Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd3f9174-5b5e-39ba-b1a1-7cc990e04ef3.roa
File:                     fd3f9174-5b5e-39ba-b1a1-7cc990e04ef3.roa (raw, json)
Hash identifier:          vQ+WYWGDBfzBsskViflp4JdsnBh221QpYW8WNf+iXfw=
Subject key identifier:   7D:AD:E6:07:53:E5:5D:B4:89:27:51:2E:58:B4:5D:C2:42:9F:54:CB
Certificate issuer:       /CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
Certificate serial:       010D0C9F4328584F679B6DA52CC964621DFE5700
Authority key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd3f9174-5b5e-39ba-b1a1-7cc990e04ef3.roa
Signing time:             Mon 05 Oct 2026 20:16:53 +0000
ROA not before:           Mon 05 Oct 2026 20:16:53 +0000
ROA not after:            Sun 03 Jan 2027 21:16:53 +0000
asID:                     396982
IP address blocks:        2607:9180:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:9b:6d:a5:2c:c9:64:62:1d:fe:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
        Validity
            Not Before: Oct  5 20:16:53 2026 GMT
            Not After : Jan  3 21:16:53 2027 GMT
        Subject: CN=57149585-4e59-47aa-9a7e-78686752ba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:34:ff:b8:ad:b0:6f:8c:aa:f4:6d:2d:35:19:
                    ef:d8:70:de:84:e3:2c:21:17:2d:0e:3e:72:03:4b:
                    00:9c:52:65:4e:29:03:c2:7a:2b:99:54:d5:8e:cc:
                    1f:58:6c:7d:61:af:b5:b2:bc:0c:a0:5d:4e:51:df:
                    96:f6:ab:57:4d:63:95:fe:9f:48:4c:df:59:8b:23:
                    c4:56:9d:ca:e8:70:a5:17:22:f2:22:71:c1:67:27:
                    f7:73:9c:2c:1a:7f:51:fd:42:11:1a:1e:1d:97:25:
                    bf:99:75:58:20:27:5c:f1:f5:53:c9:cd:d2:65:d4:
                    78:7c:32:3e:9a:29:68:bf:ea:81:27:f4:89:bd:b3:
                    4d:d7:26:9e:03:4c:1b:e3:5c:bb:a8:98:75:a9:ee:
                    71:48:bb:0f:3e:99:c5:86:4c:e5:a7:d4:1b:34:8a:
                    b7:58:af:dc:c3:f3:3d:8c:f3:65:6b:56:9d:ec:76:
                    4f:c8:a7:3f:a6:17:77:14:47:71:a6:51:74:29:62:
                    da:41:6c:fe:6d:f7:86:b0:b9:4d:f8:25:80:82:a6:
                    6d:bc:40:da:da:a3:39:d6:81:db:a1:50:95:06:bb:
                    85:06:27:f1:48:0b:ad:4d:c1:ac:fd:5a:c3:85:a0:
                    5f:81:8e:24:3b:de:0a:ff:84:5d:65:b1:86:75:2c:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:E6:07:53:E5:5D:B4:89:27:51:2E:58:B4:5D:C2:42:9F:54:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd3f9174-5b5e-39ba-b1a1-7cc990e04ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9180:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:bd:6c:43:e6:67:35:d4:2f:23:1b:b8:ad:55:be:35:ff:
         a7:4a:39:13:56:4c:c0:36:57:a8:49:e5:08:f4:20:2e:45:71:
         dc:b9:3e:c5:56:c4:42:33:24:d2:e8:1d:23:5f:eb:88:e2:4c:
         32:f8:20:08:e1:05:c2:52:9f:02:85:b2:47:0d:ec:a1:1a:d4:
         8f:d8:de:ee:78:54:c5:77:d9:6a:ab:fa:11:bb:10:a2:63:76:
         f8:5a:a6:ac:0d:d6:a3:cf:39:26:3f:5d:b6:0a:d9:fe:c1:92:
         08:4b:4c:20:23:9a:5b:97:8e:b7:7a:ac:eb:39:f5:15:72:1e:
         8b:cc:07:48:c0:ef:96:79:04:de:12:0c:86:d0:30:62:c0:06:
         9e:e7:c7:02:4e:e8:1f:f8:4c:cf:54:12:78:c3:1e:66:32:bf:
         75:a9:a4:2e:14:f5:bf:19:09:4a:f5:88:0e:e3:45:26:44:fe:
         21:4d:d0:0c:04:5b:28:e3:7e:47:e0:78:3a:23:89:d9:a8:ea:
         2e:30:f7:2a:bb:90:92:57:cb:6d:c0:1b:6b:dd:4c:18:9f:ac:
         37:27:fb:d6:f3:c4:bb:97:e1:4f:10:dc:95:33:02:89:c0:c6:
         60:1a:fd:21:f4:82:d5:ef:a3:a4:d8:db:53:8b:c9:7d:7f:ad:
         06:af:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:15 2026 by rpki-client