Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5b442c9f-dd80-3a60-b6a4-651c9ab2cdde.roa
File:                     5b442c9f-dd80-3a60-b6a4-651c9ab2cdde.roa (raw, json)
Hash identifier:          9X57Y+PGlSvfS38iafNwJz3aWKznSX/LldmAqKTMoYs=
Subject key identifier:   32:81:53:76:FB:AA:A9:77:FB:A2:0E:0F:64:79:EA:C9:D0:C7:AA:59
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F498BB5225AA409A94D90F3E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5b442c9f-dd80-3a60-b6a4-651c9ab2cdde.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        2607:f428::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:b5:22:5a:a4:09:a9:4d:90:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0c7ea330-92ec-4c74-98d2-cf46d97b92b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:de:ac:0d:a2:52:a6:f6:5d:b3:bd:4b:02:
                    c9:9f:30:f9:51:8d:77:b7:7c:86:a1:cc:b1:61:e6:
                    52:94:b2:08:a7:fc:15:5c:72:42:7a:bb:4f:4f:fd:
                    1f:b7:6d:40:7b:1b:76:27:08:5a:b4:b8:6c:2a:88:
                    30:cb:ce:a9:94:3f:f0:3c:60:a5:72:44:13:29:98:
                    80:26:c4:d3:ef:5f:c6:22:18:92:ab:a9:01:64:bf:
                    16:0a:dd:da:c3:48:dc:6f:64:73:2e:b4:d4:1e:b8:
                    e3:34:3e:68:4d:67:a8:08:3e:51:03:fd:24:40:43:
                    4e:c0:61:fd:4e:b5:a0:79:8f:5b:53:f9:33:43:32:
                    b2:64:77:79:4b:a5:62:08:23:ec:9d:56:f6:7f:4a:
                    73:d3:07:59:dd:12:9d:8e:3e:ac:b3:c4:22:4a:ee:
                    88:89:48:aa:10:ab:bc:1b:f7:ad:ea:fa:f2:39:95:
                    4b:70:9d:2d:5b:5f:3d:4e:82:e3:00:03:1d:54:f9:
                    ef:cc:cc:7c:0f:68:11:f6:3e:14:aa:88:1d:14:d0:
                    3b:18:61:5d:ab:3c:1d:df:0a:05:6d:36:44:0b:ef:
                    04:12:dd:13:0c:21:b7:42:61:9c:ba:03:8c:44:34:
                    db:2e:15:1b:be:d2:14:b4:b0:d7:b4:4a:aa:22:24:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:81:53:76:FB:AA:A9:77:FB:A2:0E:0F:64:79:EA:C9:D0:C7:AA:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5b442c9f-dd80-3a60-b6a4-651c9ab2cdde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f428::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:02:d1:87:f9:28:30:d4:8e:a9:b3:e4:a7:5d:d9:e1:ad:
         82:ba:11:65:89:8e:58:37:18:19:a5:ae:96:0d:9f:8d:db:64:
         20:55:d7:e2:f7:0c:6a:f3:c7:6d:b1:29:27:2e:76:41:9e:8b:
         3a:a8:0c:18:79:74:58:18:86:bd:42:14:34:4e:a7:f8:a0:b8:
         4c:d2:83:86:78:00:a6:bc:9f:61:e5:d5:a3:95:ed:29:d0:42:
         97:65:9c:2f:18:29:a3:cf:b9:45:38:12:30:81:6e:cf:93:cf:
         8a:e2:e3:e6:2d:6a:53:76:7a:f7:0c:9b:da:69:68:4d:fc:0f:
         4c:eb:36:e8:32:9d:e4:f7:fe:c5:55:2c:2a:46:49:2f:5a:93:
         74:34:ed:d6:49:37:31:45:79:68:b6:e0:db:35:e2:2f:39:15:
         67:77:6b:6c:2c:47:07:35:38:c0:8c:ff:97:4f:05:e7:ae:33:
         31:e9:27:14:2c:87:9c:8e:ef:52:23:c8:8c:eb:d0:8d:7c:94:
         36:10:19:7d:c3:e8:fc:6f:6c:e4:e1:dc:c6:31:69:e2:c2:59:
         ae:4f:40:62:9e:b3:19:60:42:6c:18:c0:d4:e8:5e:1e:06:41:
         4e:6a:10:3b:d2:0a:c0:20:f1:d5:a9:2d:c3:93:66:6f:5c:1c:
         0d:67:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:48:52 2026 by rpki-client