Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/8eb7391e-07b6-3334-ae70-e280a562065c.roa
File:                     8eb7391e-07b6-3334-ae70-e280a562065c.roa (raw, json)
Hash identifier:          bjIoYcw+2z9rw3TIZbfOiesWSrkisuJe9OnGKjjiq0Q=
Subject key identifier:   30:FC:26:CE:E1:5C:F5:D6:77:80:59:56:84:A3:DB:11:B2:D0:95:42
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F4328584F612D6013555D4B0E32BE3600
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/8eb7391e-07b6-3334-ae70-e280a562065c.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     19388
IP address blocks:        2604:8800:ffff::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:60:13:55:5d:4b:0e:32:be:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=cecb5750-a7bf-4076-98a3-14253b73cad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b6:78:1d:6e:87:49:1c:eb:4d:cc:f4:25:0a:
                    8f:48:96:4b:5c:ab:1b:70:86:f8:13:e8:2a:79:1f:
                    22:f7:3e:b8:2c:21:cb:ac:c5:1c:5a:04:48:c5:cd:
                    f0:4d:be:77:39:c1:70:0a:0f:f4:e0:84:c4:a8:46:
                    83:66:e5:3d:ee:50:44:46:ac:3d:bb:fc:55:04:76:
                    16:90:60:d5:55:bd:2c:e6:43:ea:71:d2:5d:ca:6c:
                    95:2e:43:d4:1c:a7:f4:dd:1e:98:29:cd:6d:65:29:
                    67:60:eb:a2:69:b1:fe:a7:8c:63:b8:20:25:c3:08:
                    42:d5:92:c6:e2:f8:9c:c6:c6:9d:67:b9:72:6c:f0:
                    44:41:5d:b9:3e:fd:bc:da:e3:26:6a:24:4f:8a:e2:
                    1d:4f:8f:f1:f4:ae:d4:98:26:8e:05:b3:ba:f0:0c:
                    5f:02:75:4d:45:5a:f5:15:be:99:14:21:d8:75:91:
                    67:9e:cc:77:9e:e1:da:99:f0:4d:6e:c9:a0:0a:91:
                    79:45:c5:64:3b:e0:d1:0b:3e:89:ec:35:22:58:a4:
                    14:a9:d6:98:8e:6e:8f:17:ed:2c:ed:c8:af:d5:a2:
                    fc:96:22:30:4d:d1:da:f2:33:a5:f9:6b:11:18:e4:
                    f8:b2:04:cf:02:99:b0:2c:16:01:26:68:35:21:47:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FC:26:CE:E1:5C:F5:D6:77:80:59:56:84:A3:DB:11:B2:D0:95:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/8eb7391e-07b6-3334-ae70-e280a562065c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8800:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:f1:2c:21:b7:a8:4f:e4:85:f8:be:3a:8c:67:9c:d8:94:
         ff:c1:ba:f7:81:72:cc:c9:61:fc:b8:9d:c5:8f:95:f8:0b:aa:
         c4:4f:a7:4a:dc:0b:cb:e3:13:33:19:74:aa:d5:97:ab:72:a6:
         74:bd:ad:37:91:b9:87:6f:72:aa:9d:11:46:7a:12:1a:24:04:
         59:88:d9:2b:14:39:30:e3:8c:1e:81:4e:1b:7a:09:51:64:78:
         eb:a6:34:2b:45:25:a1:38:95:19:95:95:a4:e2:2d:28:ca:d1:
         13:12:4f:96:10:30:48:db:1a:ab:76:f9:35:b7:d2:57:65:89:
         4c:12:60:ef:db:82:af:eb:e3:43:f5:c1:42:e3:55:cb:ea:53:
         2d:ae:78:ae:89:df:4d:b2:b7:58:d5:cb:cf:ab:2f:e0:fb:52:
         07:47:08:7d:2f:94:f4:27:18:63:45:5a:fc:68:f0:e4:56:17:
         1a:c4:00:e1:ee:bd:be:46:b7:b3:be:02:20:75:68:af:d8:f9:
         3a:4d:05:7a:3a:82:af:f8:d9:c6:ec:36:8a:cc:26:0b:1d:d2:
         d0:19:74:c9:ce:9b:12:68:82:de:25:12:12:06:53:57:58:be:
         bb:34:68:2c:3b:56:56:ea:80:9e:29:f9:44:75:fc:52:3d:22:
         09:12:b0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:09:36 2026 by rpki-client