Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/713b89e8-8e74-386b-b6e1-336af71f2195.roa
File:                     713b89e8-8e74-386b-b6e1-336af71f2195.roa (raw, json)
Hash identifier:          eXSSisHjErRPgLLTXd1nNc9FDli6W4XNbyQdfmYzsn4=
Subject key identifier:   15:88:9F:D5:88:A9:16:9B:E0:BF:1E:AE:EE:F1:4D:57:BD:64:39:D0
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584F655E6BD9B02AE8F89FDCACA0
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/713b89e8-8e74-386b-b6e1-336af71f2195.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     398395
IP address blocks:        2606:fc40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:6b:d9:b0:2a:e8:f8:9f:dc:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=c8a74daf-e4e9-4213-9003-92139d4c103d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:9d:86:e9:1a:61:ad:4c:14:4d:c4:d6:b9:
                    2c:9c:cc:ad:4f:10:70:e3:ee:74:cf:f9:7e:5c:af:
                    b4:9b:52:95:17:df:25:72:fb:43:6e:6d:98:fa:bf:
                    ce:5d:6c:af:fd:26:df:6d:d6:64:ab:ef:8c:8b:d2:
                    0d:61:83:4e:59:cb:71:61:c8:56:e2:84:bd:11:e6:
                    0e:8f:82:79:f9:82:80:5b:2d:28:80:75:7f:a8:17:
                    82:1b:4f:fd:3a:7a:8b:1a:d2:ca:0c:ae:af:06:d0:
                    b6:62:44:95:8a:26:f3:f9:5d:3c:cd:8e:a0:46:9b:
                    61:4a:a1:75:90:ad:54:f6:c5:59:45:03:de:8c:35:
                    63:04:f4:d5:61:42:4e:85:8c:0d:60:6e:9a:dd:07:
                    73:a7:0b:95:46:28:0d:ee:98:9f:0d:38:7f:be:bb:
                    9e:08:a7:b3:b3:35:77:58:06:eb:0e:31:be:42:44:
                    63:1b:3e:da:43:a8:ca:95:20:4f:09:0d:f5:9b:29:
                    5a:a0:18:56:a1:06:a1:a1:c5:2b:98:91:f5:a2:8d:
                    dc:32:c1:66:0f:5e:1e:7d:48:9b:24:bc:d3:89:c5:
                    64:fc:94:dd:89:98:9a:19:34:6f:35:b1:ae:0b:d5:
                    45:89:bb:4c:c9:e8:29:2b:64:6d:9a:0c:17:f9:16:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:88:9F:D5:88:A9:16:9B:E0:BF:1E:AE:EE:F1:4D:57:BD:64:39:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/713b89e8-8e74-386b-b6e1-336af71f2195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:df:a2:9b:42:dd:f8:a9:8a:13:42:b5:c8:26:6a:45:82:6e:
         96:46:35:1b:a9:a0:80:9d:af:b5:cb:5e:78:c1:53:98:e4:ca:
         83:70:78:87:5b:e4:bc:ff:8c:97:d8:dc:ea:3c:a2:28:80:f4:
         85:93:96:c0:b5:53:41:a3:f1:bc:2f:30:24:bb:85:51:5e:91:
         3b:09:53:d5:ad:76:03:a5:bb:86:80:da:4e:08:2e:96:52:ad:
         1a:ea:73:47:26:17:0f:d0:56:a2:76:0f:44:71:23:a0:5c:64:
         17:e1:2b:40:fd:bb:e7:a7:77:58:94:33:30:b6:4f:34:5c:0b:
         3f:de:45:b8:b5:fe:3b:53:1a:80:da:51:57:40:84:8b:fb:c6:
         b7:ae:e5:6d:56:f6:19:c1:5e:76:5a:19:fb:6f:1a:c0:71:74:
         8c:28:18:af:41:77:77:d6:00:ad:95:69:3a:70:f1:d2:0c:c6:
         ef:4b:64:fd:8a:e1:f4:2b:2a:ec:b3:6b:6e:6e:05:03:26:cc:
         37:9b:d7:c5:58:78:f9:46:97:52:55:af:6e:02:67:27:b3:08:
         0e:a5:9a:30:a4:cd:69:7e:3a:09:6b:9a:df:e0:b8:41:7d:6f:
         03:5b:92:fe:cb:d7:51:17:05:a7:08:2e:a5:8c:98:00:29:58:
         5f:5c:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:19:03 2026 by rpki-client