Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa
File:                     698433db-e2ac-3ad0-8d1a-70743069e6d5.roa (raw, json)
Hash identifier:          6S99Xaj7a7CRLBux5qPtKmkxDCfyqhOfbQ2pUAsUBqI=
Subject key identifier:   D6:48:0B:9C:87:08:23:81:96:BD:E2:07:F1:A9:68:7C:A7:51:F9:F0
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584F7E7DCCCBD70AEC59020EA1E0
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     399077
IP address blocks:        2606:4dc0:2200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:cc:cb:d7:0a:ec:59:02:0e:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=2357460c-9698-493f-89de-a5a82c4952ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:60:5f:08:40:c2:be:9b:52:05:a7:91:96:
                    8d:ea:ed:65:34:a5:17:f4:33:79:fc:60:10:c8:21:
                    eb:82:c7:1f:16:d7:7d:92:18:64:45:64:cc:e9:90:
                    22:d9:65:9f:84:0f:8f:db:66:03:1d:f1:b9:f5:f3:
                    1d:c5:7c:60:91:af:ca:3a:5e:d9:60:98:99:07:d6:
                    cd:fa:e4:d4:44:3f:fe:07:dd:0f:77:b7:d8:e2:32:
                    45:29:50:d4:e4:51:e1:ae:f9:3e:97:30:63:78:d8:
                    66:7b:ab:85:5d:a9:1c:57:be:5a:1e:a4:0e:2f:8f:
                    dc:bb:79:f5:54:8c:6d:55:69:9f:5d:41:f0:1a:dd:
                    c5:bf:b7:1c:77:bf:2d:0e:16:da:d8:4f:76:a0:ff:
                    0f:10:39:fe:1b:c2:cf:55:a1:e2:7c:ff:b3:b1:4c:
                    31:2b:3e:fc:ca:ae:b6:0d:9f:37:45:4a:20:f8:a2:
                    11:da:ef:7c:85:2b:49:11:cd:19:e8:78:30:1a:05:
                    3e:14:e8:6e:35:4e:08:4f:71:64:1e:01:79:63:94:
                    61:13:ac:bf:bc:b9:8f:88:cd:f6:87:a1:28:39:6a:
                    59:9e:77:20:a9:d9:d1:4c:b1:4c:54:4c:a5:95:91:
                    f3:9d:d9:47:fd:f8:10:83:4d:5e:56:d6:b3:18:12:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:48:0B:9C:87:08:23:81:96:BD:E2:07:F1:A9:68:7C:A7:51:F9:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:2200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e5:f6:27:36:10:60:aa:28:cb:af:6a:31:f4:c1:be:64:42:
         22:96:91:a5:7d:17:8f:c4:7f:77:79:6a:df:ac:47:0c:87:2a:
         02:dc:3e:b0:80:49:06:35:93:0d:b7:b6:ae:fc:36:0e:d7:68:
         3b:ca:05:06:f9:32:42:12:b6:be:b3:2b:c1:23:1b:a8:9e:8d:
         91:a2:dd:2d:0d:a3:ba:94:97:cd:ec:2d:9e:6c:e2:0c:40:53:
         2b:b4:88:d1:2f:78:b0:55:37:eb:7a:1e:d4:86:19:07:e9:7b:
         b1:15:e4:74:90:99:8c:12:19:4c:bc:73:6d:e4:06:8e:77:f2:
         ae:79:88:1c:94:c0:b7:ab:95:2a:14:58:c9:bf:d8:7c:6e:90:
         73:f4:17:2b:3f:a8:b1:09:77:98:ee:f4:32:02:cd:4d:84:d4:
         de:c4:8a:c1:41:9b:8d:0a:c2:5f:a3:0a:aa:38:37:8d:44:ad:
         c0:76:55:eb:37:8b:72:9a:1f:0b:04:a1:9f:58:1a:53:86:72:
         41:7b:b4:a7:af:f1:f8:8d:97:26:fa:e3:43:d9:33:f6:73:19:
         a1:82:bf:9a:74:b1:7b:8c:3b:e1:7b:40:86:da:74:1f:7f:34:
         d5:45:3b:21:aa:20:20:51:5b:77:ac:56:76:96:38:6e:2f:23:
         a3:4c:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:31:05 2026 by rpki-client