Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa
File:                     78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa (raw, json)
Hash identifier:          kUfGSaMWc7ZzlNREEyaBB8UZ1PHC9+btx2ANpbDNZK0=
Subject key identifier:   B3:FF:5D:F9:A9:43:B6:5D:13:39:01:EF:C7:1E:74:63:DA:71:29:DF
Certificate issuer:       /CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5
Certificate serial:       010D0C9F4328584F9D33198784F81D2A14599610
Authority key identifier: A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa
Signing time:             Sun 25 Oct 2026 01:00:13 +0000
ROA not before:           Sun 25 Oct 2026 01:00:13 +0000
ROA not after:            Sat 23 Jan 2027 02:00:13 +0000
asID:                     397903
IP address blocks:        2607:5040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9d:33:19:87:84:f8:1d:2a:14:59:96:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5
        Validity
            Not Before: Oct 25 01:00:13 2026 GMT
            Not After : Jan 23 02:00:13 2027 GMT
        Subject: CN=ce52a3e5-ccab-4d85-9486-01617f69d8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:18:02:8a:d3:3f:d7:b1:09:2a:07:e2:82:
                    bf:d3:fe:c2:58:51:91:eb:00:92:64:24:1c:5d:b7:
                    34:7c:a8:b7:98:0c:5e:6a:b6:19:83:a3:3e:24:b5:
                    c1:59:39:98:bd:77:ea:5f:e1:cf:25:cc:28:7f:d5:
                    f0:c2:d9:1f:ee:bf:73:fc:d8:c9:cd:67:28:af:ce:
                    9b:1e:7e:ee:e0:06:c5:a2:7f:14:68:c2:c2:7a:63:
                    27:2a:0e:b8:83:e6:f7:b4:1f:8f:0f:4a:27:e3:f4:
                    8a:e7:ef:e9:c2:f9:04:8b:cd:80:35:e0:95:f8:a3:
                    77:59:58:10:3d:09:c9:09:5e:2a:ee:5a:c9:af:ac:
                    f6:7c:6e:55:38:e9:e3:35:8a:da:cf:3f:39:21:7f:
                    f7:9b:c3:7d:d7:02:ee:83:90:7f:10:bb:88:f0:33:
                    a8:a4:cc:49:89:36:a6:ea:3d:6f:b5:13:30:89:db:
                    5f:c5:b6:c3:b0:16:37:4b:cb:ba:bb:b1:2d:6f:d8:
                    df:d6:b7:9c:d1:36:d1:c0:c9:fb:1c:e4:dd:a8:0f:
                    d9:fb:24:93:e3:88:4d:35:52:1a:8d:b4:b0:89:7f:
                    b5:e5:23:55:ab:3d:e8:34:2f:14:b9:94:3e:81:8e:
                    4c:f9:f6:ef:9c:1e:e3:ae:0d:61:28:e8:7a:3a:35:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:5D:F9:A9:43:B6:5D:13:39:01:EF:C7:1E:74:63:DA:71:29:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl

            X509v3 Authority Key Identifier:
                keyid:A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:93:06:aa:a1:04:52:bd:66:30:12:b6:8b:fb:99:b1:07:2d:
         96:86:37:eb:75:89:20:49:0c:10:0c:36:f3:e6:22:5d:23:9c:
         76:ff:70:12:6a:80:2b:ac:6f:f4:9b:00:92:be:6e:0a:8b:f2:
         27:50:09:8f:96:89:fa:54:5d:b0:35:cc:6b:09:94:fa:0b:87:
         00:0c:66:d8:73:85:84:b5:c3:39:ce:26:14:ad:0c:35:3f:3f:
         83:7d:be:df:fb:7c:68:07:ac:23:7b:c0:94:23:d4:fb:ac:e2:
         1c:99:ee:a2:dc:04:15:cd:0d:4c:9e:bf:c9:22:68:85:eb:5c:
         9f:d0:e3:24:b1:a6:20:a8:78:5a:c5:b2:43:13:b4:75:8c:d2:
         1b:23:7b:76:c2:13:41:02:0e:d1:d0:ce:44:81:ed:bc:f8:44:
         2d:da:53:02:2d:9c:be:6d:15:5b:2d:1f:21:7d:5a:37:d3:c8:
         d2:87:73:87:c8:91:38:ea:34:1d:2d:ab:a0:a6:77:64:1f:d4:
         22:cb:15:32:57:3b:0d:e8:3e:c8:eb:03:d7:f0:88:62:7c:19:
         e1:f1:08:63:bc:62:ef:69:26:23:16:4f:44:b4:a3:12:14:78:
         93:fd:80:16:f9:fa:90:85:30:bc:db:84:94:5b:bc:63:c2:cc:
         8a:31:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:30:32 2026 by rpki-client