Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
File:                     46e2c153-590d-39ff-8e1c-3e16eabe188f.roa (raw, json)
Hash identifier:          cAdRSW65optpe3/6kH9psCWhsYjhT1WzB5nO+JyTY80=
Subject key identifier:   1A:3F:7F:28:D7:D3:88:8B:6B:51:C7:C0:C7:84:AC:D1:51:EA:7F:92
Certificate issuer:       /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial:       010D0C9F4328584F89A872BB4F954BAD9B09FEC0
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     394177
IP address blocks:        2607:29c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:72:bb:4f:95:4b:ad:9b:09:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=a56c8a48-1e1c-42a4-bd52-4426a9438f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:be:cf:de:dc:fa:b9:9f:ba:31:ee:ba:50:
                    d0:77:89:cc:58:72:77:19:a5:44:54:12:aa:22:1f:
                    8b:a6:cf:03:6d:f9:9d:99:51:80:cb:47:8b:76:24:
                    88:5f:d0:7f:ea:aa:25:c8:9b:dd:b1:87:ab:18:b9:
                    3b:f5:e6:52:c4:c4:f4:75:93:b9:2b:78:1d:e2:3b:
                    62:11:fd:0e:85:4e:c8:33:74:4f:88:8f:af:d7:0e:
                    69:59:41:13:40:de:49:30:0d:a7:d5:2f:91:bb:8a:
                    c0:21:0f:bf:dd:77:3f:d4:ca:87:20:7f:13:11:2c:
                    72:95:6b:43:05:2f:df:9a:b3:c5:c7:8b:88:0c:fa:
                    43:14:2f:db:cd:63:65:e4:19:4c:43:5b:24:05:21:
                    d4:92:36:c1:96:19:ce:a1:df:56:91:8b:46:0a:1b:
                    ca:e1:eb:51:eb:4d:fa:02:9c:93:ba:5f:26:b7:50:
                    88:89:3c:1e:8a:28:cb:79:bd:28:8b:eb:6b:91:df:
                    72:15:fd:c3:62:43:70:ca:88:5f:5f:42:fc:6e:a8:
                    bb:44:2b:d1:03:26:bf:5f:82:e1:07:fb:86:d2:ac:
                    8e:18:2e:37:39:cb:bb:f8:54:e8:07:f3:39:14:cd:
                    0a:54:b1:65:4e:89:37:4e:b3:db:5a:31:81:a2:19:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3F:7F:28:D7:D3:88:8B:6B:51:C7:C0:C7:84:AC:D1:51:EA:7F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl

            X509v3 Authority Key Identifier:
                keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:29c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:61:2b:ae:6f:5f:ba:d7:40:d9:b2:c2:b4:35:7d:d3:aa:
         04:5c:1d:70:9d:b4:f8:32:22:f2:16:8e:f6:5d:c1:2f:20:99:
         25:ce:fa:1f:23:43:93:5c:b5:08:82:61:73:c4:0c:4d:47:ac:
         b1:2f:b8:a5:d4:60:c4:7c:37:7d:5c:7f:1f:ac:0b:51:04:6e:
         e3:b6:1a:da:e4:b3:a1:f6:29:06:d0:84:1e:ee:39:1d:e3:ad:
         86:65:6d:b9:e2:81:a3:9f:70:b7:78:b5:17:0b:96:1b:11:9b:
         f4:2b:61:51:c7:2f:2e:f8:eb:fd:9d:d6:7b:81:20:f1:9c:99:
         a4:32:94:cc:e3:8d:92:59:83:0e:ba:24:af:a3:3d:a2:3d:9b:
         db:87:21:fc:76:35:f6:03:72:12:a5:a5:e8:e8:2b:91:7c:a8:
         a9:d9:38:45:d1:f3:29:fe:ba:5f:7f:e4:25:fa:25:99:b2:e4:
         86:b9:7c:62:fa:24:eb:f1:78:26:28:93:38:77:83:70:69:a0:
         7e:14:c2:0b:c0:3f:ad:fb:d6:ae:41:51:3f:1f:7e:e9:5c:b4:
         36:56:88:36:4f:ab:3f:db:55:bf:a6:70:c1:36:19:2e:d1:4e:
         f5:bb:22:35:98:38:40:62:44:5b:ed:7a:13:25:61:ba:4f:5c:
         01:e1:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:14:13 2026 by rpki-client