Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b/930d1f66-6dd8-3cfa-a834-c544665611c9.roa
File:                     930d1f66-6dd8-3cfa-a834-c544665611c9.roa (raw, json)
Hash identifier:          mpqdJrEXBKnlSslV0SDHInKxqsPk3Gchu2EignaiY4c=
Subject key identifier:   32:E3:F4:C7:F2:84:56:23:88:CA:42:BE:F3:D3:D6:09:0B:21:08:86
Certificate issuer:       /CN=2eed9b1e-21a1-4ba4-a6c4-e5291859343b
Certificate serial:       010D0C9F4328584F6CB0CECA7EB98A4BD22AB0C0
Authority key identifier: 67:C9:38:D1:6F:35:0C:82:E8:B8:00:6B:EB:FA:22:95:EA:B2:73:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b/930d1f66-6dd8-3cfa-a834-c544665611c9.roa
Signing time:             Wed 07 Oct 2026 15:59:00 +0000
ROA not before:           Wed 07 Oct 2026 15:59:00 +0000
ROA not after:            Tue 05 Jan 2027 16:59:00 +0000
asID:                     396922
IP address blocks:        2602:811:9003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b/2eed9b1e-21a1-4ba4-a6c4-e5291859343b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b/2eed9b1e-21a1-4ba4-a6c4-e5291859343b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:b0:ce:ca:7e:b9:8a:4b:d2:2a:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eed9b1e-21a1-4ba4-a6c4-e5291859343b
        Validity
            Not Before: Oct  7 15:59:00 2026 GMT
            Not After : Jan  5 16:59:00 2027 GMT
        Subject: CN=5e23884c-5212-44d0-b546-d4db11ae68d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:71:f8:74:33:4c:b6:5e:a3:b3:72:1e:78:
                    09:aa:9e:90:3b:7b:fc:2b:af:25:18:a9:17:c6:df:
                    44:61:44:cf:63:d1:61:0a:c2:01:3c:29:a3:5c:f8:
                    bd:af:c5:27:c2:d4:6a:54:7d:58:95:66:cb:87:7a:
                    1e:52:21:ae:91:f2:2b:4e:bc:44:1a:49:1b:7e:67:
                    49:9d:14:6a:95:96:a4:ed:02:15:44:c7:be:8c:eb:
                    b9:f4:b7:89:d0:97:7b:c3:a8:a5:f3:d9:af:15:a1:
                    05:c4:df:51:5d:74:83:89:0d:58:86:0b:9b:6e:52:
                    4a:5c:f3:86:f8:8c:32:cd:3f:fb:cc:2b:1f:65:59:
                    fc:c3:02:b7:30:ad:79:e1:38:5f:9a:26:34:49:17:
                    c7:c2:91:d3:b7:18:7e:bc:6b:69:dc:9a:e9:3b:40:
                    24:8b:4e:2b:e5:0f:c2:bc:2f:05:f0:7c:8a:c4:64:
                    6d:42:a2:20:60:ff:8a:8b:0a:82:b9:36:af:09:b1:
                    83:90:e6:97:19:ea:2f:57:6f:8d:1f:3c:6c:d0:d1:
                    76:98:91:7b:a0:6a:7c:ff:cf:72:b1:89:87:f0:db:
                    6f:67:67:ba:62:87:b2:05:a6:d4:2b:26:ac:f3:24:
                    98:a3:d2:c8:a2:01:a4:56:61:73:f8:fb:48:1b:31:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:F4:C7:F2:84:56:23:88:CA:42:BE:F3:D3:D6:09:0B:21:08:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b/930d1f66-6dd8-3cfa-a834-c544665611c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b/2eed9b1e-21a1-4ba4-a6c4-e5291859343b.crl

            X509v3 Authority Key Identifier:
                keyid:67:C9:38:D1:6F:35:0C:82:E8:B8:00:6B:EB:FA:22:95:EA:B2:73:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2eed9b1e-21a1-4ba4-a6c4-e5291859343b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:811:9003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:ff:e9:e2:68:16:25:c0:72:7a:11:54:2d:24:ae:c3:64:
         05:aa:ca:f8:a0:1d:56:4d:4e:8b:eb:02:25:4f:a4:09:28:a9:
         5b:df:4f:61:fa:62:74:1d:ef:7d:ef:95:03:ff:bc:2a:ef:47:
         de:79:d8:cf:de:bd:8c:08:82:c6:5f:73:66:ac:e7:70:40:a3:
         c6:82:dd:d1:a4:42:ab:8c:30:d7:ff:b2:b2:42:b5:80:26:ab:
         73:e3:89:f0:72:7c:6f:8d:0e:14:63:72:a4:43:7f:25:53:8d:
         fc:da:d8:5c:ff:0e:39:19:60:dc:f7:3a:9b:24:44:a7:80:3e:
         35:93:20:7d:0e:a5:1a:7a:44:28:12:f6:68:71:d1:b5:e8:49:
         e4:20:7d:da:9d:5f:3f:b5:27:5b:51:ee:34:73:31:a5:f3:7c:
         19:82:0e:1a:ca:2b:41:6b:ef:fb:47:f1:5d:84:90:b3:48:1c:
         ed:c0:f6:9f:de:30:c5:f5:bb:d1:fe:05:98:70:aa:a8:32:37:
         d4:06:e8:c9:6d:29:c8:aa:8e:fb:33:ba:f4:2d:4a:d8:67:40:
         e1:81:f0:39:ff:47:9a:34:bd:66:82:29:2d:1e:16:64:e9:aa:
         a4:c5:7b:72:f7:1e:63:18:51:58:5b:aa:e2:ba:2d:5f:4d:f0:
         ee:e2:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:07:56 2026 by rpki-client