Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/8e497d70-b761-3dab-a3f0-155a828e61ee.roa
File:                     8e497d70-b761-3dab-a3f0-155a828e61ee.roa (raw, json)
Hash identifier:          jcguyLp+zN3XdpCCsooQPP6rke4FWyaPRJB64lIrgdY=
Subject key identifier:   F9:D3:C5:13:1C:A3:5B:59:08:30:AC:58:65:58:7F:9F:9E:4B:E1:BD
Certificate issuer:       /CN=d2238b91-c60a-40ab-90ee-a052f20ba0d7
Certificate serial:       010D0C9F4328584F920885AE2C6368D7DEEAEFC0
Authority key identifier: 54:16:27:07:AC:96:1B:6D:B0:A5:56:D5:84:45:9E:24:A4:F2:CD:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/8e497d70-b761-3dab-a3f0-155a828e61ee.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     64276
IP address blocks:        2607:ab40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/d2238b91-c60a-40ab-90ee-a052f20ba0d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/d2238b91-c60a-40ab-90ee-a052f20ba0d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:85:ae:2c:63:68:d7:de:ea:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2238b91-c60a-40ab-90ee-a052f20ba0d7
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=65f53b67-c549-4548-859c-47e9805c53ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:ce:4c:b3:82:37:32:fe:46:95:61:30:a3:
                    87:80:f0:b3:02:e3:51:21:91:80:fc:bc:42:76:6a:
                    3d:9f:89:21:30:a3:c0:26:5c:56:36:3a:cc:77:31:
                    bf:f0:40:54:70:d8:18:0b:9b:c2:81:dd:27:01:c9:
                    71:3c:53:9a:66:4b:33:d7:7f:5a:33:ab:45:5f:c6:
                    99:ff:5b:01:62:c6:30:b4:d1:68:f4:3e:90:b3:86:
                    99:e1:50:81:df:75:d2:92:79:59:16:c7:77:45:f3:
                    c5:18:7a:31:64:c9:c0:41:a4:6c:70:6f:11:73:42:
                    a5:9f:1a:41:fc:98:9f:15:43:41:fb:86:aa:57:4a:
                    f1:e3:32:94:97:10:73:67:76:f5:38:7c:80:70:3c:
                    52:e9:e4:b5:15:d1:e1:96:c7:cb:bd:ed:d9:8b:6d:
                    38:4a:e2:7a:de:0c:82:80:03:5e:07:71:61:58:c8:
                    f3:b7:02:7e:8c:33:de:8a:ba:43:5a:e9:db:f9:49:
                    2e:cd:43:a6:03:c6:b0:e3:8b:1b:6d:40:26:8a:5f:
                    4d:2b:3d:4a:58:dc:7f:16:7d:78:91:c4:dc:8c:33:
                    b3:d3:33:61:8a:88:49:4d:19:f9:47:7a:0c:6f:5e:
                    99:b2:77:6f:34:37:f8:31:20:43:71:5c:da:8a:c2:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D3:C5:13:1C:A3:5B:59:08:30:AC:58:65:58:7F:9F:9E:4B:E1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/8e497d70-b761-3dab-a3f0-155a828e61ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7/d2238b91-c60a-40ab-90ee-a052f20ba0d7.crl

            X509v3 Authority Key Identifier:
                keyid:54:16:27:07:AC:96:1B:6D:B0:A5:56:D5:84:45:9E:24:A4:F2:CD:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2238b91-c60a-40ab-90ee-a052f20ba0d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ab40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:62:fa:4a:74:b2:b2:c1:1d:9e:fa:84:cc:07:76:ab:e1:f6:
         75:36:8a:d7:6f:2c:b1:d9:ba:66:2d:f7:f9:c5:18:28:c2:40:
         58:f3:83:18:2d:5e:a0:40:19:64:af:9c:08:79:b9:9e:c5:4f:
         20:78:d3:4d:24:90:d1:86:4d:90:f9:46:cc:d2:7b:e4:df:b6:
         5c:87:28:f6:cf:7b:0e:11:93:3d:97:5f:4b:0b:bb:3b:c1:b4:
         cc:d4:0a:23:f8:35:f0:d8:25:cd:6e:9e:86:67:b5:2b:67:87:
         14:34:83:32:6f:54:08:e7:78:d5:c9:52:99:27:33:20:0c:c3:
         84:6d:05:29:cb:f9:5e:4d:2d:e0:5d:4b:f6:00:4d:f0:75:a0:
         b5:a8:a9:09:70:32:81:62:8e:16:d2:5c:03:ff:6d:2d:a4:64:
         44:73:b1:41:6c:a3:67:11:bf:fe:39:7e:24:c1:09:b5:d7:c4:
         77:61:51:fa:b1:2d:9a:cb:67:c2:0f:ee:46:f8:06:cd:94:b9:
         0c:cb:04:80:78:f5:e3:cb:3c:e1:a8:f2:56:44:cf:9a:59:81:
         61:b6:a5:bb:d5:fc:15:6e:8a:13:bb:09:32:7a:1d:4a:c8:fb:
         00:b4:3d:19:a7:c0:bc:fa:6e:8b:f6:2c:3b:ae:5a:f2:fe:ed:
         cf:ca:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:13 2026 by rpki-client