Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/384f22a9-c932-3657-b15f-e4c3ea8f192f.roa
File:                     384f22a9-c932-3657-b15f-e4c3ea8f192f.roa (raw, json)
Hash identifier:          trgQIHykwWX7uaIGbCAG6+99G0D/1a/OuTmb40jo/cM=
Subject key identifier:   83:98:5A:5F:0E:9D:10:85:5D:E8:0B:BE:82:FB:42:9D:6A:64:72:86
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F119D1244098D228732975D00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/384f22a9-c932-3657-b15f-e4c3ea8f192f.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        2001:418:1456:b15::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:12:44:09:8d:22:87:32:97:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=b453cb74-ffe0-41af-8bf3-c16a8145ade1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:7a:03:93:7c:8e:51:ce:8d:37:93:d4:ac:
                    02:99:52:e1:2c:ef:e5:e6:c5:f3:52:de:97:69:0a:
                    42:5e:0f:38:8f:5e:e3:ed:5e:36:b8:fc:e8:f0:81:
                    ae:fc:cf:bb:f9:6f:17:2c:a8:26:84:d1:76:b2:ce:
                    a7:52:a3:e6:a5:f8:44:b0:83:10:a7:28:dc:5c:d9:
                    d1:ad:04:58:97:e6:17:2a:ce:2c:17:d0:94:4c:02:
                    74:c5:ae:a1:e7:9a:06:5e:2e:88:f0:8c:6a:0c:a9:
                    33:d8:72:0e:09:73:7c:c4:58:e7:02:91:3b:4a:44:
                    6a:dc:12:0a:cd:eb:83:61:4d:cd:12:a3:cc:c4:c7:
                    8b:4d:f8:8a:ff:ba:83:9c:f7:a4:f7:70:5a:a0:43:
                    a6:f3:cc:15:f2:40:fb:e3:82:dc:4f:96:e0:85:2c:
                    8c:ff:f4:a5:fd:3c:14:f7:ca:3d:59:1b:2c:8d:00:
                    8b:34:ef:c4:29:35:f6:48:11:ad:05:ae:30:5d:a0:
                    03:85:fb:8f:ff:49:b5:d5:d5:7c:84:39:74:ca:a2:
                    e1:82:e2:63:ba:db:b2:b7:3b:82:9a:c5:de:3c:e8:
                    d3:48:02:a0:04:2e:7f:aa:ec:c6:b4:79:05:9e:09:
                    70:de:87:1c:6f:70:70:f1:df:b7:84:e8:f2:9a:48:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:5A:5F:0E:9D:10:85:5D:E8:0B:BE:82:FB:42:9D:6A:64:72:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/384f22a9-c932-3657-b15f-e4c3ea8f192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b15::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:50:3d:d4:de:ff:b8:15:09:4e:ec:8e:8e:5d:84:4e:b3:de:
         48:34:47:19:8d:07:8c:1c:5e:57:64:16:ec:c6:a4:ab:b6:4f:
         5e:6d:ae:d7:53:08:aa:9d:2f:b7:8c:57:f6:fe:a2:22:cc:73:
         13:be:67:19:e1:4d:a2:00:ec:bc:eb:a3:be:d2:3d:13:81:b5:
         df:d0:a5:85:71:8d:e4:f3:1d:50:b6:4a:c0:21:04:74:97:c7:
         e9:1b:c3:43:c3:78:16:30:d3:17:b0:6d:d3:51:c7:ec:21:b0:
         67:2c:62:62:ca:0d:0e:66:2d:a6:c5:bb:78:d6:fe:f5:6d:33:
         df:f9:f7:9f:d3:2b:fa:2b:72:56:46:e3:d6:67:2b:ec:9e:84:
         80:1a:b7:43:fc:92:3e:48:6c:91:68:9a:54:c6:c9:ff:5d:d6:
         38:6c:50:0a:db:79:09:7b:aa:1b:23:84:6d:ba:b3:75:dd:ea:
         3c:91:b7:51:7a:5d:d3:79:1e:01:e1:11:93:f0:c8:b0:7c:dd:
         9d:29:10:9b:87:b1:26:50:68:ba:42:91:e7:1b:0f:92:18:cf:
         79:35:ec:2b:7f:a6:60:eb:3d:a0:a9:7e:7d:07:2d:9e:47:d1:
         aa:5c:07:7a:ca:a1:5d:96:1f:1f:10:f4:dc:16:bc:63:48:c7:
         33:71:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:11:35 2026 by rpki-client