Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/12e25bfd-48ae-3584-b872-54c13376b8c0.roa
File:                     12e25bfd-48ae-3584-b872-54c13376b8c0.roa (raw, json)
Hash identifier:          z4AELdR3zSdQbRVfBWkmXfNNm8UWHhaBrW5+Jzs8te8=
Subject key identifier:   38:98:01:AD:7A:20:2A:BE:87:2F:44:80:03:52:7A:68:5D:54:D2:BC
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584EB8474D46FD1CF2B3ECDE3C00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/12e25bfd-48ae-3584-b872-54c13376b8c0.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        2607:6b80:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:4d:46:fd:1c:f2:b3:ec:de:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=92c55b33-7cc3-4013-9d1b-41a130807a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:78:55:ae:1c:59:91:de:4b:fd:b3:3e:83:
                    48:e7:86:0c:48:02:8d:75:f8:17:5e:6d:48:66:67:
                    5e:df:d6:4d:6d:44:16:47:e1:80:cf:9f:37:09:a7:
                    c3:4c:36:87:37:8e:b4:a0:59:ff:c7:7e:1f:33:4f:
                    72:0a:d8:7b:ac:8f:48:1d:5c:f5:cf:c1:13:8c:c4:
                    8c:5f:f0:8d:04:ef:c9:91:6b:aa:51:08:df:6b:75:
                    27:99:4f:db:b5:59:56:e4:f7:71:f4:d5:44:19:e9:
                    16:97:e1:e4:4f:ae:76:08:10:96:69:a8:48:a3:ec:
                    7e:73:a8:1f:cc:81:14:da:d2:e1:0f:1b:84:71:62:
                    e7:ba:4b:05:f0:75:3d:2d:f5:90:e4:de:64:17:e5:
                    fc:38:5d:d1:7e:3a:d0:d2:f1:ca:08:6d:de:65:c4:
                    c9:58:24:74:b3:ba:98:99:6f:34:c8:23:a4:97:8e:
                    37:c4:4e:d2:1c:27:0e:c7:e5:5b:6f:9f:47:d9:30:
                    42:2f:8e:23:8b:84:b0:26:e7:29:dc:4e:c2:1d:04:
                    c1:b2:9b:f1:22:98:b7:11:81:5b:91:a5:f6:9d:5d:
                    e7:06:04:5d:73:81:37:dc:e7:39:2a:ac:1c:7f:8f:
                    13:54:8e:75:2b:36:29:6e:37:55:ea:96:29:ec:c6:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:98:01:AD:7A:20:2A:BE:87:2F:44:80:03:52:7A:68:5D:54:D2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/12e25bfd-48ae-3584-b872-54c13376b8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:12:cd:b6:d3:d1:f2:92:3c:5e:76:92:7b:8e:b4:13:71:ad:
         5d:0c:c5:e7:f1:e8:b1:ec:df:3b:c8:26:f4:75:06:61:2d:b4:
         20:91:dc:18:ae:62:30:ea:90:a8:70:14:72:c0:e6:f9:b8:6a:
         31:5b:ed:05:a1:1b:b7:42:82:69:ec:86:11:03:49:ac:64:8c:
         92:64:0e:49:1b:84:0d:27:36:e4:03:a3:2d:57:e4:9c:4f:3d:
         0f:58:33:13:7e:c8:63:f5:e2:f8:52:48:0d:c3:c8:e0:f0:a9:
         c5:ae:51:bc:df:1e:80:2e:b7:9a:d4:6c:42:41:ca:ed:ba:cd:
         33:3c:27:a9:2a:56:f5:0b:35:92:6d:bd:f7:9a:87:32:fd:3c:
         ca:1c:c6:39:94:cd:d7:81:c9:59:d6:21:1c:62:6c:66:a0:71:
         e6:b3:95:7a:4b:63:3c:77:c1:aa:af:55:b2:cb:14:fb:c8:67:
         08:90:5c:f6:47:d6:0b:8b:ad:77:69:0e:53:b3:57:7a:e3:a9:
         7a:9c:e5:38:d7:46:f8:ec:3d:6e:44:7d:69:59:aa:c9:c7:11:
         73:31:12:dc:65:9e:b3:65:71:ec:03:d0:96:9c:eb:65:bf:84:
         54:57:aa:58:09:28:37:58:f8:ed:db:11:f5:d5:80:34:1d:46:
         ab:f8:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:18:12 2026 by rpki-client