5f:fa:67:66:44:86:12:aa:5a:
                    0b:9d:3c:75:f1:0b:c9:93:cf:98:ec:1b:3d:5d:54:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A8:6B:F5:BC:FC:CF:AB:2A:B5:BB:C4:7D:AF:51:A0:A3:E3:52:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/62c7affa-91d5-3e6a-9d6f-d9f13f6bc8f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:1c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:65:e9:af:f1:8f:26:2b:f8:32:cc:96:8e:0d:1c:08:00:b7:
         56:c2:17:f7:18:95:e2:10:52:cf:f1:98:b9:61:ed:36:7c:79:
         8f:f2:83:14:ea:cb:59:64:29:6f:d0:97:00:c6:bc:3c:69:8f:
         dc:bc:89:0d:96:d6:44:fb:db:47:2e:e2:bc:af:3b:ab:2e:a4:
         51:49:57:df:58:01:14:06:5b:86:be:8f:cd:c6:f0:24:a5:ea:
         86:b6:86:8d:4d:29:70:ff:a6:04:c4:20:c6:9c:81:72:93:4a:
         62:11:7d:e0:f7:f6:0f:1c:0c:ab:36:a2:90:7e:06:c1:bd:5a:
         3b:81:f1:40:a3:b4:22:95:0f:bc:60:18:43:a0:39:e9:30:2a:
         d7:bc:31:cd:17:bd:bf:35:c1:a7:cb:de:e7:e2:36:45:dd:ca:
         d3:87:ca:f8:00:3b:11:10:12:f0:66:c4:b1:c8:0d:70:fe:df:
         0c:f1:d2:63:11:e6:26:6b:15:4e:64:ce:11:91:82:60:13:1f:
         b2:52:eb:44:f6:37:66:d3:2d:ef:4c:58:2d:c7:ca:d5:5f:81:
         fc:89:04:b3:20:a0:4c:92:10:29:fa:75:1a:0b:09:ef:3b:2f:
         9e:75:cb:06:02:1e:98:83:b1:17:dc:cd:16:95:fe:6b:81:92:
         a2:4a:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:36 2026 by rpki-client