Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa
File:                     3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa (raw, json)
Hash identifier:          v8nlNBszW/U1apvdplu7aRNPg9ZP32nzIUGyVMBpoPs=
Subject key identifier:   C5:E7:C0:ED:68:CF:8B:C9:79:B0:61:D6:9D:F4:71:AE:FA:0B:F7:AF
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F4328584F49740D4CB4D66240272DB318
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2620:135:7018::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0d:4c:b4:d6:62:40:27:2d:b3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fd1bdaf0-ba95-4622-b346-c3faf856b810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:bd:32:84:1d:2e:8e:2d:e8:79:66:80:a2:
                    06:94:36:78:62:6c:00:48:a7:8a:a4:d4:48:05:75:
                    3b:bc:34:35:2a:63:e2:60:1c:03:91:40:d4:0c:e4:
                    aa:77:46:2f:08:00:19:21:43:30:98:b4:59:4a:fd:
                    59:37:13:e0:1b:7d:a1:ac:69:6a:ed:6c:39:cd:12:
                    27:ee:67:fb:01:7d:1f:ff:58:30:40:b6:35:dd:9c:
                    f4:5e:4a:b7:4f:b3:3e:81:6c:14:db:5f:34:c6:2b:
                    30:d0:25:b2:26:a8:e9:76:33:ff:73:d0:dc:c1:66:
                    36:07:3f:3f:c8:67:d2:98:3e:84:73:09:57:86:fa:
                    61:b8:fd:84:2e:4f:f8:f0:29:b5:83:b5:3c:f0:1d:
                    54:8e:55:f6:1b:eb:35:a4:20:df:03:50:16:43:e9:
                    94:14:28:0b:aa:87:94:f1:e8:bc:ee:93:ae:76:bc:
                    98:3e:b6:f1:06:5b:68:d5:bd:6a:39:e6:24:65:3a:
                    2f:2e:76:39:4a:af:f2:f4:1d:26:e6:a1:fd:f1:84:
                    8a:0b:17:02:51:1f:00:8c:93:0b:53:09:c7:14:13:
                    c3:85:b8:be:d1:b1:f9:67:5d:8e:bd:c4:7f:23:e2:
                    a2:3e:1e:69:76:5d:47:1c:4c:89:bb:95:eb:ba:29:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:C0:ED:68:CF:8B:C9:79:B0:61:D6:9D:F4:71:AE:FA:0B:F7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7018::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:c4:e5:5f:6e:f6:3e:e2:f2:eb:07:97:21:33:f1:66:53:
         9a:5e:29:a4:9c:da:76:d3:61:16:e9:99:cf:9f:80:2d:5e:45:
         dd:0c:77:ee:d0:2a:5b:66:32:eb:57:b7:08:dc:aa:66:0c:4f:
         ca:bc:ea:38:ef:2a:b9:e8:e1:de:79:99:fb:6e:8d:9e:e8:7c:
         fd:cc:95:2e:8d:02:4e:31:33:12:4f:3f:f8:e4:7d:ba:3f:83:
         7f:48:c6:a6:af:b3:19:a9:d0:44:f5:c2:d8:41:93:71:a9:ad:
         3c:24:15:af:55:d1:61:12:24:dd:fb:34:44:64:3e:c7:5e:56:
         d7:c9:97:39:56:a9:13:d7:27:4c:eb:8d:f9:b0:eb:ad:4c:62:
         f3:46:8a:45:9c:a4:80:3f:a7:b8:b6:34:27:f1:89:d6:b7:85:
         b1:6f:93:f5:a3:28:e4:cb:47:44:08:d6:08:5f:0c:35:3b:67:
         57:1b:ec:5c:b8:cf:57:36:ee:43:6c:cd:b0:70:58:d9:89:97:
         f0:f2:a3:ae:29:fa:12:2a:18:32:10:d7:33:38:77:c5:83:db:
         80:9a:a5:16:a6:11:af:c2:80:21:15:0b:bf:8b:94:a0:40:e7:
         d3:17:9e:0a:42:50:8a:f0:4a:0e:dc:4d:4c:07:ef:2e:83:a3:
         f0:f4:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:56:14 2026 by rpki-client