Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/3ab0e178-86c9-3c81-9453-1a047fe0819a.roa
File:                     3ab0e178-86c9-3c81-9453-1a047fe0819a.roa (raw, json)
Hash identifier:          VCxvfi5HeunSsMw6PZ4CfShLfWHX3Efv6ZbxxLWTsdo=
Subject key identifier:   20:DB:D5:E1:E3:CA:44:FB:79:2B:2B:A2:4A:EF:9F:EC:A6:AA:F2:5D
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F6723AAF2564117DA8F95C3E0
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/3ab0e178-86c9-3c81-9453-1a047fe0819a.roa
Signing time:             Mon 05 Oct 2026 16:15:35 +0000
ROA not before:           Mon 05 Oct 2026 16:15:35 +0000
ROA not after:            Sun 03 Jan 2027 17:15:35 +0000
asID:                     6327
IP address blocks:        2607:ffb0:4006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:23:aa:f2:56:41:17:da:8f:95:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Oct  5 16:15:35 2026 GMT
            Not After : Jan  3 17:15:35 2027 GMT
        Subject: CN=4aa916d2-ce80-4a40-8fa8-377829c68779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:5c:23:60:e8:cb:68:9f:26:cd:db:f0:23:
                    1a:13:2a:2e:50:1e:e0:a5:2b:4c:6e:7a:ef:1e:84:
                    68:08:2a:5d:5d:53:fb:ef:bd:ea:73:c9:a3:41:99:
                    34:3a:c3:64:75:46:84:a1:28:4c:25:ed:6f:6c:4e:
                    89:a9:3e:a7:ec:9e:dc:43:2e:d6:a2:4a:fb:5a:3b:
                    dc:cd:68:1e:31:89:3b:bf:ef:58:d6:5e:3f:7f:31:
                    a3:ac:78:f8:ea:ca:76:35:ed:e5:88:f7:0b:dd:e8:
                    57:b2:6b:b5:44:02:dc:19:15:89:5c:6e:97:c4:47:
                    eb:61:b2:79:1b:55:88:54:c1:32:61:56:c8:96:1b:
                    a4:f6:7d:9d:0e:ed:5e:a9:2f:a1:e7:1e:63:1d:51:
                    bc:6a:93:0b:4a:7b:69:8f:8c:78:b0:12:78:cc:85:
                    9e:1e:d5:27:de:a9:23:6c:b9:8e:6c:39:a1:29:a4:
                    00:b0:4f:db:af:b7:d6:85:36:9d:57:b7:2f:51:21:
                    ad:2d:49:26:83:20:74:80:6e:da:06:4f:54:4f:2e:
                    cc:7a:68:55:f6:7f:d2:dc:51:7b:6b:38:04:99:98:
                    6f:05:0c:08:e1:bc:ae:e7:b2:1f:42:c8:4d:3b:a7:
                    81:18:87:d6:d8:41:05:fc:33:13:01:3b:13:90:75:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:D5:E1:E3:CA:44:FB:79:2B:2B:A2:4A:EF:9F:EC:A6:AA:F2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/3ab0e178-86c9-3c81-9453-1a047fe0819a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffb0:4006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:2f:e2:99:43:00:6d:fe:dc:4a:7b:60:4d:aa:19:6c:65:
         47:dc:44:4f:19:48:1c:d7:ac:38:a1:7f:2a:02:98:ae:89:64:
         60:80:8d:2f:a2:e8:0b:fc:b3:fd:ba:d3:62:c2:67:41:9a:e7:
         0c:79:77:c6:5d:68:6f:57:37:87:31:15:27:ab:5f:37:f6:1d:
         c1:f9:32:d5:f0:a9:db:e4:ae:99:db:af:ca:68:77:ea:5b:08:
         1b:6c:b4:00:27:d9:04:6d:0a:5f:29:b7:49:10:69:d5:1f:c3:
         b9:b9:29:53:92:65:a1:b1:d3:a0:93:ff:e5:c0:47:9c:f9:d0:
         62:fc:b9:fc:80:89:65:e9:cf:1a:a9:05:20:45:ed:04:6f:f5:
         f2:b1:98:dd:4f:b2:37:52:3f:d1:94:58:7a:85:07:08:4f:9f:
         22:bb:50:a7:88:dd:39:39:b0:cd:a6:fa:75:75:a1:14:d0:dc:
         b4:15:7a:21:9e:9b:9f:2b:ab:31:1f:cc:66:d8:d2:67:9e:d6:
         e1:29:1c:59:a6:14:d9:79:e8:c2:23:e0:5c:fb:4d:5a:d8:bf:
         32:78:e7:a2:d3:35:d7:4b:58:20:73:39:92:e1:ff:08:44:96:
         07:a2:c1:33:09:a5:93:da:3e:2b:da:98:24:51:ad:89:6d:d5:
         89:8a:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:10 2026 by rpki-client