Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa
File:                     cf900358-a274-3b37-a41d-296981ab2973.roa (raw, json)
Hash identifier:          DjvaJ+PcptbtoApomQTWDvZw1ju+6CCOFJMG8p4DcqQ=
Subject key identifier:   FC:BE:5B:79:87:CB:26:E6:47:6F:97:FC:85:A0:76:D5:3A:A4:8E:64
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF734F040F9735E2586BB00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        2605:4300:2700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:34:f0:40:f9:73:5e:25:86:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=adbbc16f-b4e4-4177-b58d-73b31f780f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:d2:cf:e0:34:91:21:f7:fc:06:3b:dd:b0:
                    03:cf:c6:a9:c9:58:3b:b7:e7:e7:11:6f:27:81:97:
                    dd:fb:a1:fd:ea:3e:4f:d6:4c:28:26:e7:e7:e2:d1:
                    ca:a6:47:98:c5:74:13:16:7a:4d:dd:d4:1e:ad:8f:
                    40:ab:6f:86:22:f9:1b:a2:1f:23:6d:bf:60:65:09:
                    fb:7d:42:e6:7f:1e:d4:e4:a6:86:0d:31:d8:70:b6:
                    75:3d:a4:9e:ea:0f:6e:f6:a9:c4:95:e2:62:86:3e:
                    a3:bd:d8:95:20:69:6f:ce:24:97:87:b6:33:90:cb:
                    9c:f6:ca:b8:0a:63:03:6e:0d:37:88:4b:a6:2f:61:
                    10:20:d7:04:d3:90:e5:d7:e4:74:fd:82:7d:21:16:
                    06:6a:e3:2a:71:c5:6e:a2:45:9b:ec:91:7b:03:cd:
                    8c:3e:f9:e1:11:05:89:c5:57:7e:80:e4:46:1d:35:
                    36:5b:06:5b:61:a4:0a:0b:b5:88:28:bb:09:68:26:
                    ae:90:66:a6:a9:8d:4b:62:f0:99:f9:19:e9:c1:da:
                    2a:d8:bb:23:3c:b1:4f:a5:58:da:d4:a8:17:97:b6:
                    19:9f:8e:1b:2a:07:e3:7e:bb:15:bd:a6:0e:e6:83:
                    80:1c:d0:21:31:35:52:48:9d:92:8b:12:83:37:04:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:5B:79:87:CB:26:E6:47:6F:97:FC:85:A0:76:D5:3A:A4:8E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:bb:65:3c:79:02:9a:32:86:de:07:2a:46:61:c1:42:67:
         66:bb:ac:95:15:bb:6e:8c:f2:39:c7:17:65:33:82:47:37:6d:
         07:e7:3a:8b:96:79:6f:2d:8d:2a:cd:4f:7b:32:77:87:d0:6d:
         1c:59:3c:cc:26:49:d7:e1:5b:64:d9:35:ed:f6:13:02:10:13:
         47:72:41:46:fa:06:1f:0f:49:d3:82:c6:15:8a:f0:ac:c4:59:
         06:cc:86:1e:a6:f9:ab:d3:77:df:cc:9f:f7:02:a7:8a:c9:7b:
         3f:f6:4f:36:51:10:5c:9a:52:aa:a2:72:4f:26:ac:c3:6f:d4:
         81:1a:c7:e2:6a:a8:0c:27:66:26:17:33:6b:bb:a8:fb:4d:ad:
         57:ef:dd:98:d7:d5:da:b6:2a:a5:7b:41:b0:fd:ef:13:a2:07:
         3d:7d:f3:f3:59:59:92:6e:75:94:a6:ab:47:ea:d5:7d:09:e8:
         55:41:d5:ad:70:2e:bc:a6:b8:05:0f:8b:5d:f4:41:bd:f7:b8:
         d5:65:4a:85:d0:74:88:91:69:a0:bd:b3:e1:aa:e1:c3:25:c4:
         62:ed:be:16:e3:5d:01:a9:eb:30:d4:22:33:82:f0:cf:06:e9:
         1a:2b:04:e8:4a:e6:58:f3:75:5a:a0:9c:55:08:77:17:60:8e:
         72:4d:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:23:29 2026 by rpki-client