Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/f8870b8d-bb5d-3623-8508-65151ce2cb19.roa
File:                     f8870b8d-bb5d-3623-8508-65151ce2cb19.roa (raw, json)
Hash identifier:          5PPArM9H47Tn5omyhowF8yj8Y575aO7dcoHuvnFR/KA=
Subject key identifier:   C2:BA:0B:6C:4B:1B:50:CF:10:37:10:F5:B5:59:BB:9E:63:3E:F7:4D
Certificate issuer:       /CN=a224a52c-0b36-43ad-80f7-e96d9b52004f
Certificate serial:       010D0C9F4328584F093D1947D914FB411FA342A0
Authority key identifier: 3B:FD:CB:9F:85:A1:11:B1:DE:91:1B:33:52:9A:DB:28:9D:D9:2D:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/f8870b8d-bb5d-3623-8508-65151ce2cb19.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     16843
IP address blocks:        2605:7d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/a224a52c-0b36-43ad-80f7-e96d9b52004f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/a224a52c-0b36-43ad-80f7-e96d9b52004f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:19:47:d9:14:fb:41:1f:a3:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a224a52c-0b36-43ad-80f7-e96d9b52004f
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=b374e435-9eb4-4da3-b961-afa1c77d711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:9f:b4:ab:7c:cb:e5:b0:98:7f:4d:6e:2a:
                    d9:fb:f4:7d:00:e6:e6:0d:ef:be:06:d8:34:19:14:
                    5c:43:c7:50:e7:30:24:48:bb:49:15:2c:88:3a:39:
                    35:d9:9b:05:72:aa:48:e5:30:9d:2d:59:59:d4:11:
                    7f:0d:63:5c:dd:2a:43:60:60:00:55:5c:0d:e8:93:
                    b3:8b:8a:be:3c:31:72:df:d5:95:00:c1:d9:66:5b:
                    5a:eb:64:db:a5:31:77:f4:2e:89:ab:f2:10:f6:2e:
                    9c:bc:ec:83:76:7e:fc:ab:3a:20:a3:63:dd:c3:d9:
                    07:33:0e:1c:f9:13:13:0c:51:84:70:f7:cc:f0:67:
                    30:4e:bd:8f:93:7b:31:46:6f:f3:04:c8:1e:90:92:
                    b6:26:fc:58:13:7a:71:e2:d6:9a:06:9a:dc:07:2d:
                    6d:1e:9b:80:09:d9:4d:01:35:06:63:8e:a6:2c:be:
                    f4:67:ac:19:52:c8:23:ad:20:d2:bb:32:27:cd:7a:
                    91:12:49:1d:42:bf:98:eb:0f:78:8a:ed:5b:47:05:
                    ab:a1:09:9a:b4:77:62:cd:61:76:1a:eb:0a:6f:6e:
                    7c:b1:98:07:5b:7c:25:ac:a2:63:f3:24:b0:d8:c3:
                    6e:30:72:17:21:cb:6f:5b:6e:e6:bc:fa:2f:ad:75:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BA:0B:6C:4B:1B:50:CF:10:37:10:F5:B5:59:BB:9E:63:3E:F7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/f8870b8d-bb5d-3623-8508-65151ce2cb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/a224a52c-0b36-43ad-80f7-e96d9b52004f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:FD:CB:9F:85:A1:11:B1:DE:91:1B:33:52:9A:DB:28:9D:D9:2D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:11:a6:e8:ae:a8:da:dc:14:87:82:81:71:28:fb:a9:75:
         d6:5e:b7:3c:36:cd:91:59:b5:b0:93:d3:ea:45:c9:a9:3e:e7:
         91:40:61:98:d8:b2:dc:7a:22:37:9a:56:47:62:b7:c1:7a:c0:
         0a:48:96:cb:e0:58:b6:b5:0c:85:8f:78:1d:24:48:19:1a:20:
         be:ca:61:61:a5:88:e6:ba:8d:c4:af:2b:1c:dd:41:4e:6e:83:
         06:de:54:fe:76:2d:7a:66:25:d3:d9:9c:50:84:93:3c:58:8b:
         7e:15:88:37:19:78:2b:47:3f:5a:53:3e:c8:b6:11:3a:7e:2b:
         71:14:f9:a8:08:45:e2:3c:ca:37:11:66:2d:19:82:a3:3a:d8:
         77:0e:d6:e4:01:3b:b5:f2:e4:e7:e1:7e:7b:cd:58:75:c5:74:
         23:f5:02:56:d8:cd:3a:79:59:2e:1c:b5:50:68:d8:e9:03:56:
         01:ff:da:fa:77:77:01:95:8d:77:e6:fe:4a:b5:a0:66:89:54:
         2f:f4:83:e5:f3:a7:10:49:a8:2f:7a:41:13:f4:ea:98:3f:a2:
         06:c1:6c:0b:31:7b:6f:4f:77:7a:72:eb:66:6e:56:40:ee:b0:
         d5:cf:23:ec:ef:0c:d4:65:7b:c3:ed:e9:a5:ca:12:80:e3:5f:
         fa:8f:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:55:57 2026 by rpki-client