Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/53513072-288a-3cb8-acb3-bdc5d9759604.roa
File:                     53513072-288a-3cb8-acb3-bdc5d9759604.roa (raw, json)
Hash identifier:          5NLOXKFyjosV5UpWi8UMZsGzbjiQvuc7BXSa0m0bC/M=
Subject key identifier:   0F:73:44:1E:51:C8:AB:6A:7C:6D:77:C7:A2:B8:9E:EE:59:E4:02:9F
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F4328584EBD5E2A56BE0D903A8F082E00
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/53513072-288a-3cb8-acb3-bdc5d9759604.roa
Signing time:             Wed 05 Aug 2026 20:46:01 +0000
ROA not before:           Wed 05 Aug 2026 20:46:01 +0000
ROA not after:            Tue 03 Nov 2026 21:46:01 +0000
asID:                     397702
IP address blocks:        2607:46c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:5e:2a:56:be:0d:90:3a:8f:08:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Aug  5 20:46:01 2026 GMT
            Not After : Nov  3 21:46:01 2026 GMT
        Subject: CN=b0209127-e425-475b-b278-a130c54413a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:fb:bb:f2:99:8d:5d:b6:79:29:b4:68:74:
                    a9:73:c4:db:b2:60:65:6b:fa:71:88:80:d9:79:69:
                    70:4e:f4:2a:41:f0:64:7a:15:09:c3:6a:1d:a2:60:
                    39:01:5d:86:40:e6:7f:6f:61:ea:66:9e:20:70:43:
                    bd:ad:86:39:a4:7d:4c:5a:59:d0:84:6b:65:be:d3:
                    41:b2:d8:8e:46:db:07:b1:37:9c:0a:9d:3a:c9:dd:
                    f1:60:0c:18:1e:01:69:4b:5d:fb:ff:af:25:e9:e0:
                    72:14:1b:e3:84:6e:9f:c9:d5:51:b3:17:49:b2:ed:
                    43:42:3f:7d:4f:03:70:1e:63:d2:b5:9b:b1:f0:29:
                    30:e7:cd:16:87:a8:0d:73:a8:77:89:94:f4:2b:41:
                    d7:63:f5:89:cc:89:f1:01:4e:e1:5b:90:c0:a1:2b:
                    f1:83:3a:57:b0:80:c1:07:4d:7b:0d:a7:e3:21:29:
                    2a:d8:4d:bd:ed:63:ef:2d:59:1b:7f:a7:13:ac:1e:
                    5f:23:c1:44:f3:39:83:9e:bb:da:d0:92:cf:94:e0:
                    6f:0e:f4:d7:c7:b1:48:ba:61:9c:66:f4:c9:58:c8:
                    a5:fb:7e:9c:07:80:2e:fb:f1:e1:e7:71:f9:af:66:
                    2b:78:6f:3e:20:64:94:4d:df:50:89:dd:cb:b6:a1:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:44:1E:51:C8:AB:6A:7C:6D:77:C7:A2:B8:9E:EE:59:E4:02:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/53513072-288a-3cb8-acb3-bdc5d9759604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:65:d2:7a:78:f7:d1:4a:5b:1b:bc:cc:e4:e9:da:8b:8f:f2:
         c4:0e:4c:b5:8c:36:c3:3e:61:61:6d:2c:33:97:d8:47:86:76:
         dd:29:08:05:21:5e:4e:dc:81:7e:a9:f0:01:99:70:b3:bb:05:
         d8:1f:67:d2:22:38:11:df:80:88:fd:54:73:17:bc:c8:d9:2a:
         1e:07:1e:c2:ed:b9:9b:de:f2:14:56:33:64:c6:84:60:dc:f8:
         90:8a:2b:60:d6:cd:ae:49:95:88:b3:24:63:ff:a5:ca:bf:1b:
         a4:61:71:2b:c7:d5:e5:b9:65:f3:aa:30:a5:b7:20:e5:6b:3b:
         a3:c5:bf:75:98:cb:d3:bb:e5:0f:75:70:5f:f2:7b:67:07:a2:
         e2:9a:0b:1b:65:dc:ac:49:a1:f8:ea:a3:90:9a:be:43:8f:ff:
         c3:b7:9d:8a:20:a7:55:ac:b8:f5:ac:ee:c9:23:e7:35:d4:44:
         9a:55:d5:3d:99:a3:69:7e:d2:04:a9:57:d2:9a:c3:7c:d6:da:
         18:02:90:8a:b7:8e:9f:b6:53:99:ab:ae:45:e0:36:c8:fe:79:
         c4:19:79:ab:c7:77:9f:d4:3d:84:96:68:9d:11:bd:5e:ea:34:
         82:a3:6d:94:1f:ae:cb:ea:5a:1d:f3:ed:4e:58:6a:22:14:90:
         d9:a3:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:47 2026 by rpki-client