Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa
File:                     6c592d11-a89a-3fc9-b153-3da1d346ca31.roa (raw, json)
Hash identifier:          sj7bXknUuthfQtuYyRNW6tGHXbJCREXzBbhtm+DzBhQ=
Subject key identifier:   AD:37:7F:BB:13:02:CC:D2:A2:04:63:AC:65:27:B0:AE:F2:E0:D3:8E
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F4328584ED431ECF10A6B9DE025593800
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     401199
IP address blocks:        2620:ca:a000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ec:f1:0a:6b:9d:e0:25:59:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=4194beb0-1ba7-44fe-bf9c-f06259979acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:9e:7b:2e:ad:41:5f:73:6d:45:56:7d:20:
                    42:99:e1:8d:da:df:1f:04:5c:7b:fb:a9:33:d9:82:
                    33:ee:d8:91:02:2c:c0:ec:11:36:73:c5:ed:81:cb:
                    6b:b0:09:52:95:97:5d:08:56:b5:21:6d:3f:38:56:
                    35:21:0e:ba:05:28:f0:1f:ee:a8:5c:48:33:a7:52:
                    fd:ef:d7:b7:b1:26:00:5d:65:41:45:be:63:7e:58:
                    d3:28:17:4c:f2:25:65:05:9e:d2:f3:ef:b6:c1:ca:
                    59:23:95:f8:1c:49:57:a5:36:aa:4b:bd:cc:80:9b:
                    af:60:3d:6c:0e:57:22:83:ef:1a:da:bf:a8:88:42:
                    d9:09:67:66:b6:9a:1c:29:be:26:25:c1:62:15:e6:
                    63:4e:73:e7:34:1d:c1:63:30:b8:33:51:9c:5f:ad:
                    27:ef:1b:69:e6:e9:db:49:7b:4a:72:f9:1e:a2:1c:
                    e0:e5:e9:b2:85:55:5f:7e:5d:98:b6:26:b4:c0:90:
                    dc:14:15:f1:59:8d:cd:73:59:e6:ff:56:11:55:98:
                    b0:e8:80:dc:6f:98:57:35:2a:24:c9:68:96:03:d2:
                    5a:ce:00:bb:25:17:75:d4:71:b6:ae:36:78:f3:97:
                    7e:97:8d:78:06:38:d8:3f:8f:c0:42:98:18:e6:5f:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:7F:BB:13:02:CC:D2:A2:04:63:AC:65:27:B0:AE:F2:E0:D3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ca:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:df:fe:aa:6d:9e:cd:b7:e4:eb:ad:15:1e:98:d6:c5:68:
         de:08:9e:bf:0c:22:0f:bb:02:9f:99:d3:2e:62:6d:89:1c:e2:
         0d:f2:1a:3f:a4:83:9c:1b:a3:fc:33:b8:5f:39:60:13:d9:60:
         b8:b4:7f:3c:51:dd:6c:cf:b5:bd:83:a5:9e:9d:92:ed:e7:bd:
         db:4a:14:e5:2f:f1:f9:c2:f6:93:86:52:75:68:b0:73:a0:66:
         ad:4e:29:d9:a8:65:1d:31:34:6a:06:00:26:08:1a:11:15:2f:
         d3:68:2b:2b:a5:54:94:98:72:c0:be:07:4d:54:ea:20:97:76:
         02:cf:e8:f1:5a:bc:0f:f1:c0:6a:45:80:f4:37:a3:c3:7a:2a:
         35:91:f6:49:c9:ef:8f:8b:cb:52:2e:5d:4c:a4:9a:8c:89:b1:
         f6:c2:83:2b:2d:6d:43:18:6a:21:8b:bf:71:48:f5:45:05:30:
         4d:6c:fe:8c:b3:bf:1c:cf:66:e1:e3:98:a2:55:a2:34:57:1a:
         dc:49:51:ab:bf:8a:e3:ff:3f:37:62:37:d3:3b:5e:98:7b:b7:
         08:79:bb:cf:f7:f8:64:10:b9:02:55:f8:d9:93:f4:01:10:69:
         4c:2b:ac:9e:07:8f:8c:33:c6:ce:fb:3c:89:ef:30:a1:7b:9b:
         28:f0:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:06:45 2026 by rpki-client