Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa
File:                     32f15bc9-1c3d-3499-9769-540df2da6c5e.roa (raw, json)
Hash identifier:          frpL9h8tLKaaL68WuOYDQDPEckee8ccXGDpxzed6mQc=
Subject key identifier:   39:C5:7D:44:A1:1A:72:B1:80:B0:50:60:2D:A5:5E:70:3A:4F:E4:53
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584EE4F1EBEA752B496508A2E180
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     5400
IP address blocks:        2606:f100:d400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:eb:ea:75:2b:49:65:08:a2:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=f327da36-c9e5-4d5c-b986-ad2486fa277f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:6c:fd:5b:a3:33:66:9c:39:aa:f9:c9:95:
                    66:ae:1a:84:f6:f8:d3:a5:0b:10:94:50:ee:ca:7c:
                    7a:e8:fd:ea:57:e7:53:7c:bc:10:88:9f:1c:e4:ab:
                    da:2b:b8:0c:fc:a2:b0:1d:5e:dd:29:85:23:f0:ac:
                    a8:4b:1d:68:a2:38:03:8e:8f:6c:a0:25:6a:19:38:
                    45:0e:5b:29:a1:fb:b7:cc:bc:63:37:52:fa:f1:7a:
                    19:1a:53:7b:24:b9:89:bd:c9:9b:bb:80:13:07:e1:
                    3c:bf:58:74:df:34:44:42:1f:b2:7f:a2:04:ea:28:
                    78:30:42:94:07:90:74:d9:24:74:cc:1e:d6:ef:16:
                    07:27:11:48:4b:91:d7:62:a9:ce:4f:0b:9e:e6:b7:
                    a1:cb:4b:75:b6:8e:65:2d:f9:d3:3a:8f:02:8b:fe:
                    8a:e2:e1:3b:94:0c:e2:11:9c:f3:4e:dc:d8:90:4f:
                    a8:cd:e9:96:71:85:59:21:e6:a3:2c:1a:42:0b:2d:
                    7f:72:28:c5:20:ab:a6:25:68:a1:95:96:22:fe:b4:
                    47:23:35:a4:c4:50:17:dd:e2:de:f2:9d:cf:69:5b:
                    bc:39:0a:ad:c4:ee:f2:e2:31:34:9b:a1:80:80:56:
                    45:5c:89:fa:8c:08:90:35:63:87:f8:a9:db:95:cc:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C5:7D:44:A1:1A:72:B1:80:B0:50:60:2D:A5:5E:70:3A:4F:E4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:d400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:ee:9e:bf:18:ff:a6:6b:0e:be:64:42:22:d7:6a:de:95:
         0c:2a:ea:f8:3c:be:8f:c2:8d:ec:d3:3c:e2:9a:08:e2:27:49:
         32:e8:56:99:56:8d:dc:6d:24:e5:53:ca:d4:7c:50:4c:0e:74:
         bc:16:38:77:fc:cb:b5:15:44:29:b6:cb:15:f8:89:3e:cf:c2:
         1d:0d:7d:13:d1:06:7f:f3:c6:07:e3:7f:1b:ea:60:b4:7b:2f:
         7f:b1:9e:b8:eb:82:9f:52:7e:8b:46:52:7f:9f:da:c4:27:47:
         21:3c:bf:a9:c1:e4:b7:40:62:1c:20:f2:49:4b:5e:5d:9f:6a:
         ca:d3:fd:6e:eb:48:ad:5d:83:57:14:d5:28:a1:23:8c:b4:65:
         ed:35:6a:21:e5:e0:41:f7:61:ba:77:f8:c1:12:cd:59:ea:69:
         80:ce:be:2f:03:2b:4c:f9:af:fc:de:8d:cc:21:d1:e8:50:90:
         f9:a2:76:ab:44:c2:de:5d:88:48:f4:7c:38:c0:a6:0e:5f:cf:
         1d:0e:f4:d5:68:f8:7f:42:33:bf:63:bf:df:ab:72:0e:84:45:
         aa:9f:25:e0:ac:b8:f6:a9:8e:9e:ae:07:60:04:0f:49:4e:90:
         51:0d:48:af:8c:2f:6b:ba:96:33:22:41:de:cb:9d:64:f8:cc:
         24:3c:6e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:31:21 2026 by rpki-client