Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ac6a332f-3d85-3884-abac-f1dc271285f8.roa
File:                     ac6a332f-3d85-3884-abac-f1dc271285f8.roa (raw, json)
Hash identifier:          /sfLpDPYGOHPPQJhViIb9d3lwJqT5ShtHSmhI5ZVEo4=
Subject key identifier:   11:86:15:55:17:58:94:B5:AB:CF:6E:1C:8B:2F:40:13:BF:13:98:C2
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4233E43F03D722ABDD64400
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ac6a332f-3d85-3884-abac-f1dc271285f8.roa
Signing time:             Wed 19 Aug 2026 18:03:50 +0000
ROA not before:           Wed 19 Aug 2026 18:03:50 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        2001:418:8:1000::/52 maxlen: 64
                          2001:418:8:8100::/56 maxlen: 64
                          2001:418:dc00::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:3e:43:f0:3d:72:2a:bd:d6:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:50 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=f754e2dd-5b78-45f8-a7b8-6484b6b70414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:12:05:8d:6f:12:3e:2e:55:7b:fe:0c:25:
                    b1:a0:c2:cc:55:21:4a:9b:ae:83:7e:5e:56:fd:d9:
                    b9:4d:e3:58:ca:52:db:30:a4:8f:ee:60:3c:cf:c9:
                    70:e8:92:ba:6e:b4:67:fa:94:64:41:9e:2b:36:18:
                    0b:af:1c:17:bd:2a:6d:6f:de:f4:5b:57:d8:12:73:
                    18:08:d1:a4:d8:cb:ea:f9:31:5a:bc:32:d1:3f:98:
                    ad:5e:b3:b8:23:a7:41:b2:15:fb:6c:24:31:f5:68:
                    0d:19:4b:dc:81:f4:2e:96:5f:34:9f:57:fc:ec:f3:
                    b9:10:6c:55:9b:b0:79:15:c0:49:46:4e:43:b9:3b:
                    af:82:f0:5d:a6:21:26:be:be:4a:04:93:ab:89:59:
                    4c:c5:6f:33:2c:41:35:6f:e2:db:86:05:8a:28:4b:
                    18:8b:88:03:64:d8:dc:5e:b1:f6:af:0e:5c:61:fb:
                    d7:8d:7e:c5:89:05:7b:d6:f7:16:56:fc:10:a9:92:
                    f1:0a:9c:46:c9:bd:b0:86:f3:ce:c6:92:3f:7e:4e:
                    63:2e:f2:af:8d:80:18:5b:97:50:ff:82:4b:2b:a3:
                    08:88:f2:31:82:46:6c:c7:b6:12:fc:6d:63:b7:53:
                    c2:d3:1c:2d:11:46:38:68:fc:c0:bd:b9:3e:8e:41:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:15:55:17:58:94:B5:AB:CF:6E:1C:8B:2F:40:13:BF:13:98:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ac6a332f-3d85-3884-abac-f1dc271285f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:8:1000::/52
                  2001:418:8:8100::/56
                  2001:418:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2d:29:cf:74:c1:00:fa:9a:8c:c6:dc:7f:17:b5:d7:80:72:
         d2:55:8c:8d:a8:ae:5b:6d:ca:a0:83:fb:8e:84:04:9f:32:18:
         1a:92:24:fd:01:61:e8:d6:c3:41:76:07:6e:5f:26:04:a9:2d:
         29:f5:a8:78:4e:ac:e6:c0:08:2e:02:b2:21:c6:bb:61:09:db:
         80:94:65:9d:75:d1:3e:6c:ad:20:83:ab:bd:9a:d6:6b:5f:fa:
         4c:70:65:ac:b0:22:4e:f4:7f:91:5c:a4:e7:1d:df:85:84:07:
         fd:a5:75:d0:c4:fe:43:06:79:33:25:40:16:38:85:12:40:ad:
         81:33:a1:e6:6e:1c:d1:df:be:ff:9f:d9:c7:78:0b:d5:ac:06:
         6d:b9:fa:be:06:9a:99:fb:14:e4:90:77:49:51:a5:43:3c:aa:
         ba:8d:c1:de:0a:a9:00:5a:06:00:9e:73:31:d3:20:6e:62:b0:
         b3:fc:f6:26:af:48:00:9f:57:22:3a:c3:01:05:bc:ef:f4:31:
         86:ee:a6:dd:6c:92:cb:be:00:b2:8a:b8:04:2b:da:e4:88:3f:
         18:9f:89:4b:36:05:02:0e:48:07:e6:50:7f:41:fb:6a:74:b5:
         a3:65:b7:4d:b5:9f:5f:1d:d5:d5:c3:c0:e8:33:c4:f7:f3:7c:
         b7:ba:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:13:51 2026 by rpki-client