Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa
File:                     cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa (raw, json)
Hash identifier:          X4MqW4RPvezjjwEvpznDpAOtMzppvxgVbmYd1lWTw0Q=
Subject key identifier:   F5:E1:C3:12:03:62:2E:E1:16:2D:99:BA:1E:9B:DA:D5:FE:1D:B1:34
Certificate issuer:       /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial:       010D0C9F4328584FAB28AD8D4E7DEF2062A13E40
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        2620:126:f000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:ad:8d:4e:7d:ef:20:62:a1:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=09c4bf3a-f093-4d6f-99b2-6f038bfdb87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:bc:11:6d:db:40:6f:e3:93:86:a0:05:48:
                    9b:e5:48:00:1c:21:f2:30:b3:57:fa:b7:9e:88:d5:
                    41:f0:8e:91:29:98:79:6f:e2:cd:64:1e:77:42:d6:
                    04:e3:be:ef:cc:08:07:b3:60:1f:ad:91:7c:a0:2a:
                    26:6c:d5:29:b5:b6:9e:18:35:f9:73:8b:26:2a:de:
                    bf:6f:70:ad:93:d5:28:74:14:f0:b7:53:1d:f2:8b:
                    30:35:a3:df:64:53:e8:39:4b:e1:23:e0:89:bc:a4:
                    d5:ba:9d:1e:0e:ea:16:42:bd:14:fe:2f:fc:4e:80:
                    b5:22:55:fb:25:ec:9e:5c:9d:0d:44:d1:6d:57:44:
                    d5:a4:f5:e1:fa:89:b5:70:3b:db:ca:0c:57:06:c5:
                    d1:d0:b7:7e:fa:5b:a9:bd:80:37:22:3a:74:3b:1d:
                    96:63:60:d2:b5:74:e0:7d:76:e3:23:6d:84:58:9f:
                    65:72:8d:4f:9b:b8:46:9b:50:5f:6d:ae:1a:73:cd:
                    26:bd:e5:df:ba:f9:d7:09:5a:8b:1d:25:b7:2c:c3:
                    08:36:16:1a:7c:41:a7:92:16:6d:0c:d4:51:6c:a3:
                    9f:c3:e3:66:34:63:ed:23:67:a4:f3:df:5c:a3:45:
                    fc:c1:83:f8:db:00:16:c4:8f:11:0d:4f:83:0f:da:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E1:C3:12:03:62:2E:E1:16:2D:99:BA:1E:9B:DA:D5:FE:1D:B1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:126:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:2e:db:23:c8:98:53:3b:ee:96:34:1e:23:91:5a:d5:56:
         63:81:26:33:c7:d5:ce:11:4b:bb:fa:1b:8a:76:a2:d4:47:bb:
         26:46:28:5d:f4:ab:1a:66:7c:78:94:7e:2b:19:cb:4d:c2:01:
         73:4f:1b:e9:2f:93:f3:59:cb:06:bb:ce:9a:78:63:04:1e:64:
         31:e2:01:55:23:ea:f0:38:bd:ea:80:a9:7e:4c:5d:ab:e4:e4:
         a9:b9:17:ca:b9:0d:1d:c3:dd:d9:8f:c3:67:7b:18:0f:7c:b0:
         fa:3e:af:35:65:30:5d:20:09:6c:a7:c6:4b:6f:0f:c1:76:f2:
         22:5a:59:ac:41:ab:93:35:99:06:02:62:6e:2e:6d:66:94:54:
         6f:ab:d4:8b:54:e6:74:61:86:12:da:75:f2:be:20:ad:a0:b6:
         84:8b:c0:fa:7d:e6:35:e0:a4:b5:0e:56:35:c2:44:8d:cd:03:
         47:07:e1:0a:b1:ae:38:0e:e9:a2:9f:d5:85:7f:3d:03:a2:22:
         52:85:65:23:5a:cf:0f:42:f5:0e:86:22:90:aa:c1:50:84:40:
         e6:65:13:1c:39:42:6c:7c:33:67:d3:33:2d:ef:3f:b2:f6:79:
         d6:b1:77:60:e9:2d:2b:f0:04:de:1e:ba:ec:2a:3e:b8:ae:6a:
         38:49:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:51 2026 by rpki-client