Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e903749-0c1c-389d-b501-f4d4475940ea.roa
File:                     3e903749-0c1c-389d-b501-f4d4475940ea.roa (raw, json)
Hash identifier:          fmXggNkcRVKAa90W+4J/rPbavBgxinSXtRrW1KAO7eY=
Subject key identifier:   A4:7D:F1:D9:F2:8D:0F:43:64:1A:AA:FB:FC:9B:48:75:BF:2F:68:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86233D2E1AF9D17E58A2B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e903749-0c1c-389d-b501-f4d4475940ea.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        2601:184:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:33:d2:e1:af:9d:17:e5:8a:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3c7ac0a5-f587-4063-a837-eb36b418a6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:b6:ea:f6:e1:b4:3f:53:32:b4:b0:7e:4f:
                    3e:a1:45:b0:66:77:43:bd:f8:f2:a1:89:88:17:36:
                    f2:63:e1:cb:4e:87:61:5f:9c:f2:20:ef:c1:08:6d:
                    38:d3:6a:c4:c5:b8:fd:18:0e:25:b7:14:5c:40:3b:
                    49:d8:80:52:36:02:20:7d:c4:53:ea:be:73:d0:f4:
                    62:5c:83:30:71:34:1e:ce:0f:b6:21:80:c2:ad:03:
                    2e:57:29:6c:4f:69:e1:69:3d:4a:a0:85:3f:e0:43:
                    55:3e:c6:53:c9:b8:d7:12:a5:1b:8c:c0:73:c2:66:
                    da:fe:bc:cb:b0:dc:39:98:dd:6d:15:55:27:1e:79:
                    f0:85:53:f5:03:c7:4d:b2:f4:cb:39:b7:ce:bb:88:
                    d2:47:74:75:24:4f:dc:20:92:85:40:8f:07:1e:75:
                    f7:84:58:a6:ee:cd:c7:50:fc:4d:d3:f6:9b:9c:93:
                    27:0e:90:dd:f7:65:67:3a:fe:5c:bd:04:2c:d6:de:
                    13:be:01:8f:7d:5f:db:e0:d9:5b:4c:5b:46:2c:c1:
                    7e:09:6c:b7:b8:2b:b1:89:b3:ba:03:d4:c7:99:e8:
                    7d:fb:76:5a:b9:26:9c:81:a3:bd:69:3b:e4:0a:41:
                    87:4f:cc:f5:13:86:ae:46:80:aa:bb:dc:d3:63:9e:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7D:F1:D9:F2:8D:0F:43:64:1A:AA:FB:FC:9B:48:75:BF:2F:68:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e903749-0c1c-389d-b501-f4d4475940ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:184:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:43:9c:87:5e:49:4e:fa:b0:7d:08:66:36:57:4a:a3:e4:
         ed:16:fd:3b:6e:1d:e3:4e:b8:11:c3:9e:cd:cf:cb:f1:4a:78:
         88:be:3b:d1:4b:40:83:47:02:1f:51:6c:f8:00:4d:a0:3b:10:
         f1:74:21:1e:95:d0:29:f7:d4:96:95:cb:e4:44:68:18:cd:04:
         d9:69:87:a8:50:5a:7e:b0:31:f1:3e:08:43:5d:4d:2a:68:75:
         77:15:e9:8d:a8:16:78:6f:56:b0:82:4c:5b:03:66:86:b9:27:
         77:46:2f:c5:56:36:84:c8:20:45:38:da:91:8c:18:3a:ac:d1:
         f9:4e:2c:34:04:96:14:ff:59:4e:71:c5:ee:b7:b1:4b:e0:d0:
         7e:62:fd:f8:b7:e8:6e:d1:a5:c1:7b:f2:d6:b6:db:2e:5a:21:
         d1:65:fd:08:d3:0f:4c:97:6d:bd:4b:ca:c2:69:b3:0c:f4:1d:
         c7:ab:d4:b8:76:33:53:26:ca:c0:5b:a8:24:3c:ba:c1:bc:62:
         4a:38:ba:86:93:87:df:89:1c:a1:08:f1:12:eb:ad:49:2e:71:
         4b:c7:75:7a:61:50:7b:5c:db:a0:13:b6:5e:82:64:70:94:69:
         d6:45:d0:53:5a:3e:4c:cb:7f:b4:55:9b:46:10:a9:a8:e0:ab:
         f6:a4:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:53:16 2026 by rpki-client