Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa
File:                     ac48a2d3-854c-3155-92d9-311295bde213.roa (raw, json)
Hash identifier:          jwFxfkth6KMWz0H3su5NkwBzr7TrT55QnJIDUTGlxIc=
Subject key identifier:   10:70:DF:86:B6:C7:2F:A0:D2:3B:FA:E9:62:D5:6E:0B:34:AA:54:8B
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F4986D9A53DE27BA17A1F3780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11537
IP address blocks:        2001:468:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:d9:a5:3d:e2:7b:a1:7a:1f:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9fd4b3fd-44b1-4574-b249-394dde604322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:d1:23:8f:93:f2:75:d0:d2:1a:f7:8b:ee:
                    ee:ad:30:0c:a0:59:fd:4d:2a:77:7b:f1:bb:24:c2:
                    9b:9e:fe:b1:88:cb:e5:0e:09:a6:6d:48:67:c5:e2:
                    fd:60:ad:fe:ea:fd:20:de:9d:f7:2c:2f:ad:c0:62:
                    cd:18:de:44:73:41:96:af:c9:68:1b:23:b7:0b:5d:
                    3a:52:af:96:92:c4:99:87:2f:f3:e6:e5:d1:e8:cc:
                    32:56:41:5a:1e:aa:28:73:3d:78:82:6d:ed:74:64:
                    b2:22:f3:08:51:86:b9:be:d2:24:49:8e:f3:e0:ba:
                    4a:1d:b1:ac:24:3c:e9:6f:ac:d6:0e:95:5e:4d:21:
                    b6:ae:1a:d5:96:0b:e4:ef:11:fa:a4:21:f6:70:b5:
                    0b:d1:7a:4b:20:81:74:24:59:4c:b5:d9:42:b6:24:
                    dc:03:a0:5a:cc:db:80:0c:bb:98:92:04:51:71:e0:
                    9f:d8:d0:a9:4c:b3:10:08:15:06:46:0b:63:67:38:
                    ca:59:dc:50:e6:fa:73:ae:06:69:07:12:bb:33:99:
                    3f:4a:c6:79:a3:ea:62:28:c9:55:39:20:7f:77:e0:
                    cc:b1:9d:16:e2:02:74:0c:9f:2b:db:26:a7:38:ab:
                    3f:d0:32:b4:14:d1:8c:2e:c2:62:e5:c9:06:29:ba:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:DF:86:B6:C7:2F:A0:D2:3B:FA:E9:62:D5:6E:0B:34:AA:54:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:11:74:24:26:3f:a7:ad:36:f0:e7:56:18:17:e3:79:a2:
         d9:84:46:72:ed:9b:b9:2f:64:6c:a3:3b:fd:a3:9c:7b:3c:87:
         69:c2:3e:35:4e:0e:13:fe:55:04:fb:49:50:fa:b2:fa:7f:7c:
         c1:19:26:dc:f4:8f:1c:65:03:44:ea:2d:c0:97:54:e1:79:56:
         1e:a7:d4:4a:a3:b2:59:89:7d:dd:3a:58:66:e8:e3:a8:c9:6a:
         99:37:8d:ab:c3:41:d4:e4:6a:03:f1:6b:21:fb:2a:dd:23:b0:
         21:9d:1b:21:11:af:9b:59:75:a7:ef:1b:9a:a7:4d:55:7f:52:
         3b:c1:d6:ad:93:54:03:ab:67:95:83:29:48:02:08:ec:c3:c6:
         90:fb:ff:50:d0:43:31:2a:d1:94:7d:a3:94:96:f2:be:39:a9:
         09:f0:b4:39:fe:8b:f5:dc:ad:e5:a6:42:bd:4b:99:03:f6:d4:
         16:f9:84:5f:2c:ca:a9:72:25:fb:ae:1a:94:64:88:1a:c9:8d:
         e5:b2:c6:c4:23:ad:c4:61:53:ab:6d:52:a4:87:5b:1b:39:e1:
         a7:f8:96:41:2a:61:47:54:d2:08:e3:39:61:91:14:2f:46:01:
         de:8e:ef:b1:36:60:a1:3e:18:c8:fb:ae:02:b1:02:48:f6:a3:
         72:94:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:35 2026 by rpki-client