Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe/117e578d-61b9-3351-9320-4bd5a8679964.roa
File:                     117e578d-61b9-3351-9320-4bd5a8679964.roa (raw, json)
Hash identifier:          ZGBn5xEzVcFR9GybCOsRJ4FWrsJVtvmAVbIkOSFaMBg=
Subject key identifier:   D2:35:10:2F:55:CE:54:F4:01:E5:4B:47:FD:21:A1:05:95:BF:DF:33
Certificate issuer:       /CN=0117dd94-5301-462b-81c9-9aae2698f2fe
Certificate serial:       010D0C9F4328584F196FE5966B66CE2254FAA580
Authority key identifier: 22:21:37:82:32:3A:E9:32:1D:67:A2:89:B3:FA:71:4C:40:81:D6:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe/117e578d-61b9-3351-9320-4bd5a8679964.roa
Signing time:             Mon 07 Sep 2026 20:16:07 +0000
ROA not before:           Mon 07 Sep 2026 20:16:07 +0000
ROA not after:            Sun 06 Dec 2026 21:16:07 +0000
asID:                     2901
IP address blocks:        2620:44:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe/0117dd94-5301-462b-81c9-9aae2698f2fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe/0117dd94-5301-462b-81c9-9aae2698f2fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:6f:e5:96:6b:66:ce:22:54:fa:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0117dd94-5301-462b-81c9-9aae2698f2fe
        Validity
            Not Before: Sep  7 20:16:07 2026 GMT
            Not After : Dec  6 21:16:07 2026 GMT
        Subject: CN=de1bd9bd-ba37-4427-8012-64076099d3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:53:30:6d:75:9d:de:24:37:2f:5e:42:b9:47:
                    ff:d3:51:c1:30:ce:db:13:99:8b:7b:d9:b7:84:3b:
                    85:96:97:05:b4:43:2a:81:f4:ac:83:31:b4:f2:9a:
                    a3:a4:71:cb:15:c1:bb:7b:3f:eb:ce:6a:8e:a0:df:
                    a9:79:aa:ee:16:fa:3f:9f:db:76:19:51:06:b1:84:
                    f4:5a:b4:07:7e:59:f5:96:e9:43:19:c1:5b:f0:92:
                    83:bb:66:25:a5:4e:b4:ba:e3:f1:23:8e:a2:b6:1c:
                    3f:72:43:a6:36:d4:19:d7:57:f5:37:1d:2f:29:c7:
                    67:3d:bd:e4:bf:27:88:fc:ba:2a:68:39:69:15:de:
                    16:98:02:9c:0b:29:e8:cd:eb:aa:e4:df:39:29:a7:
                    71:5d:31:9d:ee:fd:04:1e:a7:bc:3b:f7:40:dc:40:
                    d2:6b:9d:57:84:65:6e:64:6d:7a:68:02:0a:9e:17:
                    9b:80:34:30:41:1f:95:e3:8e:49:1d:09:78:24:bf:
                    7a:4d:59:73:b0:06:16:a0:77:af:8e:46:c8:c1:5e:
                    f0:4e:01:0a:81:f5:18:93:99:22:66:ea:ed:b6:15:
                    6f:4b:01:51:c6:05:34:8b:95:d4:eb:b6:0e:21:ab:
                    e5:2a:8c:4e:37:b1:78:5a:58:8f:f2:9a:2c:64:e7:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:35:10:2F:55:CE:54:F4:01:E5:4B:47:FD:21:A1:05:95:BF:DF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe/117e578d-61b9-3351-9320-4bd5a8679964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe/0117dd94-5301-462b-81c9-9aae2698f2fe.crl

            X509v3 Authority Key Identifier:
                keyid:22:21:37:82:32:3A:E9:32:1D:67:A2:89:B3:FA:71:4C:40:81:D6:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0117dd94-5301-462b-81c9-9aae2698f2fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:44:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:b3:51:47:b4:43:09:50:af:09:cc:83:f4:f2:cb:78:de:
         ba:30:19:b6:51:3f:2a:97:a6:6c:5d:e5:8b:2d:fd:16:4c:15:
         16:96:f4:8b:b6:62:30:9b:81:92:13:20:00:f8:ab:87:c8:28:
         1e:4e:77:50:f4:d8:78:cd:cc:2b:73:35:a1:cc:55:34:51:b1:
         5c:99:dd:1c:9c:9d:9b:df:1e:fd:e2:53:7c:ca:a9:f7:16:3c:
         f6:7f:45:ed:28:da:82:5c:b2:02:6c:e9:ed:a4:f0:c1:6e:09:
         4d:41:7e:9d:3c:9f:0d:4f:9e:e5:9b:d0:1f:23:96:ca:e7:a2:
         37:b5:7e:3b:bb:fb:9c:28:26:c3:cb:e7:b3:50:f5:5c:e9:39:
         bc:11:92:cb:c6:10:fa:f1:2a:ad:b7:2a:06:da:9e:df:db:68:
         11:ee:ed:77:c3:af:ac:69:6c:14:15:88:34:7b:76:58:0f:e5:
         2a:b7:a1:e7:87:4d:ad:75:17:4a:3b:49:aa:39:59:dd:24:68:
         48:d6:4e:0a:b4:bb:11:0a:52:d1:c7:a6:2e:2a:a9:25:7d:84:
         40:8b:b0:07:9c:14:62:ea:6b:47:d9:a4:d4:f9:9f:5f:f8:16:
         67:d6:e9:8e:d8:04:c7:ff:4c:15:b4:cd:66:8f:86:14:e3:d7:
         58:e5:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:35:27 2026 by rpki-client