Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5236160-440c-3603-b1db-31ca88f51c98.roa
File:                     d5236160-440c-3603-b1db-31ca88f51c98.roa (raw, json)
Hash identifier:          kw4LaFhs+c/Ud3QgbqEzo6W3scnIvSxcc2gJ2nF7Ct4=
Subject key identifier:   CE:12:89:55:D4:62:20:7B:CE:E1:0B:AA:F9:F1:91:27:72:5B:3D:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7943C1B0E2E7D4331715740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5236160-440c-3603-b1db-31ca88f51c98.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9498
IP address blocks:        2600:140f:e400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:3c:1b:0e:2e:7d:43:31:71:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b8095517-ab7b-4c70-ae61-ef88c9d6743c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:99:bc:24:0d:4d:04:5e:50:51:99:88:42:
                    75:5e:e3:dc:73:32:1d:dd:59:30:59:89:21:dc:2f:
                    e1:fd:64:57:a6:36:14:39:7f:93:9c:ef:16:87:9c:
                    6f:33:82:7f:2b:e7:a5:cb:06:36:e5:0d:ed:75:54:
                    a3:56:f0:b0:ba:d8:4f:ad:ab:0d:1d:fe:2d:d7:23:
                    7f:cf:18:b0:dc:b8:7e:dc:da:85:1f:3f:f7:42:ca:
                    7d:78:d9:42:78:68:50:83:e0:18:f7:c9:e2:02:bf:
                    1e:80:d7:70:3d:51:f4:88:52:7a:19:07:3a:92:9e:
                    44:7e:13:35:ea:95:b1:95:0e:ec:d1:7e:70:f8:c2:
                    5b:92:7c:30:b0:01:ec:be:8c:40:2a:50:d8:59:a2:
                    73:98:95:83:c1:cd:20:20:f0:b2:70:74:68:09:82:
                    03:01:eb:79:79:a8:74:af:f7:20:6d:d5:2e:2c:2c:
                    73:d0:6b:4a:ee:aa:81:67:f1:03:d0:99:de:38:c4:
                    06:dc:d9:24:fe:61:d8:fc:a8:d7:0e:8a:9b:ce:30:
                    37:5d:3f:2f:1f:4d:21:68:08:17:0f:0a:12:ec:39:
                    57:75:a1:03:c6:53:4e:34:dc:ab:0c:d3:ce:10:a4:
                    11:67:f3:3c:60:1d:8c:e8:91:ed:f4:df:c1:e3:08:
                    10:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:12:89:55:D4:62:20:7B:CE:E1:0B:AA:F9:F1:91:27:72:5B:3D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5236160-440c-3603-b1db-31ca88f51c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:e400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:30:65:07:9f:2a:82:bd:1d:92:f4:32:1f:bd:49:d5:5f:e7:
         17:31:25:32:05:7a:85:bc:ce:3d:0e:81:b8:45:9f:87:7f:8e:
         87:95:2f:bf:c9:a8:59:ed:cf:da:11:ed:88:40:5b:ef:d6:29:
         35:4b:74:ba:49:6a:e2:53:2c:82:06:b0:da:bc:60:e9:3f:e4:
         87:3f:6f:6b:1d:ae:48:f8:2b:21:82:61:aa:39:71:a0:1d:a3:
         05:fd:a9:02:e3:a3:f2:6a:4f:12:4d:f4:b9:8b:b5:15:7d:63:
         82:fc:3c:a9:90:99:43:b8:93:80:5e:d0:06:dc:27:19:54:f3:
         65:7a:79:2c:a8:04:bf:2a:80:85:c3:02:13:18:2b:3e:4c:8d:
         ee:17:d4:ef:a2:90:a8:db:08:09:19:40:2d:f4:ce:ec:9e:e3:
         15:0f:1d:41:98:68:3f:0f:44:52:87:9d:55:28:0e:10:a9:f4:
         05:7b:d4:d8:89:43:a2:5a:8e:ef:49:c6:4f:e4:d5:d7:1d:08:
         5e:c6:d8:e8:3a:ed:e7:ba:6e:0c:a1:ce:7d:77:8f:07:d6:db:
         89:ec:7b:cd:c4:f2:7c:fd:21:16:bc:84:32:96:56:c7:0d:f6:
         b8:cf:f0:b3:ca:a9:ae:a4:81:65:4e:6d:66:ef:77:ed:56:91:
         14:4d:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:44 2026 by rpki-client