Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa
File:                     fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa (raw, json)
Hash identifier:          KtN2JCa6PTsbffal6PtdlZlVf0WNpvxwGRir6VQBR/c=
Subject key identifier:   33:3F:F1:84:7A:01:99:60:62:BE:A2:F1:6F:83:6D:80:BA:85:F2:AB
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584ED9C74125EEED1824CE961F80
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16904
IP address blocks:        2606:9300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:41:25:ee:ed:18:24:ce:96:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=0ad7451c-ffc4-4f5b-8885-27a3dd8ee5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:c4:b1:b9:0f:07:ad:c8:cc:ab:d0:6f:6b:
                    6f:43:b2:06:39:b8:be:bc:10:cc:00:7f:e8:cd:fb:
                    ae:93:a1:e5:65:42:cc:84:a6:16:f3:b6:f8:41:2f:
                    8c:f6:c9:cc:2f:34:39:ce:c0:f8:e0:57:72:39:03:
                    ca:86:b0:e3:fa:4c:e4:b8:10:51:f1:c6:3c:84:41:
                    ea:03:bb:6b:90:90:12:8f:0b:5b:9c:e4:c6:cf:21:
                    e4:8a:69:00:7a:df:71:bc:00:2e:7a:2d:a0:63:a6:
                    07:69:39:a0:20:31:d5:96:ee:29:56:de:4e:c2:12:
                    b1:9d:a2:b7:2a:7d:3f:a1:7c:25:f3:b7:c9:ac:30:
                    78:d2:6c:aa:e2:9c:7f:38:e4:8e:ee:c3:35:87:13:
                    5e:03:52:6f:df:c7:c6:b7:c1:12:ac:3e:6d:b2:ac:
                    da:81:12:29:92:d3:ab:96:64:2e:69:af:6a:aa:ec:
                    95:aa:c5:12:18:98:84:bc:8d:95:7f:4d:3b:77:b6:
                    97:86:c7:34:36:1d:46:4a:bf:cc:70:0d:ad:a8:90:
                    19:13:a6:d1:d1:c3:68:12:36:e3:c3:98:90:e4:c1:
                    cc:22:ce:a5:85:9e:39:29:0e:de:c4:69:ed:4a:b3:
                    a0:6d:ca:e2:a6:e3:06:30:e1:6a:fa:65:bb:a7:b2:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3F:F1:84:7A:01:99:60:62:BE:A2:F1:6F:83:6D:80:BA:85:F2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:af:64:dd:d4:05:60:ba:a2:4a:1e:7f:0e:21:37:eb:b7:
         73:84:2a:a2:64:6e:fc:f1:45:0b:fb:eb:a0:e0:3e:92:81:51:
         29:72:65:12:e3:82:ac:63:de:5e:0a:e5:fa:29:f1:dc:d0:f7:
         ca:8b:14:e2:b4:f7:c8:a0:3a:0a:c1:e8:96:c4:72:8a:04:ff:
         29:e3:9c:97:3c:68:48:c1:3f:aa:90:78:14:06:ae:46:3f:2d:
         87:6e:cd:e9:74:57:3b:6d:93:15:cd:5f:54:70:a9:44:87:84:
         2e:5c:24:ee:6c:89:59:fe:db:7d:ac:83:79:56:26:d6:64:f6:
         87:a9:0f:ce:21:dd:5a:4f:45:9f:d9:1d:87:69:8c:0c:ff:2f:
         c2:ee:bc:df:16:3c:49:e3:44:b7:f2:d0:b4:22:53:67:fd:45:
         71:92:38:a7:58:a8:54:9e:74:1c:5d:3f:bb:4b:ed:1e:18:8e:
         06:af:c4:0d:c3:f3:fd:52:a5:50:43:e9:2a:54:c7:82:94:07:
         f2:8d:ec:d0:28:ca:7c:30:e1:71:55:1d:cd:6f:57:82:98:47:
         73:cc:a7:d3:ba:da:cf:65:bc:e5:a7:29:95:b6:64:91:94:bd:
         48:ff:ca:97:f8:54:c4:f9:a8:8b:e1:cf:4b:33:2b:4d:03:95:
         40:cc:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:13:10 2026 by rpki-client