Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa
File:                     a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa (raw, json)
Hash identifier:          hHsK3NIOObr/44kU/n2yqXovgu/AZWbsjqJGsd1o/m4=
Subject key identifier:   94:C7:4B:5C:34:35:F6:99:8D:FF:9C:F2:67:CF:B6:79:BA:72:27:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7783012B12F0485162798D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     7016
IP address blocks:        2603:301f:2800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:01:2b:12:f0:48:51:62:79:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=62154f2a-e45c-4e3c-aaf3-e64ca1f0c74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:1e:10:fb:c6:e2:ba:79:81:f0:dd:7e:4c:
                    2a:b6:bf:42:01:c1:90:8f:71:77:5e:b9:82:cd:0c:
                    58:54:c3:ca:27:71:2c:87:e8:64:5f:2b:15:24:5f:
                    e4:9d:ec:44:d9:9d:3a:90:51:37:a7:f6:0b:b3:8d:
                    21:f3:91:2e:ba:8a:98:bf:26:26:0c:05:d5:c7:9f:
                    a3:09:80:5f:a6:ae:0c:8a:12:e5:e0:7d:55:c4:14:
                    9d:d4:07:9d:4f:d5:c0:97:cd:28:3c:f0:41:31:88:
                    cf:8c:aa:27:54:1c:30:fa:63:f9:fb:f1:8b:ee:91:
                    8a:08:28:75:8e:63:9d:e0:4e:55:b9:09:98:d8:5c:
                    d9:c5:1d:6b:4d:71:ee:2f:ba:33:90:49:fa:3f:07:
                    75:72:d1:02:f4:c7:ab:35:35:a5:a4:40:c1:1d:20:
                    9f:a1:ff:0d:f6:ef:f8:ed:83:f9:9d:79:21:87:1f:
                    0d:fd:bb:7c:37:04:67:60:09:cd:f2:91:4d:04:a4:
                    49:81:6a:2f:6d:8d:2d:32:bd:ba:ce:1f:a1:16:e2:
                    be:b1:20:60:1d:f4:8e:25:7d:05:fa:5f:f8:30:4a:
                    c0:9e:b4:98:8e:3d:a3:45:8b:7d:6c:f7:b2:c9:3b:
                    ac:22:65:ed:12:89:72:b2:0f:09:a5:65:cb:6d:13:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:4B:5C:34:35:F6:99:8D:FF:9C:F2:67:CF:B6:79:BA:72:27:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:05:c7:bc:a8:a3:b7:74:99:bc:f6:59:52:e4:09:af:55:50:
         80:0f:34:56:5a:ce:47:01:08:b8:65:c7:cc:f2:6d:0f:ea:4f:
         3a:5d:62:7a:9f:37:9e:00:16:c0:f3:cd:e7:82:81:b2:2e:c2:
         85:ce:4c:f0:bf:3a:08:fd:07:4e:4e:cb:a7:39:8e:dd:75:f6:
         ac:8e:85:44:7d:09:3d:aa:3f:4a:9e:a4:2d:63:7c:70:57:cf:
         44:1b:ba:5b:b4:64:03:6d:8e:ee:6e:a5:96:62:fb:bf:99:d7:
         ee:ab:a5:4b:7f:47:7c:21:dc:c0:47:1a:35:f1:64:bd:87:41:
         da:f8:80:ed:fb:8a:ad:71:62:33:ec:be:19:44:fb:b5:8f:37:
         84:12:28:d8:d7:e4:f6:63:01:bc:11:72:0e:b2:25:b1:30:52:
         1b:c2:e7:74:0a:0b:b7:07:be:0e:64:91:e3:b9:b0:d3:d7:4e:
         4d:b4:5e:6e:4f:6c:8d:6d:98:09:37:3f:24:c7:90:78:d4:2e:
         1d:d2:c5:56:dd:7d:07:73:86:9a:32:89:94:3e:0c:38:98:61:
         d2:c0:1b:51:7c:3a:4f:be:6e:33:0c:1b:24:8d:3a:2f:b2:fd:
         59:17:8f:73:45:5a:43:fa:c9:4f:7e:e3:da:e3:6a:86:83:1d:
         67:aa:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:13:55 2026 by rpki-client