Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
File:                     c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa (raw, json)
Hash identifier:          M9f/P/5X3tR+2gm21XGsjqkHR+s14Sk+ra/X6V2ysek=
Subject key identifier:   DA:8D:98:CA:3B:52:E3:35:82:BB:F1:74:D1:D3:7C:9B:D5:AE:6D:74
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584EB57C5E8081E3558D8450D9C0
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     3477
IP address blocks:        2607:9bc0:1010::/44 maxlen: 44
                          2607:9bc0:1020::/44 maxlen: 44
                          2607:9bc0:1030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:5e:80:81:e3:55:8d:84:50:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=5c29fb4e-2595-4d34-84e8-90aec405446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:db:eb:2d:80:a0:84:ac:e1:43:c5:3a:26:
                    9b:91:23:14:d2:92:78:9c:39:df:04:ad:20:9b:50:
                    50:bb:bd:60:25:3a:30:18:c1:7d:cc:80:56:43:8f:
                    2b:44:00:9b:2c:49:30:60:cb:d3:f6:0e:e7:bd:f9:
                    47:15:68:8c:c6:ad:bf:ee:61:2c:d5:32:6b:eb:17:
                    4f:4e:49:ea:33:64:f2:6d:67:fb:8e:6e:7f:11:37:
                    2b:39:32:a4:71:52:b6:b0:91:5d:5f:71:aa:54:f0:
                    9e:82:92:98:6d:4a:a6:40:68:dd:c4:f6:96:df:34:
                    6d:f5:e2:27:f7:4f:01:84:8c:66:72:f0:9c:6a:45:
                    31:b3:f8:b1:7e:60:13:ec:24:77:85:d8:9f:c3:1b:
                    db:a3:05:22:c8:fb:c4:40:09:73:da:6d:40:4f:cc:
                    29:96:c5:07:db:ee:03:35:2f:cf:e0:4c:dd:ac:50:
                    6b:0b:5c:de:07:05:8c:39:81:15:9f:96:4b:56:0b:
                    a9:b6:f2:e1:aa:0d:43:12:58:b6:1f:39:7a:12:01:
                    39:c3:a9:5f:6e:d9:d9:fb:05:6a:c3:5d:37:85:00:
                    a4:c6:2f:69:bc:85:ad:09:70:ae:d1:73:3e:26:78:
                    4f:2e:d7:b9:0b:8a:c6:09:6c:2b:8b:b7:b3:1d:1d:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8D:98:CA:3B:52:E3:35:82:BB:F1:74:D1:D3:7C:9B:D5:AE:6D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1010::-2607:9bc0:103f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:93:b6:36:3f:bd:91:c6:c7:e5:78:21:09:63:be:76:fb:f5:
         f5:8e:98:b0:da:0d:a4:19:e1:dd:7b:54:f5:00:15:c5:39:d5:
         40:3b:01:53:51:1c:78:31:c2:f2:d2:c9:3d:eb:e8:9a:77:56:
         e8:b8:a9:24:44:12:20:e3:ff:a5:dc:14:be:4b:a9:9e:db:75:
         b5:58:68:6a:f1:11:cb:61:3c:06:9d:ff:45:f3:f5:38:b2:9e:
         18:21:6b:e9:92:d0:45:a8:bb:05:3f:0a:80:da:93:05:aa:4c:
         fb:15:8d:66:bc:2c:7e:47:ec:3d:66:9a:f2:d0:ea:5c:3d:d0:
         ac:b0:05:18:48:fc:2c:53:4d:10:6a:94:8a:c7:78:99:6d:f3:
         cf:66:93:e6:a6:91:f4:92:b3:92:f5:84:b7:91:ca:3d:ee:2b:
         1e:ae:d3:44:87:2c:56:ed:27:20:96:26:73:70:80:df:da:dd:
         b5:4b:64:05:2d:50:55:aa:f9:30:ef:bf:de:ce:bb:8f:42:98:
         c1:28:b5:bd:ae:eb:70:d3:9a:b8:22:3d:b2:6b:97:0f:f4:0b:
         b0:16:02:83:dd:49:92:8d:df:51:ca:3b:7f:42:0e:9f:0c:07:
         d9:f6:73:4a:65:e9:60:66:3d:6e:c0:05:3a:f7:39:d2:29:81:
         d7:ea:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:47 2026 by rpki-client