Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa
File:                     56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa (raw, json)
Hash identifier:          lOCwcSxbWwIxVLoNVva2kCTiOp1J0YdPUkGjV9WdutI=
Subject key identifier:   06:36:A6:72:FC:07:80:DA:7E:3B:1E:B6:9F:E5:EC:69:C9:82:DD:3C
Certificate issuer:       /CN=641fbbfd-7877-429d-ba4c-4decd1bb342b
Certificate serial:       010D0C9F4328584F1B6243651262F997E5D42500
Authority key identifier: EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     30084
IP address blocks:        2604:2a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:43:65:12:62:f9:97:e5:d4:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641fbbfd-7877-429d-ba4c-4decd1bb342b
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=afa07aa2-471d-4252-ae69-99b08959327b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:a1:7e:e2:1f:3d:d2:89:e4:b8:a3:71:19:
                    04:a9:2e:7e:8e:eb:20:5b:93:fc:3a:e4:5d:1d:f4:
                    89:e4:4c:88:ee:af:ce:21:a8:2b:af:fd:c9:37:22:
                    cd:62:af:7b:55:62:11:28:0c:ce:9d:2b:ca:d0:68:
                    9c:49:5b:11:92:d8:87:ab:37:c7:ff:f5:d1:2c:79:
                    eb:c9:d3:f2:82:31:8c:7e:a7:ec:93:d0:d2:eb:06:
                    df:91:e9:ed:27:00:5d:98:a0:7e:0f:f5:cd:49:72:
                    7d:d2:58:15:55:f0:79:2a:93:ef:2f:50:ea:4e:a5:
                    3f:3f:c1:bd:7f:b0:28:49:6c:1b:ce:40:6c:11:93:
                    d2:9e:81:9a:d7:14:2f:a6:23:51:55:6d:00:1c:39:
                    04:16:bc:10:f7:c0:5b:38:12:25:87:c5:b3:0f:f7:
                    30:aa:86:59:2f:93:f6:4e:dd:fb:54:d7:4c:e6:be:
                    3d:f6:8f:92:8f:45:f4:97:b5:1b:a0:31:1d:11:2c:
                    c9:7b:02:86:70:b1:79:d0:38:95:da:39:a0:8b:51:
                    ec:96:f1:f0:8e:e5:05:c3:6e:46:9e:ae:4f:ad:c4:
                    82:1a:74:68:9c:2b:0b:40:42:dc:28:98:6c:0e:1a:
                    1b:0c:82:ac:31:58:b0:ad:1d:19:3a:8f:c7:c6:b5:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:36:A6:72:FC:07:80:DA:7E:3B:1E:B6:9F:E5:EC:69:C9:82:DD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.crl

            X509v3 Authority Key Identifier:
                keyid:EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2a20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:33:82:63:19:2d:0c:d7:04:ae:a9:b3:ec:10:26:b3:bd:67:
         d3:cb:84:ec:1b:69:ae:25:8b:2a:0e:b5:b5:15:d1:c9:ba:23:
         72:bf:8d:2c:98:eb:db:d6:ef:6e:fe:35:e0:d7:ff:e9:e0:86:
         fb:5c:48:6d:22:97:5b:38:d5:3c:ce:93:5d:88:81:44:83:91:
         17:4b:c6:3a:31:05:3f:d7:8f:ee:62:b9:ea:46:26:8e:47:c8:
         6d:c8:f4:f7:76:0c:cb:e5:c2:b7:3a:a7:ce:9e:62:5c:a0:f9:
         82:3d:cd:67:ac:ed:65:4c:6b:f6:45:9b:81:fd:9c:14:bb:ee:
         23:b1:0e:46:09:3b:57:31:f6:6b:af:a1:8a:99:20:52:46:dd:
         3b:1b:7e:5d:6a:79:8e:43:1e:3c:bb:f3:14:2b:07:6d:de:90:
         cb:77:81:81:be:9e:37:eb:e8:65:80:68:b7:69:74:b4:a8:01:
         50:ed:bf:58:0d:5d:8c:d5:94:00:0c:01:87:09:91:fa:7b:94:
         df:59:cc:90:57:61:d8:b9:99:0d:10:50:f9:96:6a:ad:2e:7a:
         28:b7:e4:35:82:43:d4:ba:fe:5b:39:d1:37:44:c4:db:75:ab:
         35:2f:82:69:61:7a:b3:72:11:40:2d:fc:87:13:96:f7:9d:c2:
         3e:1a:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:01 2026 by rpki-client