Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa
File:                     92d8eb7d-be5e-3a7b-908a-9895775b02db.roa (raw, json)
Hash identifier:          1qQLRWH+/WWl1FbeR2ICaYtXcWPiHJrcIadap2zDzTA=
Subject key identifier:   3C:10:76:70:D6:E5:AB:9D:D9:71:1E:45:E2:A8:AF:28:2F:C8:A6:5D
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584ED001F5706F7357B6B209ECC0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     11260
IP address blocks:        2604:db00::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f5:70:6f:73:57:b6:b2:09:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=51a598f1-73fa-4af0-a6ef-41d57de16e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:6a:26:c6:72:6f:8f:32:f0:23:c9:c7:a9:
                    5a:d9:fd:18:65:11:41:fb:1e:56:08:17:be:42:b0:
                    4d:23:f6:cc:84:8f:63:ce:0c:ad:e8:f3:51:a0:1e:
                    57:d0:f2:50:fe:6d:a9:e6:9a:0b:dc:b6:cf:b8:c5:
                    0e:20:b6:f5:7c:32:10:70:16:4e:f8:ae:b1:36:6c:
                    42:de:02:2a:f0:ca:e1:cf:5b:2c:c0:fd:14:a4:d5:
                    de:d3:24:bd:75:bd:4c:1e:b4:17:2e:3d:72:7c:eb:
                    b9:cd:bf:ec:5d:f7:29:73:30:41:66:cc:1c:4d:dd:
                    8d:89:4a:0d:fa:13:63:43:00:c1:e1:ab:f2:5e:22:
                    19:fb:50:e7:25:00:0c:82:7c:9f:a4:7f:25:39:fe:
                    ce:de:d6:e5:ec:54:10:e9:f0:d4:b1:59:17:4c:d9:
                    9b:67:1b:51:ce:f7:9d:36:05:bd:38:15:ce:d1:62:
                    09:08:ca:d0:47:9d:91:fe:35:5a:92:ab:52:30:c2:
                    3d:94:a0:e5:70:03:f0:63:44:51:81:5c:0f:04:de:
                    91:5b:ff:f9:63:c0:81:17:7e:cb:69:c4:fd:79:a8:
                    06:d2:e5:e9:46:d2:98:98:67:9e:9f:24:e5:24:1c:
                    16:08:26:9d:02:67:06:08:1d:ef:d7:73:d9:93:14:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:10:76:70:D6:E5:AB:9D:D9:71:1E:45:E2:A8:AF:28:2F:C8:A6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:db00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:ba:9d:c3:b6:3e:23:3a:77:58:cf:e9:65:91:7a:11:cd:
         7b:5c:e2:fe:5e:78:ab:ee:74:38:c5:73:14:79:5a:d0:bc:44:
         f7:19:5e:d5:82:72:1d:d4:d4:c2:5c:2e:52:e3:57:cf:d4:74:
         91:d2:45:6a:2f:c4:2c:57:8e:60:b3:d1:32:86:45:ae:5d:e6:
         2d:8a:a7:3e:70:b4:e0:ca:59:69:c9:b6:34:85:31:a5:69:b8:
         62:03:c0:87:56:e6:1a:ab:66:62:d2:70:08:d7:09:99:8f:cb:
         14:d5:bf:c4:79:4b:c0:5b:b2:53:9a:e0:1f:24:41:25:59:d5:
         30:07:44:b3:8f:30:25:ed:92:ed:f5:22:fb:44:e8:7d:45:d4:
         89:08:53:3e:e1:da:37:19:37:c9:23:e9:3b:1e:b4:4c:04:30:
         66:94:53:73:cd:be:4e:69:1b:0e:50:f5:06:2b:ee:dc:81:fd:
         5b:ac:bf:b0:9f:ea:e3:b8:ea:ae:6c:a6:4d:58:3e:c1:c6:2b:
         59:9f:9b:ac:78:21:be:30:59:03:1f:72:b8:6e:f3:95:90:2d:
         72:af:ec:2e:33:95:b7:52:4f:e3:dd:3a:d2:57:06:08:08:26:
         60:69:d1:e3:29:60:57:e0:7c:5a:92:f3:3e:6b:74:7b:00:da:
         8e:0c:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:21:28 2026 by rpki-client