Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/035722cd-be5e-33e1-bcfc-25991d0c7a46.roa
File:                     035722cd-be5e-33e1-bcfc-25991d0c7a46.roa (raw, json)
Hash identifier:          gcupofZZoL9ie7b2Wq3hb14mVPkgNyYDH/xdkjeJ864=
Subject key identifier:   D6:06:22:AC:11:D4:C3:06:0D:89:AC:3D:4E:40:F1:ED:0B:17:29:03
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584F225D23C216A4E5242E80E9C0
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/035722cd-be5e-33e1-bcfc-25991d0c7a46.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     8987
IP address blocks:        2610:108:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:23:c2:16:a4:e5:24:2e:80:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=e29261ac-4388-4854-89c2-edffc2cd698b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:eb:32:63:54:5d:fe:45:36:66:66:46:74:
                    ee:2f:86:43:d7:97:55:03:ce:be:90:f0:66:8c:05:
                    71:d3:cc:2e:e5:c2:15:9c:f0:89:4a:21:d2:b3:a7:
                    c3:63:bf:d5:7a:b6:bd:44:1e:14:e7:b1:04:81:bd:
                    73:c7:6c:9b:1e:a6:26:a6:56:82:a3:56:f4:8b:b3:
                    67:33:c7:0c:79:74:b6:e9:be:67:6c:ba:33:b9:d3:
                    ec:b3:d6:08:a7:68:f8:36:5a:86:4d:00:e8:4d:51:
                    6d:b4:dc:27:72:dd:22:d3:3e:5c:af:31:f8:d3:48:
                    c0:16:78:14:9d:90:d7:5d:87:c6:bb:8c:9f:bb:df:
                    62:b8:db:a6:6e:26:89:a5:bc:a3:dc:27:9e:84:8c:
                    ab:fe:86:e5:c4:11:df:0f:61:03:fe:3e:5e:b3:28:
                    35:1d:18:13:13:17:75:4e:4f:6f:a6:09:e5:e2:f9:
                    32:04:b3:20:39:21:b4:41:33:03:ea:3c:0f:84:f3:
                    73:d0:1e:94:68:c3:08:02:85:13:7f:e9:85:57:64:
                    5b:59:d0:0f:b3:32:c1:af:78:d8:4e:7d:66:1a:13:
                    03:ad:0b:91:5e:14:f8:4c:11:d9:91:5e:3c:24:36:
                    03:85:93:bc:80:80:a4:5e:23:67:50:78:b5:6c:00:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:22:AC:11:D4:C3:06:0D:89:AC:3D:4E:40:F1:ED:0B:17:29:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/035722cd-be5e-33e1-bcfc-25991d0c7a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:45:5a:28:49:f6:2e:9c:b6:60:dd:a8:f2:6b:56:0c:67:0f:
         4d:da:97:2a:78:5d:71:01:c1:90:55:a6:03:3c:5b:f8:7f:c4:
         6e:0d:c5:7d:bd:69:71:60:18:e8:a2:df:1e:ac:b1:88:d0:12:
         9a:95:a1:c1:3c:23:23:81:31:4b:4e:d7:17:a3:14:eb:d7:92:
         ed:32:5d:b5:66:48:48:aa:0a:ab:80:5a:ba:6b:d2:bf:df:18:
         f0:00:5e:c6:48:7b:99:30:5b:80:b5:c5:69:7d:4a:59:bf:64:
         bd:d3:ed:53:8d:1d:b0:9e:a1:23:c0:86:20:67:36:ee:b9:68:
         80:fd:94:53:8e:1d:a3:4f:f6:07:26:47:be:11:89:2e:5f:06:
         46:7e:5b:6a:93:2b:b6:54:de:f4:09:11:5e:5b:ca:bd:70:a2:
         80:e4:ae:1c:23:a4:de:65:93:2c:b3:17:21:2e:d8:2c:33:5a:
         0e:dc:d6:56:41:4f:c7:2b:0d:48:ef:f1:bc:c2:41:9b:2e:a9:
         e5:c3:3e:85:f3:eb:67:a6:52:bc:9c:9c:f5:2e:a7:9e:6a:f0:
         45:a1:00:61:dc:4c:12:80:7d:53:ce:c7:bf:44:1a:49:52:d8:
         26:ad:e2:f0:29:40:4b:ee:56:43:ed:6e:c9:b6:e8:77:30:78:
         23:d4:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:59:40 2026 by rpki-client