Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/75f11b70-3e64-3be1-b604-e4befcd5dc1a.roa
File:                     75f11b70-3e64-3be1-b604-e4befcd5dc1a.roa (raw, json)
Hash identifier:          PQJvkGfuxvnZ3OwbIINWBJGtuyAjUpo166t9BYhuLt8=
Subject key identifier:   9B:E2:CD:87:4A:DC:16:E6:82:3F:C2:32:44:2F:14:94:95:46:20:69
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584EF2E75CB913AC6378B915D500
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/75f11b70-3e64-3be1-b604-e4befcd5dc1a.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     36321
IP address blocks:        2620:4e:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:5c:b9:13:ac:63:78:b9:15:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=a283a3d1-a776-4ab2-82d0-e91c26810085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:23:07:d6:98:37:a7:ab:c5:64:4d:53:18:
                    00:f2:0b:1c:80:5a:c2:80:3a:6f:2f:b6:3f:b9:f2:
                    f3:a3:d5:01:0b:7f:90:9c:25:4c:e3:68:78:de:ea:
                    ae:aa:0a:5e:1f:87:14:23:34:88:cc:c6:63:6c:de:
                    ca:e8:41:83:cf:76:94:28:2b:70:e9:83:22:ce:ee:
                    e0:97:42:08:6e:76:69:56:9c:32:8b:f0:93:c8:97:
                    8c:90:da:d1:ce:94:72:4e:7a:ec:b7:8b:c3:91:78:
                    da:9d:ca:02:bf:9c:05:90:f3:b4:b6:85:4b:dd:a0:
                    13:e5:ab:8f:6c:de:9d:9a:ff:5e:a1:41:6d:ee:39:
                    e7:cd:cb:5c:4d:e6:85:01:c5:f5:54:a1:76:34:20:
                    d9:d5:47:2e:43:14:61:a3:4b:c7:16:53:65:3b:22:
                    a1:e5:a8:89:9c:eb:3b:ea:ba:9b:f5:76:b2:17:ef:
                    42:0d:70:c5:b3:0a:be:42:96:c4:29:aa:49:02:1c:
                    e8:b0:03:27:f2:b5:d8:e7:e8:1e:ff:ae:6e:8b:37:
                    db:2b:0e:69:80:80:d5:51:d9:f7:a4:ac:a6:6d:f3:
                    df:5c:3a:fc:6b:5d:cb:9a:e3:c3:20:bc:3b:eb:50:
                    d3:1c:81:ec:68:a1:7c:6e:47:5e:26:bb:53:41:b2:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E2:CD:87:4A:DC:16:E6:82:3F:C2:32:44:2F:14:94:95:46:20:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/75f11b70-3e64-3be1-b604-e4befcd5dc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4e:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:f8:02:cf:5b:90:fd:6b:d4:0a:62:7e:51:ef:45:5b:14:fb:
         af:fa:20:14:a8:d2:e8:6a:1b:9a:9b:a2:8c:a9:bd:b1:1f:19:
         f4:a5:c1:e5:bc:98:ee:6f:0a:da:c6:da:56:ef:35:26:19:ea:
         a7:cd:b2:f9:44:0f:f6:45:9b:eb:9e:40:52:b3:b5:17:d5:08:
         12:6b:96:8d:76:03:15:1e:af:17:48:05:3c:c8:b4:f2:14:5a:
         2b:99:e1:80:bb:8c:8f:24:d5:cf:31:f9:cd:69:81:63:3d:b7:
         fb:f9:60:fb:5d:fd:56:d8:d6:8a:1b:40:b1:17:e0:27:c3:37:
         54:82:da:7a:ad:34:b5:c6:55:7c:98:c0:a8:02:62:1c:15:08:
         fe:cb:b5:e6:35:59:07:12:ac:22:0c:80:df:e9:6e:2a:da:a1:
         80:ba:9d:c6:6f:59:de:5b:20:a4:39:80:34:32:46:49:0f:f0:
         84:8d:c7:90:da:55:b8:73:66:11:4d:12:d3:9f:dc:9c:91:f3:
         11:f1:48:c9:3d:c1:f3:4b:78:e6:18:be:58:61:4a:8d:71:b8:
         ee:1b:71:d0:26:3b:a7:10:7a:e2:b9:dc:76:ef:97:5a:85:90:
         34:41:4f:fd:f1:40:e7:a1:89:5e:c6:cc:1b:48:93:3d:38:44:
         46:a5:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:11 2026 by rpki-client