Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa
File:                     f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa (raw, json)
Hash identifier:          /AuerM+TpJTEb25yBexZxy/1vJXFwMQLa8TzzEWaLpk=
Subject key identifier:   5F:59:0E:39:0D:C6:F1:88:48:DF:2A:B4:ED:7C:41:33:E6:F1:88:F8
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584F58CD650FCE8A8F4B8FE7DD40
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     16766
IP address blocks:        2604:e700:40::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:65:0f:ce:8a:8f:4b:8f:e7:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=c4587ee4-5d0c-40b1-a8f1-394ae5079406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:86:4e:39:1b:d8:d8:25:14:e9:88:d8:51:
                    19:95:17:ca:2a:98:eb:33:31:a4:b6:58:60:0e:7e:
                    bf:3b:77:87:ba:07:99:7e:53:cd:82:31:69:01:22:
                    00:9c:cb:42:cb:90:a7:49:27:53:11:10:4c:4d:c3:
                    df:79:86:db:06:c9:ee:d5:01:ad:62:98:41:49:29:
                    d6:73:26:1c:0d:36:c4:27:1e:4f:05:71:35:4a:80:
                    09:cf:98:ec:21:f1:19:49:86:68:bf:30:62:14:a4:
                    14:e3:3d:7c:ff:2c:ae:64:ca:be:bd:86:a8:8d:59:
                    bd:95:57:d9:72:02:89:2f:c6:8e:85:35:20:f5:5a:
                    6e:33:39:eb:93:20:c8:42:4b:cb:b3:cf:5a:30:95:
                    3f:a8:aa:82:f9:f7:0d:a2:39:d1:e4:aa:59:50:6e:
                    ea:fe:d3:c6:61:45:64:2a:43:ce:e2:c6:1e:2d:84:
                    35:d8:1c:04:aa:66:96:33:e1:af:80:42:f1:60:bb:
                    54:2c:e8:70:46:08:7c:17:af:3e:b5:a3:32:40:ba:
                    68:db:fe:72:b9:07:d5:ad:09:64:51:d1:75:ed:0b:
                    a2:ff:09:a4:17:c0:cc:65:5d:90:55:b4:46:18:08:
                    cd:69:b1:7b:36:20:b7:2c:63:6f:c5:68:ee:3e:0b:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:59:0E:39:0D:C6:F1:88:48:DF:2A:B4:ED:7C:41:33:E6:F1:88:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e700:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:e3:f4:00:ad:12:58:a2:02:af:c0:c3:1b:d2:3b:91:45:
         17:11:61:8d:d3:c4:71:53:a7:5d:18:4a:a5:9d:cd:7e:6e:69:
         50:d7:47:aa:ed:d4:27:b9:1a:07:f8:a3:3a:07:9f:cf:26:9f:
         54:ac:e2:e1:a2:03:7f:1f:b3:3e:83:e9:6d:85:73:94:82:96:
         67:90:6a:75:92:fc:b8:4e:07:bc:86:24:a0:70:de:27:13:33:
         e0:a2:60:87:75:62:f9:67:6a:fe:4d:df:c0:5b:20:23:30:23:
         d6:91:bc:ba:cf:be:3a:a1:13:49:e6:57:f1:b5:ad:85:da:84:
         3c:d5:43:68:eb:8c:65:84:08:64:11:0d:b8:07:6a:e7:5d:2b:
         df:4d:eb:56:0c:0f:c5:8b:e0:69:d5:dc:bf:11:e6:33:c0:22:
         90:44:e4:7b:1d:a6:67:7f:9e:83:4d:2c:51:55:00:93:d6:2d:
         32:91:d4:1c:2d:e7:f4:22:50:98:0e:96:88:78:4d:46:bc:3a:
         4a:54:52:92:47:01:37:1f:60:ba:46:22:c0:d8:5e:9a:64:37:
         c3:4b:44:1d:09:d9:11:fa:c9:77:bb:26:46:32:06:25:9d:46:
         91:ab:11:21:cd:41:2a:6d:e4:bb:0a:c5:06:24:56:41:12:31:
         d7:67:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:50:04 2026 by rpki-client