Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
File:                     4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa (raw, json)
Hash identifier:          1GwcaBq5EKqwFcwrAkZS/fkY3MJX/KZ+RHTOMtmOvq8=
Subject key identifier:   A4:FB:6D:FD:73:23:B1:9C:D1:CD:2F:A6:85:A8:B9:6D:DF:AA:D1:73
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F4328584F6292D0EC08BF2B8944506D80
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     398325
IP address blocks:        2605:e040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d0:ec:08:bf:2b:89:44:50:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=e63e00a3-c435-42ba-9c9d-e76f90e33d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:af:ef:f0:71:fb:2c:59:95:43:c9:88:10:
                    01:c1:ce:b2:df:06:fb:a5:66:6d:f4:38:b3:15:a2:
                    92:fd:8c:26:5d:5b:b9:94:0f:1c:67:57:cf:67:b1:
                    bd:0b:42:ce:f7:bc:dc:f3:6f:d9:ce:ae:2d:b3:bd:
                    4a:fc:1f:fb:74:57:ea:34:73:03:c9:e6:d0:9a:89:
                    22:ab:ff:5c:45:ee:57:55:ed:2c:38:79:60:da:d1:
                    30:00:3e:4e:cc:58:7f:39:d6:e2:40:c6:4d:75:3e:
                    43:2c:df:03:3a:2b:a5:ad:6a:71:cd:27:ea:19:9a:
                    fd:f8:05:de:63:bd:45:6a:38:44:af:96:e8:d0:cf:
                    b1:fb:c3:5e:27:c8:26:e5:b4:82:be:1f:bb:7d:48:
                    d4:22:ce:d1:d6:39:dd:93:04:af:9a:e3:ed:77:e9:
                    87:3b:cc:37:42:19:1f:b9:a9:c0:a8:16:9f:84:4f:
                    ec:4a:03:cd:79:7d:1f:d2:cc:dd:d2:e9:f3:bc:cf:
                    c7:e9:d6:d5:99:b8:09:4a:e6:9e:50:37:b9:04:f2:
                    04:d3:e2:d0:39:a6:a5:41:5f:86:ef:67:b4:42:68:
                    8d:c8:53:5e:4b:ca:d2:b4:a0:3e:fb:e9:f6:89:19:
                    eb:f9:08:96:cc:e6:d2:18:d5:e8:3d:09:7d:f4:e6:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:6D:FD:73:23:B1:9C:D1:CD:2F:A6:85:A8:B9:6D:DF:AA:D1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:9b:68:a6:24:6a:90:7b:d6:e0:82:d2:e2:fe:91:a2:69:
         e8:17:93:92:cc:07:37:1f:e9:fa:89:d2:8b:bb:f0:ec:d1:2d:
         d2:08:ea:2b:ae:12:de:bd:7a:36:20:e8:51:2b:0e:de:b5:5f:
         19:6c:ed:73:b4:52:15:cf:1a:50:87:82:37:36:a4:c9:48:3b:
         14:91:5a:a7:81:4c:bf:9d:87:61:13:b3:72:aa:c5:84:73:0a:
         6b:1d:12:3d:0c:2d:80:54:a4:98:56:b4:55:75:08:1e:c5:27:
         31:cb:35:9f:a5:74:c7:b1:6a:e0:f9:33:fb:5e:eb:cc:c3:3a:
         2d:a2:ce:ac:b2:ba:3c:a5:cb:e7:3f:b8:ef:af:c5:67:c0:5f:
         b3:98:15:3f:42:05:53:c3:1b:0b:3c:5e:2e:99:72:a0:02:bf:
         1b:ed:86:92:aa:78:c0:f0:3d:75:64:a3:b8:da:8a:5c:6c:a6:
         73:56:59:e5:72:5b:86:b3:c9:8e:52:59:e2:c6:b9:d4:c3:8a:
         98:c2:a8:b4:07:ed:ae:15:dc:63:62:ed:2d:bb:2d:24:ef:52:
         88:12:b3:55:8d:c7:ef:b4:a2:3e:fa:4f:89:66:41:f0:84:b4:
         29:ca:be:75:75:b9:0c:6d:55:9b:b9:ab:34:fa:39:de:0b:28:
         24:fc:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:12:29 2026 by rpki-client