Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa
File:                     50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa (raw, json)
Hash identifier:          hxLjSW6r6MzCNJKlnYcgdgAA23B5NjV+nn4hZe2meVo=
Subject key identifier:   5D:F7:34:92:9B:4B:3D:11:EB:E7:6E:9F:28:C0:9D:E5:B2:96:82:12
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F497D2C14919918CA85B08000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        2001:4860:6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:2c:14:91:99:18:ca:85:b0:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=788ac655-eac3-4b03-9e9b-d0a34c76f7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:3c:57:95:52:50:0b:a8:93:ef:ed:35:76:
                    81:44:b5:68:1d:b8:8a:d7:87:87:32:61:7f:75:5f:
                    e4:7c:08:7f:42:34:b4:b5:c8:76:a0:77:08:1a:32:
                    37:b5:d9:e9:77:b7:77:d8:7a:2c:93:e2:91:06:56:
                    27:3f:14:7c:91:66:e2:ab:ab:35:1c:ec:f9:6b:8b:
                    22:46:37:c7:62:0b:f0:98:13:db:12:48:fe:c9:82:
                    99:ac:e0:de:36:d2:6f:7d:d9:3c:6c:b4:0c:8c:77:
                    00:7b:8e:44:62:62:3b:82:8e:43:66:8c:d6:16:3d:
                    98:0e:3e:8f:8d:7e:28:58:03:29:05:4c:07:44:16:
                    16:91:d9:36:f7:a6:2c:fe:dd:d2:61:61:23:dd:96:
                    b2:0a:ec:51:c6:a7:27:d8:8a:d5:00:7c:95:ed:51:
                    14:82:01:06:86:1c:ba:cf:52:dc:2c:d5:85:37:f8:
                    e6:2b:80:52:f3:7a:86:87:60:27:02:a1:21:8d:58:
                    3d:ca:9b:b5:e6:8b:5f:9a:0e:44:b5:06:fd:dd:14:
                    2e:cb:9b:2c:09:15:e7:71:94:90:dc:ae:42:f9:f0:
                    15:37:96:b1:cc:d4:7d:0b:82:c5:99:0e:43:52:e7:
                    db:87:c4:e3:8d:c8:f6:d6:33:40:82:19:ef:d5:4a:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F7:34:92:9B:4B:3D:11:EB:E7:6E:9F:28:C0:9D:E5:B2:96:82:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:6::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:87:e6:19:5b:e0:4c:f4:57:7c:53:85:c8:ad:57:83:d6:
         a5:43:21:9f:73:d7:fc:d9:1f:43:cb:20:26:11:58:8d:ee:50:
         57:52:a2:59:bc:27:2f:7b:ad:4b:1b:18:da:31:29:c9:57:e1:
         37:c7:0b:2a:28:59:11:16:53:a0:85:2a:a0:02:63:95:d7:8e:
         98:bc:6e:fc:02:53:b1:f7:33:0f:f4:3c:5c:0a:c5:a1:16:8c:
         53:86:4f:f4:8b:2c:a2:29:b3:87:20:9f:f4:0f:03:dc:40:43:
         d3:02:93:01:aa:03:3e:f4:94:bf:d9:11:3b:2f:96:e3:23:24:
         bd:23:ed:b7:6e:e8:cc:38:b6:a1:8e:6d:89:ab:2f:6e:2a:b1:
         b0:aa:bd:9f:05:3c:a5:c6:4a:a0:a3:18:85:7c:9d:48:fa:b7:
         02:8d:91:63:e2:c3:8d:b5:07:71:6a:f6:c8:c0:b7:c9:28:01:
         43:94:fc:44:fb:5d:36:55:ce:5b:48:3c:50:ae:80:a4:97:7e:
         d0:8e:ef:75:d2:6e:bc:69:9a:86:a0:63:c2:90:de:56:4a:47:
         b1:da:87:c5:c2:17:e4:73:3d:a5:3c:3d:4e:85:3d:4d:44:6d:
         43:bf:d2:89:30:35:13:b7:2d:6e:66:21:e4:34:b7:6a:70:c3:
         27:88:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:54 2026 by rpki-client