Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
File:                     4a1e23e9-0d4a-3576-945b-33f4492039a8.roa (raw, json)
Hash identifier:          OOz0lBtcthnbYRjnLdCUqJlKhNMPNblAGt9dfhkOJLw=
Subject key identifier:   00:39:E8:9C:3B:BE:E3:97:5D:0D:36:37:3D:B8:0C:0E:34:18:79:95
Certificate issuer:       /CN=bfb32325-5962-452d-81bb-2eb68992a5df
Certificate serial:       010D0C9F4328584F497482B720EB4A64D3B81DE0
Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2602:f4a8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:82:b7:20:eb:4a:64:d3:b8:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=846a72f0-2ad6-42cf-86d1-88e1fd13eb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:60:d5:32:d6:ac:1a:d7:61:55:02:36:8f:
                    f8:db:ba:15:58:b3:e4:24:3d:f6:9b:79:8c:ba:62:
                    1d:dc:df:ee:ff:56:92:43:6f:36:d8:26:35:9f:9b:
                    07:22:ce:c6:61:f1:4d:6f:60:7f:7f:41:a5:35:7d:
                    7f:50:0b:bb:fd:75:ed:24:5d:cd:7b:56:00:91:4e:
                    9f:4d:84:63:25:44:b2:4c:9a:da:47:75:bf:9c:79:
                    da:8c:03:7f:1f:02:bf:3c:e7:4e:0b:7d:30:63:44:
                    3e:20:77:17:75:4f:f6:7a:d1:11:8d:5e:70:39:51:
                    d7:5c:fd:e2:6a:1a:6d:4b:e9:92:e2:d9:06:b8:f8:
                    4d:a8:48:54:37:e1:bb:22:c9:a8:d6:80:5a:77:f7:
                    f7:91:12:d4:1d:9a:de:a1:3a:ff:a4:d5:20:e3:c7:
                    d9:cb:66:ae:15:f1:76:fe:74:cd:e4:58:5a:cb:1e:
                    24:94:ff:5d:86:16:1b:c3:18:b8:68:dd:69:17:89:
                    4f:02:1f:54:b0:13:16:45:08:04:d1:12:f0:f5:95:
                    e3:77:ef:00:0e:cf:59:51:02:b3:14:a0:d6:75:ba:
                    16:1c:47:a3:0e:59:1f:02:e7:dc:20:4b:7c:2a:a4:
                    f4:77:9f:96:38:45:89:e7:ca:11:af:fd:97:dc:16:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:39:E8:9C:3B:BE:E3:97:5D:0D:36:37:3D:B8:0C:0E:34:18:79:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl

            X509v3 Authority Key Identifier:
                keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:a2:c7:fc:98:ba:b1:ed:95:c4:5e:47:04:f6:b5:99:c7:
         66:d9:98:c3:4f:04:b5:f2:43:b0:e5:93:9f:73:48:e0:34:8d:
         b3:4e:2e:23:1e:ca:31:72:a1:c8:6b:e2:11:51:2a:e0:a3:d5:
         51:98:0d:7f:59:ce:36:28:21:19:7f:8d:c5:aa:54:14:03:3a:
         87:b4:1c:a7:df:79:20:02:33:29:4b:98:2a:d9:3e:61:8e:0d:
         fd:e4:a7:ba:61:7e:e4:fa:e3:01:08:6f:72:8e:84:94:d3:04:
         5e:46:dd:27:6d:55:aa:b6:61:bc:8a:c7:0d:90:31:4f:f6:07:
         6f:0d:4e:fd:5d:f0:6e:e0:72:eb:b1:14:13:b8:8c:83:b1:a9:
         42:e7:96:2e:2a:4c:93:e7:0e:66:d4:01:c7:5c:cf:73:e6:29:
         2a:3b:70:79:be:b0:f3:78:47:67:fd:c8:48:f8:53:04:3a:aa:
         b9:d0:ce:bb:9e:67:bf:a0:47:ba:55:33:97:a1:a5:9a:05:a9:
         6d:77:bc:64:5b:36:c0:5f:99:da:9f:dd:4a:0a:fe:fd:9b:d7:
         63:05:30:25:2d:3a:b5:b2:51:f2:13:23:4b:a2:f2:96:17:e1:
         f2:f2:7e:dd:90:81:9f:bd:d3:6e:51:cd:9b:79:06:a3:96:25:
         86:f9:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:02:37 2026 by rpki-client