Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/e586e73c-ea19-3070-8d93-78d90974d4f8.roa
File:                     e586e73c-ea19-3070-8d93-78d90974d4f8.roa (raw, json)
Hash identifier:          QACEkPJhezVIZNatDaPH9g7vMQqNidV4V8jVSFMS6B8=
Subject key identifier:   75:3D:12:CE:14:B8:CB:7D:DC:4A:91:46:C3:BB:7C:D3:E5:68:B7:79
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F5BFE6F67380FB8BEC812CE80
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/e586e73c-ea19-3070-8d93-78d90974d4f8.roa
Signing time:             Thu 01 Oct 2026 16:26:40 +0000
ROA not before:           Thu 01 Oct 2026 16:26:40 +0000
ROA not after:            Wed 30 Dec 2026 17:26:40 +0000
asID:                     6327
IP address blocks:        2607:ffb0:300f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:fe:6f:67:38:0f:b8:be:c8:12:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Oct  1 16:26:40 2026 GMT
            Not After : Dec 30 17:26:40 2026 GMT
        Subject: CN=bd8163b3-b8af-4ddc-899d-007abe531c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:dc:3c:c2:59:42:f1:94:4f:fc:50:12:32:
                    34:84:f4:c2:11:ce:7f:0c:b6:5b:cb:f2:c2:84:41:
                    f6:e8:5a:f5:d9:0b:82:16:c8:e5:39:e5:41:ab:27:
                    9e:cb:33:4e:eb:36:70:0e:ed:a0:16:c7:f0:73:f0:
                    7e:cc:10:53:a4:cd:bf:8a:fb:e8:f3:8e:5d:b3:83:
                    33:c8:ac:a8:13:51:e8:2d:92:9f:b8:18:d3:61:37:
                    06:ec:02:d8:2e:11:09:ef:c7:72:57:b5:c5:ef:3f:
                    0d:42:e7:7b:bb:cb:1f:03:3d:a7:da:52:7b:c2:6f:
                    5a:d7:20:c1:53:8c:12:cd:40:39:92:60:17:0c:f0:
                    77:e6:da:7b:7c:ad:65:ca:00:6a:6f:2a:13:17:54:
                    9d:0a:6f:c7:93:51:0d:a8:cc:6f:3e:9e:3a:0f:ed:
                    56:05:c6:c6:d6:6c:b3:fb:d0:93:7b:88:be:0a:d3:
                    d2:9b:15:e6:20:30:22:2a:67:5f:9b:d6:cb:4c:1f:
                    c5:28:7a:7c:1a:14:db:5e:00:4f:a3:d0:36:82:85:
                    c5:c6:4e:94:ab:1f:29:a5:2b:bb:83:f3:bb:e4:70:
                    7a:c1:dc:9b:d9:ec:8d:62:a8:c4:a5:c5:33:ff:c6:
                    b2:c4:aa:8c:6e:5f:96:7a:91:c7:d9:aa:5c:e9:fc:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3D:12:CE:14:B8:CB:7D:DC:4A:91:46:C3:BB:7C:D3:E5:68:B7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/e586e73c-ea19-3070-8d93-78d90974d4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffb0:300f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6a:88:c6:8d:96:a9:f0:c9:b5:06:32:8f:15:87:95:87:5c:
         c0:db:1a:0a:98:61:21:81:3c:a3:1c:39:d8:da:57:a6:8c:0c:
         d2:98:de:1a:48:a4:98:f7:b7:2f:b0:89:92:36:3a:0f:3f:ef:
         7a:39:3c:50:11:f0:65:73:e7:ae:e4:44:1a:a2:0c:a3:a7:be:
         51:38:75:66:99:54:7e:ee:45:2b:53:bb:b5:6d:26:db:d1:d4:
         60:d1:bb:9e:6b:23:41:4f:6a:c7:f8:78:85:32:49:f4:e4:a7:
         ff:06:ce:4e:59:86:19:ad:57:91:ec:03:8c:19:13:a3:c0:06:
         b8:e7:ff:de:eb:c4:4a:30:59:46:6e:68:e8:20:2d:06:bd:37:
         58:25:04:17:4b:e7:f3:fe:77:69:53:29:8a:84:4b:db:61:af:
         5e:55:ec:74:fc:35:51:08:f1:37:9f:ce:e5:91:eb:f8:8f:51:
         ae:dd:48:14:e2:ed:f2:e7:65:b4:85:fe:46:e9:1c:c1:dc:38:
         49:b2:db:a7:bc:3d:59:5a:47:c0:65:2d:f5:31:fb:59:c8:b9:
         5d:60:66:03:f3:92:62:15:a5:54:18:ad:b1:04:55:f8:e0:92:
         c3:09:6b:6b:f5:b4:39:3a:b9:4e:61:fa:ce:93:c5:14:d0:1a:
         ad:6a:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:13:04 2026 by rpki-client