Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b07ff8a-2072-385b-9589-8354f9fc60a3.roa
File:                     0b07ff8a-2072-385b-9589-8354f9fc60a3.roa (raw, json)
Hash identifier:          lrMkQnvv3LO1TpvR0GEl7LQR3VVIQVAFZ5VQRo++8Vg=
Subject key identifier:   2A:77:3A:67:DD:DB:E9:FD:2B:6E:9F:1E:8A:AA:43:CC:33:10:40:B2
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584F119CF7E6DABF60D79E8147B0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b07ff8a-2072-385b-9589-8354f9fc60a3.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     210980
IP address blocks:        2605:f440:9520::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f7:e6:da:bf:60:d7:9e:81:47:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=51e01181-c278-4811-a256-18c6d0e93b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:fb:80:cc:b2:ed:a4:02:be:ab:b2:4b:44:
                    76:90:df:1b:fb:50:3a:97:b1:41:cf:50:5d:14:16:
                    e5:19:e1:8d:44:59:b0:a1:1f:d9:8c:1f:59:b5:23:
                    80:b4:fc:a3:9d:41:66:57:3e:48:22:ab:e4:48:5f:
                    2b:f0:c0:94:19:9c:28:49:54:b0:a4:6e:5e:92:b1:
                    14:8c:dc:5a:ef:dc:d0:65:f6:d8:ee:55:3b:78:92:
                    47:81:4e:a9:41:7f:ea:89:fe:55:02:b0:40:87:e5:
                    91:3d:75:7d:3c:fd:0f:fe:00:e6:c7:17:3b:7e:14:
                    33:bb:f4:c2:df:de:c1:64:08:87:02:a5:6e:af:43:
                    55:18:9b:2b:51:82:d5:76:de:2a:c7:67:3d:79:d5:
                    73:df:29:6a:16:bb:d1:ba:fa:8a:20:05:71:4d:ea:
                    2e:c8:ef:9d:1e:02:88:04:5e:e2:dc:45:18:4a:ac:
                    27:12:11:d8:03:81:e6:80:b2:ec:e9:2f:30:b0:92:
                    6f:2c:6f:d2:67:82:e1:56:f9:c6:69:84:b4:de:2c:
                    12:1e:1e:2b:f8:81:a6:ce:5a:55:07:35:c2:df:67:
                    7c:b0:94:6a:29:9f:56:5a:d9:62:03:17:65:38:bd:
                    c7:a7:7b:08:f3:ab:e0:8e:f1:d7:83:ad:8c:a9:b9:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:77:3A:67:DD:DB:E9:FD:2B:6E:9F:1E:8A:AA:43:CC:33:10:40:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b07ff8a-2072-385b-9589-8354f9fc60a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:9520::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:51:5a:8c:85:b3:e8:8d:23:e3:4a:68:1d:a0:50:15:33:cd:
         31:b3:a7:46:75:b1:40:80:5b:e6:c8:a9:24:cc:73:66:00:8d:
         3b:66:db:3b:e8:4d:cb:15:95:7d:98:29:d9:ef:c5:9a:d6:c5:
         b5:69:1a:ad:3a:0b:74:8d:ae:e1:af:2c:ba:41:63:59:c0:04:
         48:6c:93:a9:ae:71:04:39:39:fa:b8:b3:aa:12:82:4f:7b:50:
         13:21:f2:c3:7d:ef:8f:8e:81:67:ed:c0:fa:bc:55:f7:78:c1:
         06:99:6e:35:07:7a:4d:16:38:b5:1a:ed:30:64:27:fe:e8:a2:
         cb:0d:a3:3e:15:5a:b9:f4:93:87:8e:dc:70:42:22:9c:d4:68:
         12:71:9c:86:49:d1:11:4e:ef:06:70:f4:90:cd:8f:50:65:a9:
         4e:e5:72:81:10:33:54:51:7a:2e:86:27:ee:9a:bd:0f:4d:05:
         08:cd:d5:9d:01:c4:64:02:6e:70:dd:53:24:74:26:f0:e2:f5:
         b8:4d:f1:0f:c8:2b:2c:79:85:d5:39:b2:16:f9:f2:ba:4d:0c:
         63:31:c8:49:e6:8b:89:13:84:94:57:91:d8:1e:fe:d2:dc:80:
         bd:ee:c7:51:bc:76:cc:1d:12:2a:c4:3d:fd:76:a8:02:73:2a:
         43:6a:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:49:36 2026 by rpki-client