Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/de379f16-2088-33f4-bc9a-b2ea86a8ffd0.roa
File:                     de379f16-2088-33f4-bc9a-b2ea86a8ffd0.roa (raw, json)
Hash identifier:          ySMXtbUzw9spIWakL8crRA5PA3USMk7sWN07EmUmE3w=
Subject key identifier:   41:D9:BA:F3:CF:45:56:00:CF:BA:19:25:E4:B9:45:4E:40:33:AE:A9
Certificate issuer:       /CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143
Certificate serial:       010D0C9F4328584F86042E9ED64BA6402D4A9300
Authority key identifier: D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/de379f16-2088-33f4-bc9a-b2ea86a8ffd0.roa
Signing time:             Fri 16 Oct 2026 17:42:12 +0000
ROA not before:           Fri 16 Oct 2026 17:42:12 +0000
ROA not after:            Wed 13 Jan 2027 23:01:30 +0000
asID:                     20473
IP address blocks:        2602:f34c:f100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:04:2e:9e:d6:4b:a6:40:2d:4a:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143
        Validity
            Not Before: Oct 16 17:42:12 2026 GMT
            Not After : Jan 13 23:01:30 2027 GMT
        Subject: CN=299eee5b-b74b-4af2-9346-fcf8dd0a99cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:94:03:bf:2d:3e:9e:1c:ec:1e:22:5c:19:
                    ea:ce:32:2d:95:cb:3f:dd:4a:9b:77:36:21:bc:11:
                    b3:c6:1d:0e:63:af:0a:22:d4:40:4a:de:af:89:1b:
                    59:68:02:b9:7b:a8:fb:21:1e:c5:72:90:e6:15:b9:
                    6c:c1:6e:ce:a3:27:ce:83:9b:1e:f4:b5:d7:d1:ea:
                    0e:3b:e3:79:5d:c3:c4:9a:ef:ad:30:1a:cb:86:b3:
                    a8:1f:40:cb:15:9f:60:ed:88:5b:9c:84:56:d1:a9:
                    a8:95:ce:bd:52:4b:3e:45:79:b9:c6:b9:1c:f7:ff:
                    16:65:52:04:1b:ff:e8:87:64:f3:e1:4b:58:27:0f:
                    65:6f:d3:27:f7:6a:e6:d9:66:ea:8c:3c:d4:34:54:
                    3f:44:83:0b:6f:d9:88:e9:c0:fe:89:66:78:56:a4:
                    7a:ef:f8:63:81:c4:fd:a8:50:08:f2:15:d8:ab:08:
                    7c:fc:cd:44:a4:3f:f3:e5:d3:6a:71:23:e7:ae:36:
                    b5:3d:56:2e:19:b4:3f:4d:40:54:df:86:87:6a:87:
                    9c:47:1d:f1:9c:60:6a:10:76:ee:02:09:2d:8d:24:
                    a0:d4:9e:e5:f4:fb:bf:c7:f9:b2:55:c8:b4:19:0c:
                    06:ba:7f:33:30:53:be:b3:1f:f0:16:6e:91:fb:35:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D9:BA:F3:CF:45:56:00:CF:BA:19:25:E4:B9:45:4E:40:33:AE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/de379f16-2088-33f4-bc9a-b2ea86a8ffd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl

            X509v3 Authority Key Identifier:
                keyid:D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f34c:f100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e8:2c:9f:08:8d:d4:4c:4a:a1:2e:4b:76:c1:b5:29:51:64:
         0e:6f:56:41:6a:6b:40:f7:5b:1a:06:36:20:c7:30:a9:28:2c:
         93:ee:8e:86:93:bb:64:3e:79:69:8f:8c:9e:5e:4c:db:f1:84:
         ff:fd:83:82:7d:8b:27:d2:ee:6b:ce:e4:a9:b6:c9:63:02:90:
         b3:07:2f:5e:c6:68:d7:20:9f:2b:12:7c:37:93:19:44:56:ef:
         e2:1f:cc:2d:e6:a1:35:db:f0:35:31:a4:01:1f:f2:98:26:9e:
         1f:75:87:92:27:a4:3a:cf:d0:60:55:f8:2e:19:7d:6f:b3:21:
         bb:a4:70:18:ad:05:0c:1b:d5:d3:87:33:68:02:7b:4c:72:ac:
         b7:32:33:bd:35:c2:a2:ec:89:2a:5a:e9:ea:1d:6c:10:fa:eb:
         3f:ee:8e:d6:0c:e3:c4:a7:bd:aa:8a:59:a6:5b:75:12:6c:6d:
         fe:a1:16:19:58:2f:2f:f0:d3:b1:42:de:fc:be:01:97:60:f6:
         13:cb:63:0d:73:f3:fa:3c:87:51:35:92:8c:da:c1:f6:a2:b6:
         ac:f3:ae:1b:78:04:a0:66:10:57:4e:6a:bc:e4:04:42:d7:b2:
         db:9d:cc:05:4a:2d:19:e9:a0:38:24:6c:ad:4a:9e:d9:4d:ae:
         2e:45:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:17 2026 by rpki-client