Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/436338b4-56c4-36fb-9be7-701cbc657ca9.roa
File:                     436338b4-56c4-36fb-9be7-701cbc657ca9.roa (raw, json)
Hash identifier:          wnH7fdUMLJVxgF61qmB08TrojPaNNYGCXujVtFQsBPk=
Subject key identifier:   1C:45:53:87:96:90:DE:00:39:AE:62:9E:F2:4F:4E:56:02:AC:89:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F82ADA6FDCAA843B0B23C4680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/436338b4-56c4-36fb-9be7-701cbc657ca9.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     12222
IP address blocks:        2001:4878:2204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a6:fd:ca:a8:43:b0:b2:3c:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=beffd5c1-6ba1-47f5-9b2f-4e0eb2ce9339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:e7:17:40:6d:4c:97:6d:98:87:49:5d:09:
                    d8:22:6f:dc:b0:45:48:e6:f5:15:29:d6:7c:34:7f:
                    99:eb:62:a3:2a:4c:d6:27:bb:c9:c3:63:6d:53:51:
                    25:9e:d4:61:11:4a:d5:ee:88:2d:2f:17:c4:2d:c4:
                    d5:c2:69:ae:e1:1a:c7:af:56:8b:d7:e3:70:4a:3e:
                    9e:5a:01:d0:af:4a:47:af:6d:5c:6a:59:39:8e:19:
                    a8:30:73:c5:b6:23:c0:af:6e:51:30:00:7f:1e:2e:
                    0f:ac:e0:b8:18:3b:4f:40:bf:86:e5:22:a5:78:4a:
                    5d:06:f2:9f:48:ce:96:7d:1a:4d:b5:58:13:ea:42:
                    3a:d4:21:77:a9:68:43:7f:f8:31:78:33:01:9d:33:
                    53:f2:16:6f:0a:6b:7c:86:0e:11:5b:ee:a1:e1:ae:
                    c7:06:e6:0f:3b:94:68:36:78:1e:28:3e:c8:ef:79:
                    cd:85:29:d2:f4:45:a7:73:11:99:ef:07:aa:28:e4:
                    6f:82:a3:c3:07:44:0f:9d:bd:ff:d9:dd:52:85:02:
                    47:64:f5:06:9b:6f:1f:1b:1e:e9:8e:77:c1:9a:28:
                    f7:b5:fa:0d:66:d1:39:e6:c2:2e:2a:87:19:3e:6d:
                    2f:53:1d:e9:29:ac:c1:13:fa:17:e4:48:c5:b9:e9:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:53:87:96:90:DE:00:39:AE:62:9E:F2:4F:4E:56:02:AC:89:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/436338b4-56c4-36fb-9be7-701cbc657ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:86:1d:7d:3c:63:c7:9a:0f:c7:ce:b2:c9:f4:c4:d7:44:
         96:da:a9:9f:de:0a:99:5d:e6:b0:78:73:91:03:3b:87:09:13:
         de:cc:78:d2:ac:f5:b3:99:18:9e:c1:16:5e:bc:70:1a:4f:67:
         05:ab:9a:67:74:9d:e8:7e:40:f1:84:02:4e:50:b9:2c:10:eb:
         70:c6:b4:30:47:36:cb:3f:32:9a:8a:7e:ec:e7:ab:e9:3f:21:
         57:b2:fb:e2:c2:e1:ec:a1:88:a8:96:47:76:ef:a6:f3:ce:f6:
         1b:9d:54:33:db:b3:85:86:b9:87:44:67:c8:43:55:91:ef:2f:
         8b:53:8b:30:f4:a3:c5:2f:6f:69:db:6a:a3:f6:29:39:16:84:
         15:c0:95:26:ea:99:2a:bb:40:59:62:2f:fe:ba:58:e8:99:0b:
         b1:b0:ba:e2:c9:2f:c3:fa:56:32:f7:8e:e6:c9:56:72:f7:e9:
         ee:da:01:ec:c8:3a:11:4c:ae:3f:5f:c5:fb:0e:d4:a8:e7:8f:
         72:85:84:14:74:65:a8:bb:69:81:64:bf:21:3f:dc:03:3a:00:
         2d:e9:89:24:2d:e2:17:83:fb:fd:b6:06:de:42:ca:b7:4a:11:
         bf:43:02:cb:a3:f1:30:da:55:30:59:7c:ec:94:62:57:47:93:
         2c:f9:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:53:20 2026 by rpki-client