Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa
File:                     a2d5db0b-200d-364d-a412-c50d76bffc06.roa (raw, json)
Hash identifier:          ELTBK5gGHKAKhmnPywczoc68+njyCqkwMLOUtszDt1U=
Subject key identifier:   F2:57:82:36:85:CA:E6:C6:98:D7:B6:19:3D:4F:CE:49:AA:DE:C8:B3
Certificate issuer:       /CN=748884b0-2456-4700-984f-d893a56dbcdd
Certificate serial:       010D0C9F4328584EC4D711016A5F01ECDD144680
Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     393844
IP address blocks:        2600:a400::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:11:01:6a:5f:01:ec:dd:14:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=02e40d31-88ff-4f39-add7-f60073755ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:86:ab:a2:26:bb:15:2f:3d:54:4c:02:1b:
                    81:2d:06:ac:17:7e:ea:f4:97:c7:92:06:12:46:7c:
                    0c:66:b3:ea:22:ff:e8:65:6d:d8:ac:80:62:03:ee:
                    fc:3c:b3:91:6b:b1:0e:76:61:2c:67:64:3d:be:3b:
                    3a:98:f9:81:26:1c:0e:da:d0:b8:6f:78:35:9b:87:
                    40:f9:a2:26:02:cc:6e:f7:84:9f:7f:ea:80:5c:2f:
                    15:33:d0:37:aa:19:b8:d7:b7:86:8c:e1:a2:a5:64:
                    0a:32:ba:12:6e:e0:99:0b:d2:97:31:87:f3:47:38:
                    5d:a9:d9:9b:ab:25:d0:03:04:36:2c:08:26:1f:d9:
                    91:b5:b9:5a:90:41:41:21:7e:5f:f9:a6:aa:69:78:
                    da:fc:c2:d1:6d:4e:10:dc:b1:a7:1e:69:12:7a:d2:
                    88:20:61:e9:a1:29:14:b5:e3:95:4e:ca:bf:69:3d:
                    b7:1f:d7:74:b5:4a:11:e2:41:58:ed:d7:c6:27:d3:
                    62:a3:62:b3:25:5d:ce:d3:27:24:2c:15:a5:71:33:
                    6a:a2:dd:db:fe:94:02:4c:29:7d:43:9f:59:b2:a5:
                    11:28:98:f9:50:6a:19:7e:aa:50:06:82:ab:b3:6d:
                    54:ff:c4:54:b0:45:2e:50:04:da:44:79:6c:be:89:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:57:82:36:85:CA:E6:C6:98:D7:B6:19:3D:4F:CE:49:AA:DE:C8:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl

            X509v3 Authority Key Identifier:
                keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a400::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:be:f8:c8:4b:c5:6b:cb:5f:5a:b5:64:18:96:b1:dd:2f:
         dc:ff:cd:5e:7a:f4:20:0c:69:6b:05:d3:5e:19:ac:e7:38:ba:
         44:d3:2f:dd:04:ce:14:39:2a:dd:7b:58:d6:c0:3e:18:d7:a8:
         fc:0f:9a:e9:05:59:69:87:d5:e8:ce:87:f0:a7:cd:dc:b6:99:
         a8:20:2b:bf:75:53:56:40:d7:57:07:d5:aa:ae:85:42:13:9f:
         6e:e2:c6:84:2a:11:18:5e:33:f5:27:44:65:5b:f2:f6:a4:c8:
         2d:58:a5:84:82:d2:03:c9:c6:5d:39:75:dd:30:f5:31:77:b1:
         72:aa:4e:43:55:b0:fa:59:87:c0:37:d2:c8:63:82:80:0d:2d:
         ca:3c:ec:2c:a1:11:ad:41:b7:7d:37:b2:55:22:e9:0b:a8:f1:
         5e:eb:f6:a1:84:4e:ad:91:9c:21:bf:b6:ad:fb:02:a6:a2:06:
         06:35:0b:f1:83:39:24:b4:40:f1:06:17:3a:f3:a2:3d:93:63:
         c8:45:0d:7f:e4:85:e4:0f:cc:73:75:bd:fd:ef:28:81:62:b7:
         22:6d:5e:45:8f:9e:ef:21:52:0d:f5:c2:04:ad:51:f0:58:97:
         c3:1b:e4:1d:8e:58:0f:92:ff:ef:cd:5f:a8:2e:76:18:8c:bd:
         8f:a4:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:03:13 2026 by rpki-client