Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa
File:                     3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa (raw, json)
Hash identifier:          buZlhMPBWvZzNroD4L1lAt3OCEpUJw/gXHSh1dtW7G4=
Subject key identifier:   64:7F:87:F1:3B:8D:3F:8C:92:94:B7:82:8D:D9:93:A9:DB:96:B8:E5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EDB2C86D9D45E6DCA0BE52600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        2600:1904:401f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:86:d9:d4:5e:6d:ca:0b:e5:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=b92faa4f-5082-490a-8024-a70100225479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0a:55:ef:08:62:07:2c:3f:3c:8a:93:6c:ad:
                    92:78:29:17:ba:24:d9:6c:c5:2e:da:f9:49:ba:bf:
                    a2:45:b1:56:cb:32:47:8a:91:2c:0c:c0:68:02:6c:
                    11:d9:cf:18:1c:76:94:dc:98:d7:f4:45:b0:c8:0b:
                    00:6d:33:ef:73:c3:f4:72:db:f6:97:dc:28:b1:e6:
                    61:3a:9e:c1:54:b3:33:a2:d2:af:c6:a8:79:68:44:
                    19:3a:d2:7c:42:a2:20:5c:db:3a:e6:f0:a2:72:84:
                    bf:52:6c:64:9c:57:d4:62:e1:0d:9e:e0:5c:09:c1:
                    fb:1e:60:b9:98:7c:25:71:8f:cd:d9:04:d6:33:5f:
                    76:94:4f:e7:a8:8b:e8:48:82:59:51:5c:e4:56:56:
                    3b:fc:83:cb:77:26:40:6e:6a:f8:5d:05:de:ad:c7:
                    46:06:8e:c1:f8:8e:d8:ca:f8:fc:fa:0a:ea:4f:73:
                    29:85:21:54:9f:3d:a2:0c:50:97:47:d4:e2:c3:b3:
                    94:66:9b:cd:b6:43:a3:7c:e0:fc:f1:ec:25:51:e3:
                    52:98:fc:e6:29:11:06:9e:80:5d:27:83:7c:20:0e:
                    67:03:ad:35:48:e4:c5:6e:c4:3e:99:f1:0c:77:45:
                    3a:d3:eb:77:46:1b:99:b3:fe:4e:c6:8e:5a:d3:1d:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:87:F1:3B:8D:3F:8C:92:94:B7:82:8D:D9:93:A9:DB:96:B8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1904:401f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:c7:6c:5c:72:7d:53:44:6a:45:51:1c:e2:43:99:75:c1:
         f3:6c:84:72:1a:3e:55:6a:4f:48:5b:6f:73:f0:84:e4:31:db:
         7c:f0:4d:db:5b:98:d9:e1:70:83:d5:24:89:da:7e:1d:2c:00:
         ad:bb:71:92:3a:b9:4f:ae:8c:c7:ef:82:2f:e5:d5:08:61:93:
         55:9f:17:d9:d9:d5:e7:76:1b:11:6e:df:bc:ed:33:5f:9e:9d:
         85:b0:9e:37:e4:2e:0e:8c:06:33:ed:99:6e:a9:8b:3a:f6:83:
         10:05:6e:4d:de:a2:2e:d3:71:e8:37:fb:88:fe:61:9a:79:70:
         7e:d4:88:07:2c:38:9e:c0:8b:7a:1a:6b:65:d8:c3:21:12:49:
         a5:d6:69:5b:f1:44:a3:dd:7a:fb:7f:b8:98:91:6d:cc:c8:31:
         b0:16:21:44:e7:44:d9:bc:1f:f5:b5:86:d7:c1:eb:1d:c0:19:
         69:b6:98:dc:6c:e7:c6:52:6a:18:82:9a:bd:12:63:bd:91:ba:
         5e:2d:8a:9f:0b:05:4f:01:17:5b:09:b7:1d:61:cc:b6:6a:6b:
         6f:49:cd:2d:d5:3b:13:d5:70:fd:5b:d9:71:d0:59:7e:c4:1e:
         2f:1a:4f:24:50:15:9f:36:c5:b8:25:42:72:1f:5c:a9:8b:bc:
         28:1b:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 09:53:24 2026 by rpki-client