Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ca484b46-ee28-30b9-9758-dd97a15bb310.roa
File:                     ca484b46-ee28-30b9-9758-dd97a15bb310.roa (raw, json)
Hash identifier:          D0/0KwR2Sp93fUdoFmWgYf1JwnGQ6WNP1PmcbF8+hzQ=
Subject key identifier:   FA:AA:A8:52:2A:9F:A8:EA:08:12:60:9E:34:DB:44:70:2A:F5:76:78
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584F067244D91BBDA1B6B7707240
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ca484b46-ee28-30b9-9758-dd97a15bb310.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2607:28c0:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:44:d9:1b:bd:a1:b6:b7:70:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=e5b5f358-da16-4892-9397-cae74a3175b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:fa:bc:20:8a:84:4c:df:f1:1c:ea:60:8a:
                    25:9d:e5:17:eb:4c:d4:35:a0:75:c4:74:0d:14:63:
                    f0:ce:90:e3:ea:5f:11:22:7a:04:b1:4d:32:9b:9a:
                    3b:a3:08:39:dc:06:73:f4:8c:c0:7b:33:e3:f5:c7:
                    36:40:8b:d6:a2:2a:63:c5:2e:6e:42:45:e9:db:b5:
                    c5:9f:41:b4:cd:7e:53:a8:aa:4d:cd:f7:52:bd:3c:
                    1d:a1:e4:d6:53:91:1f:30:8c:85:23:fc:a0:80:32:
                    dd:ad:51:e7:6b:19:7e:a2:57:6e:a8:09:a5:89:0d:
                    b8:db:14:06:d8:e9:6f:09:8b:9c:62:a5:8b:16:0c:
                    0a:72:73:a1:f7:f0:a4:59:ed:4b:f9:5d:0e:0c:7a:
                    c9:7c:33:fe:2b:de:63:2a:df:76:5f:9b:54:ca:de:
                    8d:e1:56:cc:9e:2d:2d:60:c1:2e:75:1a:4b:9a:ea:
                    20:3e:fa:e4:54:9f:e8:5d:ae:65:36:63:d0:0d:94:
                    b0:6a:1e:7b:74:f3:d2:c2:d5:07:4f:e1:5f:e2:de:
                    32:50:4f:28:2a:23:24:89:65:a3:a8:c6:5b:31:23:
                    62:3d:c4:02:1e:91:d5:e8:39:66:f2:3f:e0:47:db:
                    6a:90:64:b8:cc:bd:eb:94:00:9f:00:6f:1a:25:96:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:A8:52:2A:9F:A8:EA:08:12:60:9E:34:DB:44:70:2A:F5:76:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ca484b46-ee28-30b9-9758-dd97a15bb310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:89:22:e7:f5:b6:f3:10:1d:e9:c4:10:ee:50:b2:2e:11:4e:
         35:3b:ae:89:35:c6:ef:bc:35:a7:fa:0e:d6:a8:04:6c:ca:8c:
         c6:29:ea:65:a7:c6:f6:ae:90:2a:bd:08:b6:8e:9c:c5:bf:00:
         e3:e1:29:22:70:c1:3e:05:8e:17:27:19:cf:ef:14:61:d2:0c:
         c9:fb:74:a6:f3:5f:5d:7e:4d:d2:7a:ca:f5:78:91:2c:c3:64:
         c4:fe:ef:9e:55:b5:73:49:dd:8d:e1:95:b0:76:38:f8:16:97:
         65:67:3e:84:83:60:9b:bd:64:f0:ca:23:af:09:dd:69:c4:f9:
         b7:6d:d5:fd:cb:b4:ed:3e:55:e6:6d:01:52:9f:fa:f4:65:96:
         70:5c:2c:3a:6f:63:58:98:ec:49:66:55:ba:a2:1e:b0:6d:07:
         f6:a0:80:26:16:65:e7:80:27:7b:9d:20:65:4a:4a:15:b6:83:
         b2:e9:8a:30:c2:1d:c7:e2:f3:ab:af:c6:1a:ae:ce:f2:c8:de:
         8c:7f:3c:0a:37:da:44:e3:c0:9d:2f:b4:5f:76:18:bd:22:aa:
         ba:a5:74:cd:5f:cf:2d:8b:3e:07:7e:6e:f0:21:3d:d4:60:07:
         12:fe:d4:12:6b:cb:7e:a3:f8:00:13:9a:31:ce:9a:72:98:35:
         fd:33:78:5c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8GckTZG72htrdwckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTViNWYzNTgtZGExNi00ODkyLTkzOTctY2FlNzRhMzE3NWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAr6vCCKhEzf8RzqYIolneUX60zUNaB1xHQN
FGPwzpDj6l8RInoEsU0ym5o7owg53AZz9IzAezPj9cc2QIvWoipjxS5uQkXp27XF
n0G0zX5TqKpNzfdSvTwdoeTWU5EfMIyFI/yggDLdrVHnaxl+olduqAmliQ242xQG
2OlvCYucYqWLFgwKcnOh9/CkWe1L+V0ODHrJfDP+K95jKt92X5tUyt6N4VbMni0t
YMEudRpLmuogPvrkVJ/oXa5lNmPQDZSwah57dPPSwtUHT+Ff4t4yUE8oKiMkiWWj
qMZbMSNiPcQCHpHV6Dlm8j/gR9tqkGS4zL3rlACfAG8aJZZKmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPqqqFIqn6jqCBJgnjTbRHAq9XZ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvY2E0ODRiNDYtZWUyOC0z
MGI5LTk3NTgtZGQ5N2ExNWJiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgcowAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAzoki5/W28xAd6cQQ7lCyLhFONTuuiTXG77w1p/oO1qgEbMqMxinq
ZafG9q6QKr0Ito6cxb8A4+EpInDBPgWOFycZz+8UYdIMyft0pvNfXX5N0nrK9XiR
LMNkxP7vnlW1c0ndjeGVsHY4+BaXZWc+hINgm71k8MojrwndacT5t23V/cu07T5V
5m0BUp/69GWWcFwsOm9jWJjsSWZVuqIesG0H9qCAJhZl54Ane50gZUpKFbaDsumK
MMIdx+Lzq6/GGq7O8sjejH88CjfaROPAnS+0X3YYvSKquqV0zV/PLYs+B35u8CE9
1GAHEv7UEmvLfqP4ABOaMc6acpg1/TN4XA==
-----END CERTIFICATE-----
Generated at Sat Sep 12 11:29:46 2026 by rpki-client