Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa
File:                     a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa (raw, json)
Hash identifier:          ucQfcM+4Kf6yRWeG133YW5WdRJrMYvlyJ/0Q2J88F08=
Subject key identifier:   9D:27:23:AA:EC:DD:48:50:7F:7C:58:B6:6D:DB:7F:7E:A9:7E:16:75
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ED2CC77EBE0F6B810A4C91D40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa
Signing time:             Thu 13 Aug 2026 13:00:12 +0000
ROA not before:           Thu 13 Aug 2026 13:00:12 +0000
ROA not after:            Wed 11 Nov 2026 14:00:12 +0000
asID:                     8987
IP address blocks:        2605:4300:2c25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:cc:77:eb:e0:f6:b8:10:a4:c9:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 13 13:00:12 2026 GMT
            Not After : Nov 11 14:00:12 2026 GMT
        Subject: CN=96705154-3ad8-43f6-84b4-24153785142a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:46:92:74:52:0a:18:81:d9:9a:fd:f4:69:
                    8b:5d:d4:07:9c:59:39:d3:10:e3:df:75:64:ba:7b:
                    ad:6b:61:46:f5:bc:63:fe:9b:6a:29:87:13:e1:e8:
                    01:7e:32:f3:5a:5c:42:b3:95:27:58:14:90:c9:44:
                    60:ab:d2:a6:d1:53:3d:fc:7a:d2:55:a6:9b:8c:cc:
                    5d:02:6e:8d:26:51:f0:6c:13:ef:1b:55:1a:37:77:
                    83:c1:d9:ae:f1:a3:f7:2c:eb:60:2c:5a:bb:33:f6:
                    1d:d4:eb:0e:2c:d3:42:85:02:72:07:3a:0e:31:83:
                    51:11:9b:12:e6:22:e5:6c:e2:cb:b4:a2:e9:50:17:
                    b9:ab:66:32:2d:69:ac:8f:4a:52:99:2a:1f:f8:59:
                    8d:7d:29:de:5c:ea:f9:06:bd:36:d1:2d:6e:ea:19:
                    5b:c3:2c:22:0a:c4:21:be:13:4c:11:a0:4e:1f:0d:
                    0f:6e:83:01:80:0b:57:47:85:da:78:2f:c1:14:32:
                    e3:bb:df:d9:9f:4a:59:e4:43:7b:83:21:04:37:09:
                    af:f7:93:4a:d5:50:0a:40:7b:65:c8:f7:d3:dc:37:
                    a5:39:92:ba:73:9d:b1:e3:d0:9f:8f:f9:d2:48:4c:
                    78:3f:92:b9:62:e4:5c:4e:93:09:75:aa:71:10:9f:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:27:23:AA:EC:DD:48:50:7F:7C:58:B6:6D:DB:7F:7E:A9:7E:16:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c25::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:78:96:4b:52:a8:9f:6c:76:25:7f:43:8b:49:2a:f7:e9:1a:
         dd:ab:0f:2a:6d:4b:c6:2e:60:7e:24:a6:5c:a4:83:66:4c:80:
         2c:aa:b7:f5:ea:8c:d3:b4:cf:e7:28:e7:c8:9c:e2:93:a3:d4:
         48:32:2a:da:0c:5f:70:a5:b0:24:24:58:2b:d5:62:75:8d:0f:
         ae:5a:f1:9b:42:c6:fb:83:68:04:7a:a8:4d:be:ba:57:36:29:
         f4:74:ef:3c:b9:ae:00:6c:9c:57:61:fa:bc:08:07:73:2b:7b:
         cc:15:66:3e:b2:e3:fa:88:d2:af:2a:44:e8:b9:73:b3:fc:20:
         03:7b:2b:bb:11:fb:73:68:a8:9d:4b:a5:bb:86:94:2d:0b:d3:
         16:7a:6c:2c:91:be:9f:95:a3:0f:f3:fc:12:ba:de:0e:0e:d4:
         70:38:ea:d8:96:8a:bb:fd:6f:25:9e:92:79:57:6e:93:49:3a:
         13:1f:3f:fd:ed:54:14:3e:71:53:ec:7d:83:93:a6:ba:de:7e:
         5f:c3:d3:51:96:1a:2d:f4:b2:d3:62:74:e3:d0:fd:a7:33:52:
         8e:ec:b6:f8:b1:27:83:cb:1a:24:4f:58:6f:0b:8b:fa:7c:2e:
         f2:10:e4:6f:b0:98:20:d1:95:1d:fe:c8:b6:f0:25:35:88:6f:
         f4:6e:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:23:20 2026 by rpki-client