Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
File:                     e843172a-871a-3a64-bad5-2099da6dcdfb.roa (raw, json)
Hash identifier:          HqN0bUj2kPM5nPsIz3JRgBKBUrQb1j/mVxqptNhEghM=
Subject key identifier:   7C:05:37:8A:AB:D9:D8:1B:9C:EE:33:04:13:CF:7E:DD:7D:BC:B9:E0
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F4328584EFE122169F73677A37FA0CEA0
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     400544
IP address blocks:        2607:76c0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:21:69:f7:36:77:a3:7f:a0:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=e4f1aff9-4068-47ef-b00b-aa67d3037f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:37:5b:d7:73:63:06:67:db:2c:bf:ac:f0:
                    d3:70:82:00:13:ca:8d:f9:19:29:03:a5:37:03:95:
                    d9:38:e1:fe:d8:68:d9:bd:7b:c3:cd:00:f5:62:31:
                    79:be:70:2f:a3:ce:4d:3f:97:c7:a4:56:0b:4b:46:
                    e8:45:a4:45:d4:d7:53:e1:01:d6:a8:2a:25:13:5b:
                    9b:99:7e:e9:e2:d0:f9:59:d7:ce:54:5c:c2:a3:a9:
                    b6:fc:eb:31:1c:e3:4f:2e:7e:27:6f:4c:fd:d6:b9:
                    27:85:70:be:81:2d:62:a5:57:f9:f7:16:72:6e:d9:
                    14:bc:53:8a:86:96:14:d8:a7:bd:03:1b:59:dc:8e:
                    9d:6f:22:9f:56:f3:a1:2e:42:64:fb:95:74:b9:fa:
                    07:24:92:36:3d:97:0b:84:06:71:00:c5:5f:ff:32:
                    ac:1c:f3:3e:e0:cb:4e:5c:40:a3:9f:f9:0a:62:46:
                    7d:92:86:80:37:05:51:54:1f:e2:e8:2e:33:c0:6c:
                    42:2f:43:c2:1d:be:63:95:70:67:cc:01:7f:85:ba:
                    30:69:da:25:07:04:74:86:c5:d8:aa:06:de:8f:a1:
                    0a:08:6c:10:ac:6e:9b:aa:a2:da:4e:b8:3c:2c:ae:
                    b0:b4:3f:7e:b0:9b:41:d6:bf:a5:45:63:34:00:7c:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:05:37:8A:AB:D9:D8:1B:9C:EE:33:04:13:CF:7E:DD:7D:BC:B9:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:de:4f:74:04:74:76:d7:0b:d6:18:80:f0:08:aa:f9:e9:0a:
         25:2d:ce:fe:2a:fa:d1:49:4c:5f:c4:06:6a:21:f8:9d:16:b0:
         46:61:70:47:50:c0:2e:7d:11:e6:1a:78:9c:4c:54:36:13:85:
         65:a7:73:27:f0:6b:ab:4f:ae:07:83:77:fd:18:0f:51:72:99:
         ed:53:d8:c2:09:92:7b:fc:68:db:26:82:3f:66:a1:f7:93:ab:
         c4:8d:bb:1f:7c:a2:61:21:f2:a7:72:28:51:fc:9a:1e:41:f5:
         b1:21:de:8f:6a:72:b4:a7:a5:d1:aa:09:e8:33:d9:b0:84:9e:
         fd:3c:8b:dc:3a:7d:77:94:f5:f5:55:0c:81:67:9b:9a:92:b3:
         bd:64:e5:10:b7:a2:db:0a:93:e8:1e:c0:b4:23:c6:4d:33:98:
         4b:2f:89:06:b8:9f:b0:3a:5a:99:89:4a:e0:53:be:2d:67:bd:
         28:44:cc:4d:21:ae:1b:24:12:8a:c1:39:0c:bf:8a:79:72:ac:
         cd:10:fc:be:90:6b:84:e0:23:14:ec:4c:b8:5a:d3:0b:c0:cb:
         fd:46:7d:57:f4:f8:c3:cc:db:fa:10:18:5a:e3:4b:fb:21:92:
         c2:63:3a:3e:90:b2:4f:c6:01:ec:be:9b:53:de:e4:3a:a4:86:
         d7:c1:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:41:09 2026 by rpki-client