Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa
File:                     42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa (raw, json)
Hash identifier:          vNd4stlYWo+lY4uHYXoOOXC9vDtp6uX/0fnaJ3mUfZg=
Subject key identifier:   11:B8:E3:90:C8:97:C2:5C:A3:6C:34:AF:5B:04:50:41:AD:B5:A3:BB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D38C7E0ACDF2E2C9112A0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2620:11a:c045::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:38:c7:e0:ac:df:2e:2c:91:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=af986dbf-9fa3-4217-911b-1ac2b3e10b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:f8:26:2c:18:1a:ea:ea:51:82:77:c1:3b:
                    eb:b3:41:f7:e0:64:85:78:f5:01:b2:af:fc:94:ba:
                    cf:5a:09:b1:90:0d:97:a6:c1:3f:66:33:88:26:d8:
                    f5:cf:04:6b:f6:81:4e:d7:4f:5c:4d:67:81:b3:10:
                    cd:ab:b9:3f:79:ff:74:ae:17:df:29:2e:33:34:9c:
                    ce:27:20:65:7f:28:87:a9:d9:01:12:c3:cb:2b:bf:
                    c8:31:84:17:b1:47:dd:d7:41:31:cc:95:40:bf:bc:
                    48:09:9a:80:2b:16:19:3b:03:6d:99:98:46:2c:83:
                    9f:24:41:ab:24:14:d5:ed:ca:cc:5e:bb:2c:f6:a4:
                    aa:c6:25:74:c9:01:68:63:fe:e9:2a:06:a7:cf:ee:
                    70:88:1e:65:7c:08:78:d0:76:d5:ef:63:c4:46:4c:
                    f6:52:12:ff:d8:09:51:31:72:69:d3:11:8c:52:27:
                    9b:d8:c9:e8:24:0e:18:12:7b:1c:75:c0:03:09:68:
                    0d:2f:c3:91:60:43:8e:73:a0:08:ce:18:c0:04:47:
                    e8:6e:42:64:19:ae:65:ac:6c:c3:39:f9:3d:53:15:
                    f7:eb:c4:b4:f9:28:5e:ec:fe:78:bc:a9:58:bd:9f:
                    7e:5e:5f:12:78:56:cc:48:8d:79:8e:ef:45:6c:ca:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:E3:90:C8:97:C2:5C:A3:6C:34:AF:5B:04:50:41:AD:B5:A3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:cd:65:20:a1:88:87:4d:a3:09:2e:4d:24:ff:74:48:93:5b:
         a0:b1:86:71:5a:31:0f:cf:5d:05:09:79:97:97:a9:64:3e:69:
         68:0b:ad:e3:4f:5a:12:24:c6:ce:2f:d4:77:5e:13:87:3e:dd:
         fa:a5:d1:94:06:68:a8:b5:e5:f2:27:e9:23:10:d1:8a:8e:b0:
         a2:c3:7e:76:dc:02:8f:89:55:f8:a1:88:7d:8b:42:9b:b7:b6:
         5f:c2:79:5b:60:d6:d5:6d:ee:03:b2:2f:62:66:12:e3:3f:6e:
         3e:a1:56:68:e4:97:58:04:c7:47:9c:a3:97:e8:89:47:84:42:
         2b:9d:2d:15:4f:9e:1b:c3:88:c6:e6:4b:15:b9:f6:24:19:bd:
         28:65:8a:2e:1e:db:f9:53:84:04:27:4a:24:cc:3c:7c:b4:08:
         d5:9f:ae:75:43:98:94:86:4e:fb:b3:ca:5b:f7:1e:75:6f:19:
         72:0f:4d:f9:2a:7b:61:b2:ca:30:c5:d8:26:ae:44:9d:3e:c6:
         ed:4c:50:c9:90:ed:e9:c3:c1:be:6a:47:13:df:dc:24:bc:fe:
         46:57:d2:c7:a9:f7:50:d3:fb:ea:df:a7:d7:c3:00:ff:c2:23:
         39:56:d9:54:ec:80:d6:63:e2:c7:7a:3a:7e:4a:f4:48:fd:09:
         fa:63:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:21:15 2026 by rpki-client