Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/a57d1fb2-58ee-328f-9a05-fa425b781022.roa
File:                     a57d1fb2-58ee-328f-9a05-fa425b781022.roa (raw, json)
Hash identifier:          qsZNqFU/4KN5DZLofX/9wRVN8nPeD91t5dFFqxhIq4E=
Subject key identifier:   61:A2:EF:C4:39:73:58:19:5F:8A:49:BD:84:DF:DD:FE:37:6F:29:2C
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584F00DCC3264BEFFD13B599DA40
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/a57d1fb2-58ee-328f-9a05-fa425b781022.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     398343
IP address blocks:        2605:e440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c3:26:4b:ef:fd:13:b5:99:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=e7cf1a76-7cff-4469-8747-597ffa55def8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:48:66:f0:3e:03:5f:a0:cf:72:ca:1f:5e:
                    15:b4:64:09:c5:f3:c4:ab:42:8c:49:04:37:2f:df:
                    82:79:17:0e:c3:4e:7b:47:39:3d:05:dc:96:e0:3c:
                    94:fe:33:0f:55:87:60:2a:20:1d:12:92:f0:c9:3e:
                    56:de:71:2d:c5:7a:8a:e9:2f:a9:36:d3:b2:cd:1b:
                    c0:37:4c:95:66:d2:e4:71:f2:67:46:0a:01:8a:08:
                    00:03:fc:26:0b:b7:7a:8d:08:7a:60:1f:d2:00:d6:
                    39:0e:87:2c:1e:3b:a5:74:73:2a:16:1a:b3:53:64:
                    38:18:e2:2f:df:b8:25:76:cf:75:22:ff:67:c4:85:
                    74:f8:3d:8a:f6:8b:03:5e:ae:53:fe:69:51:7a:c0:
                    ef:a3:3a:d5:08:97:02:e6:02:01:1b:f2:c8:e5:30:
                    ca:68:c6:49:b2:4a:ab:b0:e4:2a:8f:21:78:23:d8:
                    48:61:40:14:66:69:c0:4b:19:32:2f:54:9e:5b:d5:
                    a1:b6:65:4f:c9:03:13:f5:d8:5b:27:b1:16:bd:44:
                    de:7f:d7:d7:a9:00:ba:69:a2:ca:07:81:4b:6f:c3:
                    a5:8f:a8:3b:35:a0:0c:a1:38:80:52:47:e1:fa:be:
                    97:f3:1f:ab:f4:e9:21:e0:8c:a2:27:c1:2b:90:f6:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A2:EF:C4:39:73:58:19:5F:8A:49:BD:84:DF:DD:FE:37:6F:29:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/a57d1fb2-58ee-328f-9a05-fa425b781022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ac:af:02:39:29:bd:04:c4:e7:dc:80:8c:d9:f5:62:b8:61:
         83:fa:eb:8d:4c:83:5f:3f:04:ee:79:b2:9c:3d:1f:f5:c1:b9:
         47:a4:de:36:33:33:56:af:81:79:a7:a7:25:5e:e7:37:03:98:
         1b:0d:c0:ab:bf:91:7b:be:69:5b:90:bd:37:da:49:f7:0c:e4:
         0f:f4:2a:b4:cf:a5:6c:fd:84:a7:33:c8:7a:6e:b3:e6:be:60:
         7e:e9:1d:ee:8a:1a:db:91:af:37:e7:e6:d7:36:9c:a9:55:4d:
         9e:31:91:24:e5:bf:a6:2d:0b:8a:d3:8a:26:c9:2e:dd:2f:d0:
         da:ef:2d:bd:9c:c0:f8:7c:d7:04:61:03:aa:0d:50:38:11:6e:
         ab:93:35:bc:f3:f7:6d:d6:a6:7a:0d:07:13:94:27:2c:de:6c:
         77:e7:c4:64:49:a6:cf:8c:c0:29:92:aa:5b:0f:c8:34:6c:79:
         ff:56:b8:28:d0:24:03:82:f6:4f:8e:ac:67:1f:4d:86:c0:9e:
         94:26:7c:58:7a:9e:36:a3:d2:0e:2a:de:75:3d:77:69:32:61:
         34:6d:f9:8b:46:5e:39:f7:b1:3e:22:40:22:2f:2e:aa:21:5f:
         bc:fd:a0:53:e4:91:75:37:a1:5a:49:60:c7:f8:32:da:cb:08:
         a7:fe:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:53:58 2026 by rpki-client