Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa
File:                     e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa (raw, json)
Hash identifier:          vuLI6jbvkcRfQS9Tzjpttf6dvJABulXgRSvvrKGEXZA=
Subject key identifier:   BB:F7:36:FD:56:8A:66:DF:3F:CE:27:19:8D:F6:F0:18:7D:68:FD:78
Certificate issuer:       /CN=219560ff-1a32-4424-9e54-f95df54ecc84
Certificate serial:       010D0C9F4328584F6F22F2AEF553EE3ABED07D00
Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     5739
IP address blocks:        2607:f5f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f2:ae:f5:53:ee:3a:be:d0:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=888beb27-97f3-44ca-ba76-a7022e74314f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:e8:f9:79:e5:97:2b:6f:a2:dc:57:53:af:
                    eb:b9:af:9e:8e:36:26:f7:d9:66:1a:ea:58:c7:83:
                    cd:90:27:86:b3:71:fa:75:8d:aa:52:c5:7d:d3:49:
                    07:69:69:e0:38:2d:1d:b7:00:dc:51:75:17:7c:27:
                    fe:3a:66:ac:90:6a:98:31:e6:58:82:cb:5c:3b:71:
                    a4:7c:70:55:9c:cd:5d:72:6d:ff:bf:0e:64:32:fe:
                    ba:f3:e3:4a:de:1c:c2:88:8d:58:15:21:ce:3e:ac:
                    5c:ce:e0:eb:ce:c3:fb:8f:55:d2:27:1a:b7:4a:fd:
                    77:1e:c2:8a:a9:4e:65:3a:a8:21:2e:26:f2:6c:20:
                    de:1f:ad:de:87:76:a3:32:16:a0:39:bd:b0:6d:c6:
                    94:7e:53:7a:e7:4d:69:dc:4b:b6:37:0b:28:61:ff:
                    89:09:2b:9c:d0:4c:46:c4:ca:fc:89:d1:ce:60:7f:
                    fa:8d:3a:49:d3:94:ee:49:a7:42:21:1d:0c:ba:fd:
                    1e:c2:48:e6:18:24:f9:65:97:1c:e5:37:da:21:ad:
                    98:58:6f:5f:be:80:65:c8:3c:cf:c7:1c:0f:31:d5:
                    d3:b1:00:7b:9f:3a:da:ae:64:3b:6a:c2:69:c8:4e:
                    f3:0e:1a:e2:96:3a:08:77:8a:9f:23:ef:e4:dc:45:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F7:36:FD:56:8A:66:DF:3F:CE:27:19:8D:F6:F0:18:7D:68:FD:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl

            X509v3 Authority Key Identifier:
                keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:0f:fb:9f:dc:60:3c:07:9b:3e:ab:24:a8:4d:10:c4:23:
         21:0c:3c:53:2d:a2:30:39:47:87:ed:e7:ae:14:70:74:fa:38:
         d6:50:50:e3:5b:af:f1:a3:6d:e2:96:bf:44:1b:02:0a:d7:0d:
         fb:cb:5b:5d:9d:af:70:81:15:96:fb:18:ac:66:40:d7:95:1f:
         d1:09:e3:b7:41:33:8e:d7:67:95:d1:36:d8:18:6d:ec:08:91:
         5f:4c:5e:ec:de:b3:25:76:65:67:10:18:b7:3c:0c:c9:4e:7d:
         72:b0:f9:73:bc:83:a5:db:36:e2:9a:ce:17:4a:47:bd:ea:22:
         cc:c0:76:2a:ce:05:df:fd:71:e9:4e:b6:13:23:80:93:9c:2c:
         a0:32:5f:e8:b9:8d:bb:3b:5b:02:59:1a:0a:ec:09:3c:39:24:
         48:9c:ca:ba:e9:1f:99:13:d3:cc:72:90:b2:3d:47:f4:da:d2:
         8f:ab:9e:fb:90:35:36:8d:bb:f0:26:da:29:7c:69:a5:cf:74:
         0a:24:7a:c3:d6:99:23:cf:92:79:78:48:68:0d:17:13:36:9a:
         68:2b:37:b5:f1:3b:d9:57:a6:cd:40:31:91:e5:e2:da:3b:75:
         be:4f:ed:cf:32:48:c2:d5:37:97:ef:a2:1e:b1:c2:19:6c:8a:
         ee:1b:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:57:09 2026 by rpki-client