Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/525dc751-4adc-3172-8247-6d4d475782dc.roa
File:                     525dc751-4adc-3172-8247-6d4d475782dc.roa (raw, json)
Hash identifier:          FkIxbpJ5kJRdecWSzKIPczdSv7z2t17t+4u6bdWTcAA=
Subject key identifier:   61:CC:85:A2:26:B2:C6:D9:67:BB:45:72:2B:C8:11:41:C7:EF:7E:FB
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584F549D5C2EB98D51C1D0300380
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/525dc751-4adc-3172-8247-6d4d475782dc.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        2620:127:f00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:5c:2e:b9:8d:51:c1:d0:30:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=c065f960-f1f4-44dd-91da-4f6b31148760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:4d:9d:65:51:c0:e4:68:72:bb:e6:cf:88:
                    00:e3:de:d4:b1:49:d1:a1:61:37:b7:c8:9b:7c:53:
                    58:bf:58:6b:6f:ad:ce:72:ee:ef:d7:50:5f:a4:33:
                    9f:f2:6b:cc:64:f7:aa:aa:25:f4:64:30:66:e1:d6:
                    85:13:dd:f9:6f:3c:7a:cb:3a:ad:39:e9:d6:dc:70:
                    90:24:7f:4e:47:50:0c:17:be:fd:7e:24:76:db:d6:
                    cf:d5:1f:87:c3:54:31:c5:81:0d:df:c2:b3:36:a4:
                    bd:0a:89:93:f5:48:8c:fd:28:ac:90:7b:ff:e0:28:
                    03:28:fd:88:e9:de:84:8b:41:4e:f3:e5:58:b4:07:
                    5f:74:c4:60:24:4c:97:46:f5:13:61:24:8c:84:a8:
                    df:85:15:f9:a1:ca:ca:3f:53:80:c6:b5:7f:4c:ed:
                    69:cc:96:68:e9:d6:c5:1b:e1:23:b4:d4:88:b4:7d:
                    44:cc:1f:7c:78:41:fe:03:5a:37:83:c3:ac:7b:4b:
                    b6:ca:cc:29:05:93:08:1a:6b:66:12:3f:24:70:bb:
                    23:80:aa:9b:6a:60:a7:8e:9f:de:ad:41:7c:99:91:
                    b5:20:2e:4f:03:ef:71:f5:09:2b:91:d1:cd:38:ca:
                    60:28:c6:4e:a0:29:43:a7:bb:5a:f9:fb:d8:a5:20:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:85:A2:26:B2:C6:D9:67:BB:45:72:2B:C8:11:41:C7:EF:7E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/525dc751-4adc-3172-8247-6d4d475782dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:127:f00c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:0f:c6:04:e5:90:c9:97:ad:fa:d2:43:6c:7e:85:18:57:
         05:2d:24:47:39:a0:6e:2e:c9:2f:05:d6:2f:0b:bf:18:c5:f8:
         4e:e7:66:f3:71:aa:b7:2c:38:ae:26:76:22:c0:21:8e:ce:23:
         ff:b3:a2:91:3d:e0:1f:50:df:35:7d:72:29:69:37:68:51:fa:
         a3:37:c2:e8:32:49:ea:62:b8:f5:b2:40:42:63:0e:7e:83:9a:
         04:9a:6d:75:6a:b8:2d:29:ec:de:e1:f3:c0:b1:78:eb:a4:cd:
         86:cd:26:03:a7:03:71:0d:c3:5b:12:2f:43:14:44:33:e4:a0:
         a4:e9:d5:72:84:23:5d:99:45:86:b0:e4:c1:a6:2e:8b:db:97:
         c5:6d:32:99:99:f7:b7:4a:3c:3d:e5:1b:ad:43:82:5f:e7:03:
         37:64:77:7a:d0:13:cd:62:26:1c:81:38:18:c3:6c:c8:01:6d:
         00:39:2d:54:a8:7e:a9:a8:20:13:43:b2:d4:04:f0:d2:41:18:
         57:38:17:30:ea:7d:4e:ee:12:9a:ff:34:0d:e4:9e:d9:d3:ea:
         65:fe:1e:69:88:ff:0d:00:03:4a:24:fc:b2:5a:fd:1a:d1:56:
         cb:16:e6:76:5a:2a:7d:db:e1:75:49:2a:df:1f:d8:da:65:31:
         7c:5b:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:18:38 2026 by rpki-client