Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
File:                     fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa (raw, json)
Hash identifier:          n/7lKMBPZN30ECVgf3PlA66zZlAGWGcwopmQnbJOH2c=
Subject key identifier:   E1:71:2B:8F:71:FF:68:15:A3:61:A2:1F:ED:33:29:74:CD:24:01:64
Certificate issuer:       /CN=348d3713-8fd7-4568-b353-ff9d07414f1a
Certificate serial:       010D0C9F4328584F49740E66A2185BE36D844700
Authority key identifier: 83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400025
IP address blocks:        2620:12b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0e:66:a2:18:5b:e3:6d:84:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348d3713-8fd7-4568-b353-ff9d07414f1a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ed888f8c-e656-4649-ae88-f793cbc93cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:f8:76:09:1d:0d:b0:68:d3:96:a0:3a:82:
                    6d:82:c0:b8:41:81:5d:11:33:7d:f6:17:6b:a1:06:
                    cc:5a:18:15:75:13:b2:a7:e7:18:fb:7f:51:5e:ba:
                    bc:94:e2:dd:aa:75:59:ef:c1:f6:94:4e:93:03:43:
                    7f:d3:65:eb:83:0b:af:9a:f7:9b:42:a2:e7:71:69:
                    72:c8:bc:97:ff:57:42:d5:14:8b:1c:13:19:ac:8e:
                    5b:9f:d5:ec:97:5f:b5:c3:7f:09:33:39:60:ec:70:
                    c9:b1:b2:60:31:a7:14:43:b4:9a:7f:90:c5:7f:db:
                    87:b2:6f:1f:7e:96:fe:9a:26:46:95:3c:a9:df:be:
                    5a:8e:52:b3:cc:28:33:be:72:86:c7:11:88:64:23:
                    3a:af:d7:1f:88:68:99:7c:43:e1:92:23:45:03:be:
                    3a:83:4b:fa:02:f2:17:0f:e4:3b:c8:2f:54:fb:d0:
                    0d:9f:82:30:ea:d6:c6:0c:55:49:39:18:bd:75:8e:
                    a3:4a:44:59:ba:73:55:6f:8c:76:59:36:90:fa:f3:
                    f1:7a:5f:c1:8e:df:7f:e0:1e:e0:24:7f:24:d8:a9:
                    ce:78:a5:d8:0a:73:92:16:5b:ea:da:da:2c:d3:9d:
                    8d:54:ef:22:b2:23:bf:2f:4c:6d:d4:83:b7:47:7e:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:2B:8F:71:FF:68:15:A3:61:A2:1F:ED:33:29:74:CD:24:01:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl

            X509v3 Authority Key Identifier:
                keyid:83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:0d:86:6c:2d:48:8d:9d:55:36:9c:8b:dd:f6:f6:cd:8e:
         1a:52:14:87:ad:7d:11:89:b3:1b:cd:49:41:9e:c1:ea:71:8e:
         45:0b:52:98:8e:71:7d:97:26:18:5b:6d:51:fe:c8:45:c0:f5:
         32:68:dd:74:92:f3:04:ff:31:1c:c6:2f:20:95:fb:96:66:68:
         c5:a1:dd:b0:2e:b5:29:8e:56:84:85:4c:69:a2:4f:ff:49:09:
         53:43:8d:82:0d:5f:6e:11:78:82:88:37:ae:75:5c:a3:7b:88:
         b5:fa:6e:94:55:e5:70:3b:f1:2e:fb:e6:85:4b:08:77:37:df:
         12:0a:65:85:58:cd:b9:15:37:47:c5:ec:24:65:b7:96:f3:bc:
         28:e2:a0:4c:2c:fc:4d:8a:d9:74:d4:93:22:61:57:45:62:34:
         03:c9:9e:35:1a:e4:42:37:ba:c5:c6:65:e9:64:42:f4:5a:2b:
         3a:44:38:db:28:3f:83:9b:f6:84:8b:12:bd:5d:83:75:97:1c:
         d3:9b:83:d2:24:de:92:2b:71:85:e3:44:d5:e3:bb:e0:ad:6f:
         f2:c8:61:d9:57:a1:e1:c6:26:e0:af:78:08:70:51:ea:2a:75:
         39:e2:47:1e:ed:d3:f8:d6:c9:d6:b2:fa:dc:74:49:f2:00:16:
         6e:c4:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:18:07 2026 by rpki-client