Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa
File:                     07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa (raw, json)
Hash identifier:          vgo2cr+buGFCI/A1jbGqBcUoNBKOhdz8C6Ym6qswi3Y=
Subject key identifier:   88:92:FE:09:32:75:0E:F2:69:3F:E2:ED:CE:D4:AE:67:78:51:FF:07
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584F549D6923D251B32BC8387F40
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        2606:3dc0:80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:69:23:d2:51:b3:2b:c8:38:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=12e0b026-a5a4-41e8-a172-8c67bf946025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:c3:ae:12:9a:25:5e:c8:40:8b:22:54:0f:
                    0d:9b:71:eb:5e:5a:b3:8c:22:0a:d5:42:a4:c7:06:
                    5b:b8:78:ec:30:71:75:35:65:6e:e4:ba:fd:00:d8:
                    ec:72:35:c4:7d:56:d2:7b:84:fa:33:5d:c7:12:c2:
                    30:90:ea:03:2b:68:79:10:11:75:d3:65:68:7a:8f:
                    8b:81:10:81:53:d7:a7:23:6e:1b:8a:8b:f8:11:ce:
                    5f:ca:f4:a0:65:b6:78:c6:99:5c:61:f9:76:a8:41:
                    34:dc:d8:04:38:21:23:a5:94:ab:8f:b2:c4:3b:96:
                    ce:ee:a4:77:73:31:26:78:ad:b0:ca:e4:40:88:9d:
                    03:3e:a8:e3:84:06:8b:f4:46:9c:65:db:ae:02:83:
                    c4:99:8a:c8:e4:ab:dc:7a:f7:6b:43:93:23:6c:85:
                    74:b9:38:e4:77:5b:d9:31:64:58:38:5c:e5:44:1f:
                    c6:f6:60:5c:4c:66:68:a5:2a:e2:c2:55:94:19:5b:
                    b0:a2:89:67:0f:a1:8a:71:d4:27:5d:ae:fc:af:85:
                    a5:fa:eb:af:fb:e3:ca:11:0b:47:f1:44:35:88:1a:
                    26:61:bc:ec:f2:e9:27:a4:33:bf:e6:0e:b8:ca:dc:
                    2b:78:3e:9e:2d:36:b7:fe:87:fc:1d:62:5e:ef:04:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:92:FE:09:32:75:0E:F2:69:3F:E2:ED:CE:D4:AE:67:78:51:FF:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:12:90:6b:d4:14:30:ae:97:0d:46:ec:ab:bf:65:7f:2c:
         94:cf:ba:11:2b:12:fe:0b:56:98:94:c8:e4:fc:47:4c:ca:f3:
         bd:11:df:3d:52:c5:43:e3:76:ba:91:27:5e:4b:a0:ca:ca:34:
         a8:7c:84:db:47:75:95:8a:41:92:32:9b:e8:7d:ed:60:c8:8a:
         82:8a:05:08:7c:14:f4:59:9f:67:a0:07:52:e5:36:5f:55:91:
         28:fb:bd:d6:9a:07:84:e2:68:e9:7b:4e:eb:20:36:ab:c8:50:
         18:e7:35:f7:af:a2:31:a8:ad:99:6d:0c:ea:ea:52:70:60:2b:
         2f:3d:ec:d6:56:00:10:a0:73:1d:7d:a6:2c:e8:b5:3e:78:d2:
         f3:d4:a9:e5:1a:20:9f:70:8b:48:a4:c8:e2:0e:7d:bb:d3:75:
         a0:44:82:7b:94:a6:5d:74:ad:59:cb:a5:28:8d:ed:45:13:d9:
         0d:76:7a:ab:cd:b3:ed:8c:f7:5d:8b:e2:74:56:2a:7f:93:31:
         69:4e:17:22:fc:97:4b:d7:d5:a5:04:08:01:a0:fd:cf:0d:a7:
         be:4f:01:18:39:1f:b2:92:82:c2:58:3b:a1:5b:b7:6d:ee:81:
         eb:cd:d1:ab:35:d8:ce:d9:49:39:d7:77:f1:40:82:69:b8:56:
         5d:93:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:07:38 2026 by rpki-client