Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb3af9d0-a0e6-348b-96bd-6b56361b9a27.roa
File:                     fb3af9d0-a0e6-348b-96bd-6b56361b9a27.roa (raw, json)
Hash identifier:          z/XO3+Jw/cjMj6p9s4raQKs8cFI0+RIS62ca51R9VIA=
Subject key identifier:   6C:E9:C9:1C:61:3B:3E:05:44:F2:6B:07:63:E6:DB:0A:11:57:33:E6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F49885EF19F58C1E50A1B4940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb3af9d0-a0e6-348b-96bd-6b56361b9a27.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     43515
IP address blocks:        2600:1902:170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:5e:f1:9f:58:c1:e5:0a:1b:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e7c9387f-0013-438f-b4b8-a937e393a492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:45:79:d6:b8:83:14:bd:16:83:84:77:11:
                    0c:20:ff:15:94:e8:d4:37:b4:e5:10:92:26:d2:89:
                    f3:b8:ee:3a:a0:14:14:dd:4f:29:32:27:32:99:f0:
                    6c:86:b8:4b:20:de:d7:87:2e:5e:30:7b:39:bf:38:
                    42:8b:6a:32:e2:61:a3:60:a0:d5:17:1b:cf:bb:9f:
                    92:72:4f:b7:94:c0:ee:65:3b:e0:b0:7e:07:13:60:
                    1b:2f:ff:55:c3:4f:e9:b1:d0:56:75:88:0a:ae:cf:
                    01:39:7f:33:22:3e:78:6b:b8:fd:b3:07:13:43:c9:
                    9c:2b:e8:9f:9c:ab:4a:a6:6d:be:2a:89:77:1f:fa:
                    05:94:0a:91:0d:04:e1:bb:71:c4:b9:bd:b8:39:72:
                    51:c4:f4:98:78:35:1d:60:d8:4c:c5:58:2e:26:4b:
                    b8:49:14:c4:66:39:ee:33:89:73:7b:53:a2:b2:88:
                    97:e0:3e:9a:56:4e:cf:ee:e6:ee:13:57:1b:02:69:
                    3c:fe:bf:14:bb:83:91:a7:b6:0e:37:4d:44:01:c9:
                    f4:28:ca:c7:6b:68:05:5d:13:27:2c:89:f5:48:fe:
                    49:9b:c8:b1:1c:5d:c2:bd:64:65:1a:62:7f:9e:f6:
                    1b:02:13:24:89:27:f5:17:71:a2:d2:19:0f:c3:83:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:C9:1C:61:3B:3E:05:44:F2:6B:07:63:E6:DB:0A:11:57:33:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb3af9d0-a0e6-348b-96bd-6b56361b9a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:4f:3b:df:4c:0d:9b:92:81:6b:06:bc:7e:9f:ce:09:f6:3d:
         3f:b3:4a:66:66:b7:02:e2:fa:a0:bc:aa:41:44:53:99:99:a4:
         03:e0:5a:6a:e5:b9:e2:a9:79:86:ec:85:17:87:1d:40:0e:34:
         cd:f2:97:ae:64:67:52:99:a9:d5:fd:8d:58:c9:0a:07:7e:e0:
         c8:08:4e:2f:1f:c8:df:55:1d:3b:3f:59:ef:03:36:8d:f7:c6:
         e9:e0:6e:97:38:6d:1e:7b:d5:22:47:38:5f:35:21:98:e1:77:
         e1:cc:0b:1a:e2:87:80:f5:39:cd:32:48:78:34:d7:9c:13:7a:
         36:32:5e:4d:b7:c5:8e:34:7b:e6:42:37:89:7a:37:4d:a4:25:
         ea:1f:fc:58:4b:d3:44:31:bb:ed:46:ef:09:b2:08:5c:14:66:
         a6:44:92:fa:df:a8:38:e6:0b:cb:c1:77:8a:be:a5:45:11:98:
         2d:4b:14:21:db:9f:c8:7a:48:af:af:e8:03:f3:16:62:00:2c:
         9b:c6:2b:db:fd:08:d8:91:5c:4c:d0:34:24:3f:cb:3a:40:b9:
         7d:bf:f9:6e:1c:cd:c9:87:ee:40:a6:3b:dd:74:f1:71:69:c0:
         aa:4a:93:e0:50:0a:cd:43:2e:a2:f2:55:57:37:96:d1:a7:5e:
         7a:8f:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:34:43 2026 by rpki-client