Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/c9147939-dad9-3933-aadc-d1f8a662c62c.roa
File:                     c9147939-dad9-3933-aadc-d1f8a662c62c.roa (raw, json)
Hash identifier:          R7mBoZaLKXpNnPI41fPAxn9bAlVk06xrzgv4zP1zuhs=
Subject key identifier:   C1:9D:84:45:F0:BA:01:10:29:73:56:8F:7E:30:15:02:2F:74:3D:D8
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584ED861D85EA0B34D23867FAB80
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/c9147939-dad9-3933-aadc-d1f8a662c62c.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     214675
IP address blocks:        2607:eb40:5000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:d8:5e:a0:b3:4d:23:86:7f:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3ebd68c1-993d-40d1-9ad3-2a3451ba60b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:35:02:6c:20:8f:f8:c8:c6:0b:64:ec:84:b0:
                    b2:a1:e4:97:b1:b2:b0:23:dd:2f:81:8f:cc:21:e4:
                    69:40:b3:8b:f0:da:1f:d1:64:8f:f0:f8:53:8e:45:
                    c4:df:a7:39:b2:3e:2d:44:cc:08:d0:24:be:f8:4a:
                    01:c2:5c:28:7e:d1:09:c5:a3:50:f7:c5:bc:ed:3d:
                    c1:d7:c5:e1:37:67:60:b8:fa:c3:fe:5f:24:a6:98:
                    ca:df:3a:58:a8:64:e6:4c:a4:ba:c5:71:cd:83:2a:
                    41:d5:6f:cb:62:70:ce:af:02:e1:63:bd:5c:4d:26:
                    b8:03:d4:2e:49:c2:38:ee:e9:1e:6a:74:3e:e6:3b:
                    16:4f:0c:01:65:b6:b3:2d:c0:3c:8e:6a:cd:09:36:
                    ff:8c:65:37:be:bb:f8:3a:6a:40:1b:21:be:78:40:
                    05:51:b6:b7:70:64:62:d4:64:52:3f:39:fb:b1:d1:
                    c2:44:e3:e9:ad:81:ac:f4:13:6e:38:14:d2:07:03:
                    11:af:04:7c:9b:b8:06:c0:ae:f0:dd:c4:2b:26:70:
                    41:40:21:e2:0c:31:23:e0:20:13:c1:b2:e8:7d:90:
                    c0:cf:52:32:9c:41:e9:98:5a:cb:1f:d5:2f:e8:0b:
                    ee:20:11:d8:ef:d9:b1:55:41:f0:86:fa:f4:99:a8:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:84:45:F0:BA:01:10:29:73:56:8F:7E:30:15:02:2F:74:3D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/c9147939-dad9-3933-aadc-d1f8a662c62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:e8:bb:b6:8b:88:a3:4d:c3:ac:ba:b0:ec:99:7d:d6:5c:
         96:00:3c:18:b7:bd:af:b1:ad:95:ac:91:bc:dc:aa:03:f8:e0:
         1c:db:91:5a:d3:29:c1:d3:4d:23:48:62:2d:4c:c8:fb:1b:36:
         41:9f:27:ec:74:d0:57:1b:4c:ff:0d:7f:38:69:df:55:5d:66:
         c8:50:c0:c8:98:32:7f:0e:d8:1c:ab:7c:28:47:a0:ea:db:b1:
         f8:e5:32:f2:46:9e:f4:9d:ad:fa:4c:54:6d:e6:b7:5e:28:5f:
         b8:ba:9b:7f:c2:4d:8b:b2:37:e3:17:87:d1:b8:48:02:4b:b8:
         c9:b3:da:89:18:67:27:d4:67:e8:e0:87:e8:d7:37:ea:1d:1a:
         f8:00:e4:52:58:ab:ad:84:58:a6:40:18:26:41:f3:64:53:cb:
         7f:98:e4:9a:69:5f:7c:41:1f:62:2d:fe:2e:3e:29:6b:8b:91:
         83:b7:aa:9a:dc:85:00:90:58:f4:e2:32:ba:00:6a:f6:64:27:
         fd:c6:3b:c6:6d:40:de:5f:90:d0:a6:ac:3a:dc:25:47:72:d3:
         70:0c:51:e3:26:55:64:1f:84:9f:59:b9:d0:47:80:bd:81:8a:
         07:a4:4e:a5:d6:b0:cf:10:d1:10:84:e9:76:77:bc:e3:4d:f0:
         d1:2c:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:49:44 2026 by rpki-client