Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa
File:                     d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa (raw, json)
Hash identifier:          VJQOE5HDiXGGFdkrY07nP1r/qlAcaBCBBm34Sj2J6JQ=
Subject key identifier:   A2:C3:EC:5C:5D:58:75:AE:37:55:1D:66:D0:BB:3F:F3:69:E2:F5:A2
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584F20F7B8BFF50CE41DF1200780
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     13737
IP address blocks:        2620:11f:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b8:bf:f5:0c:e4:1d:f1:20:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=fc626be0-a4ff-4bbb-8418-e537043106ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:95:1d:b3:66:fc:35:4b:26:d1:aa:cc:88:
                    d6:b6:0e:5e:b6:04:ec:57:31:c6:ea:b7:77:56:79:
                    8a:10:7c:22:5f:a8:10:fe:7a:ca:77:4b:8b:13:a5:
                    82:fe:4a:6c:73:f0:ba:49:8c:24:d7:36:a6:4a:86:
                    cd:77:27:d0:eb:ef:9a:a1:62:eb:d8:e5:7b:6f:cf:
                    ae:bc:a4:c2:09:9d:ab:c7:a7:f2:7a:b7:23:88:f5:
                    91:53:20:1b:75:bf:8e:e1:55:61:73:cf:9c:ef:c0:
                    a0:18:0d:b0:08:a4:0d:bd:fa:c4:a6:ef:13:ff:ee:
                    83:2f:ad:8b:83:a8:a0:3c:8b:a0:ce:35:ce:fb:ff:
                    b8:09:1b:3b:a4:7a:c6:39:2e:c2:f6:9c:b3:34:a8:
                    d0:e2:c0:1c:d4:1b:50:c3:d6:80:90:9c:62:cd:cb:
                    14:82:f9:1c:2e:3b:86:b8:f5:18:68:42:a3:72:e3:
                    12:b8:e4:33:4e:64:ff:80:12:3c:5b:d7:1f:2d:8f:
                    ba:c0:11:f5:86:cd:53:2a:c1:dd:5c:ba:57:fb:ab:
                    bc:7a:2d:24:74:ac:b5:cb:2a:c4:00:e5:4d:c6:30:
                    de:9c:3a:d7:5c:ee:8f:83:93:ce:84:66:25:b1:36:
                    e5:22:83:18:6d:cb:dc:c3:db:26:bb:c9:c6:b3:97:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:EC:5C:5D:58:75:AE:37:55:1D:66:D0:BB:3F:F3:69:E2:F5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:78:8e:b1:46:05:b7:8b:d6:7e:ce:6e:a6:56:98:9e:c4:af:
         95:51:1a:c8:64:a5:9a:96:a1:f8:22:78:c4:e0:ac:4c:2c:e0:
         f8:20:b9:c5:d2:44:54:46:bd:b7:b8:f9:d7:74:5e:a9:68:40:
         01:4b:6b:08:fe:b2:84:38:e4:82:b8:13:d1:66:25:61:f9:be:
         9f:c1:71:53:e3:b6:4f:4d:c7:6b:73:be:80:88:68:e3:b7:59:
         21:31:3b:5e:9c:60:0f:1e:e4:0b:1d:c8:41:bd:a5:bc:f4:2a:
         37:53:72:04:7f:48:92:09:a4:54:76:db:b2:8f:b2:33:b1:1e:
         29:d1:4f:ef:96:71:08:28:bc:e7:0f:5b:f5:a0:a4:3d:05:00:
         92:76:1b:18:67:66:ce:5b:b7:ec:39:35:34:cb:14:9b:dd:2a:
         24:53:e7:9f:28:6c:f1:73:d7:e2:c4:74:f2:b2:08:d5:b6:b6:
         ad:44:f0:f1:cf:25:f7:23:d5:ed:17:41:ba:87:fe:48:78:72:
         fe:e6:b3:25:ac:5d:93:73:2e:4a:fe:ab:fe:54:6e:f5:f2:d2:
         71:66:46:44:58:37:0c:63:8e:38:a6:33:2a:13:b0:05:a5:9c:
         a5:9d:ea:02:f8:a8:f8:4d:2a:f5:c2:63:36:a6:ff:aa:6f:f7:
         70:c0:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:26:16 2026 by rpki-client