Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/37e06edf-9705-3c29-9b69-06d4a233e8b7.roa
File:                     37e06edf-9705-3c29-9b69-06d4a233e8b7.roa (raw, json)
Hash identifier:          nJ07Oym8++XVT+tIPGhHMUM9ORnMQ9AcHu1eBIe5y0Q=
Subject key identifier:   FE:FE:50:92:DB:1F:BF:2E:9B:95:18:E5:2E:B0:87:10:32:A2:04:4F
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584F497408E0486E83BF69D2B200
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/37e06edf-9705-3c29-9b69-06d4a233e8b7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2152
IP address blocks:        2607:cc80:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:08:e0:48:6e:83:bf:69:d2:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a93ad0e6-ff3b-4e52-9c77-1126359c0d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:8a:57:00:d1:66:57:ae:13:6a:ab:c3:05:
                    4e:1e:e6:bd:4e:13:fe:19:00:63:b6:19:42:6c:0b:
                    41:9f:0e:13:8e:45:77:34:05:05:a9:36:4a:a4:57:
                    c0:11:fe:3b:87:a2:35:30:d5:78:05:f1:93:02:20:
                    57:56:98:d2:fb:65:80:77:15:6f:da:54:54:bf:a1:
                    74:b5:62:81:17:25:15:cb:d7:9c:b8:b4:fc:a2:86:
                    1c:38:56:61:14:8b:b3:25:36:87:b1:8b:03:27:37:
                    f3:0d:09:77:fa:9f:c5:42:db:f6:31:70:11:e1:da:
                    0a:4c:b3:d9:e1:26:2b:50:ed:f4:8f:0e:9d:53:49:
                    da:0d:18:d9:22:a6:9d:cc:fe:77:4d:a5:58:50:f3:
                    20:7f:be:b8:81:51:a7:6a:77:74:3c:68:ab:76:41:
                    c1:41:e5:76:4d:8e:71:0c:2e:5d:14:e6:11:c7:81:
                    5a:7e:a1:fd:40:04:a8:9e:4a:02:80:a9:e3:ce:be:
                    98:4a:49:51:bd:10:74:10:50:84:b5:71:07:e4:f2:
                    b9:d0:8c:0f:8f:8a:3d:a8:27:3c:73:ac:19:7a:22:
                    41:11:87:58:85:dc:7b:c6:ac:14:97:2a:97:20:27:
                    d5:88:98:02:3d:9b:52:f0:97:a3:58:97:22:2a:fd:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:50:92:DB:1F:BF:2E:9B:95:18:E5:2E:B0:87:10:32:A2:04:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/37e06edf-9705-3c29-9b69-06d4a233e8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:97:fc:8c:46:0b:e1:df:9e:1d:a5:82:fa:b8:bd:98:68:af:
         a0:26:67:d7:62:7d:3c:c6:6a:2a:e1:fb:65:8d:49:c0:3b:ed:
         f9:ae:80:35:d2:d2:6a:36:71:3b:7e:01:d2:79:38:06:46:ad:
         f3:94:fb:96:99:ac:41:73:ff:ee:a2:2c:48:0a:c8:fa:76:5c:
         7d:8b:26:07:e7:90:bc:a5:6e:66:cd:d0:58:58:91:6b:ed:4e:
         0a:e2:85:9a:48:d0:29:10:c5:c0:15:11:f6:e1:13:54:63:28:
         81:21:27:a8:7b:44:21:3a:c5:13:46:89:a8:82:2e:d4:26:b7:
         1e:39:e6:fa:89:3f:c8:3e:9c:be:be:f9:40:4c:c1:93:31:45:
         a4:6a:32:4b:cd:55:7e:f8:15:be:45:6c:20:63:de:1b:b7:94:
         ce:80:64:92:f6:a8:d4:a6:d6:4c:ff:2e:4f:85:63:2a:4d:f6:
         79:66:ac:39:92:4d:b2:79:aa:ac:70:61:3a:e9:ec:c6:07:23:
         d4:82:69:86:45:9a:93:d6:77:c1:c5:63:ef:eb:b3:94:22:d1:
         0c:4c:f5:95:09:3c:82:86:0a:e1:64:f6:a3:5d:95:6e:b3:b7:
         48:5b:2c:1b:9b:89:2a:3d:56:c5:fb:3a:62:82:87:09:ea:80:
         3a:12:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:13:38 2026 by rpki-client