Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa
File:                     0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa (raw, json)
Hash identifier:          /DOqfpDatgyFpBeNfjqYXHYK+F9oxztHLCjcb+/8eW4=
Subject key identifier:   3D:26:8C:09:80:50:F0:30:AB:DF:CE:86:4F:FB:F9:6B:4F:BF:B4:87
Certificate issuer:       /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Certificate serial:       010D0C9F4328584EA79473821176A2C5509DD600
Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        2620:11b:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:73:82:11:76:a2:c5:50:9d:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=593e4da9-d908-468b-9ae1-2277fe84ba07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:50:5d:14:47:07:7a:c6:ed:6b:61:a8:fe:
                    67:c6:7a:d4:3b:7e:8e:b5:c2:85:81:b8:62:97:f1:
                    3e:97:07:7c:55:39:86:0a:de:2a:09:c3:62:3d:36:
                    cf:ea:be:a5:99:a2:4d:d0:e0:ae:d7:76:59:01:74:
                    07:6a:7c:6c:a1:75:d9:cb:dc:b8:43:26:a6:55:13:
                    d2:2a:db:cb:be:45:e8:cd:65:49:94:10:ca:04:92:
                    7c:c5:81:e5:12:f2:99:40:07:65:e1:0a:ce:a6:21:
                    e4:81:2e:30:3a:fd:52:16:50:e0:7b:3c:8a:56:cc:
                    b4:c5:e3:4b:9b:5c:53:44:81:1e:71:1e:34:71:5d:
                    88:7f:cc:6a:48:98:5a:8b:98:ed:ea:ab:6c:89:c0:
                    05:50:a2:b1:ee:8a:c2:b2:77:4c:a7:36:51:16:dd:
                    ae:93:af:4c:de:29:74:9f:da:5f:90:0b:67:8e:5c:
                    93:ce:18:6b:fd:1b:2a:ce:b4:26:33:79:c5:8e:69:
                    11:64:4c:01:0b:e0:d2:36:f2:36:16:f1:c8:d4:90:
                    bf:1f:0b:34:13:a7:5d:a9:05:d6:3a:e3:cc:cd:1e:
                    48:a5:b9:36:c0:f4:17:3b:6f:b9:dd:fd:75:8a:7a:
                    c9:2b:ee:42:dd:97:2a:d0:e0:27:16:99:7c:05:b9:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:8C:09:80:50:F0:30:AB:DF:CE:86:4F:FB:F9:6B:4F:BF:B4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11b:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:4b:12:76:f1:16:3f:82:9f:6e:ca:2d:74:09:75:07:c8:
         b9:cb:57:bf:c8:cf:bc:ad:78:cb:b2:70:26:e3:85:e8:9e:a3:
         63:43:4f:7d:b3:79:cb:84:df:82:34:89:96:f4:89:0f:45:83:
         4f:8c:7c:ad:14:66:a7:9d:0c:a6:e9:7b:d8:42:58:a1:a0:7f:
         3a:f8:a4:31:93:ab:67:02:57:50:b6:8c:28:6f:a3:69:8a:d6:
         a6:ae:6e:57:31:88:0b:a5:d8:5e:5d:7d:69:3c:49:d1:68:91:
         1d:d4:f1:ac:10:4d:eb:58:c2:4f:63:24:64:61:7e:97:7b:e3:
         c3:0e:da:ae:34:b3:5b:e7:ab:fb:2a:cb:6a:98:b0:5d:a7:5b:
         62:fe:29:25:da:9e:6b:12:7f:6d:cb:d7:f2:f2:43:33:b9:49:
         eb:49:98:d3:f5:f0:cd:22:fe:08:7f:16:51:8d:89:14:ab:11:
         c4:ea:55:49:0b:58:74:7c:20:e2:37:fd:4c:d2:85:00:97:53:
         71:1c:a9:b7:e0:23:8a:e0:74:49:88:b4:f5:62:26:1c:a1:51:
         ba:54:9c:09:e2:a4:b0:cc:52:30:dd:29:7a:75:24:64:03:3e:
         b9:8a:a7:3a:d0:44:f6:b7:fb:9e:6a:9b:fb:b9:91:1c:68:a3:
         1f:9f:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:58:41 2026 by rpki-client