Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa
File:                     ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa (raw, json)
Hash identifier:          ZhdmMPopMzIDLc64IoBYVPb1TZqA8ewjAP+MD3n482E=
Subject key identifier:   42:7C:34:64:59:73:F7:BF:6A:6D:CB:1F:D1:EB:55:D1:E6:FE:0B:A9
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584F03A7906B1E66EED9BEDD0400
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        2620:12c:90af::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:90:6b:1e:66:ee:d9:be:dd:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=b13345a4-e032-4730-9c8d-92d4611c0a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:53:36:5e:79:bc:4b:91:94:72:17:fa:4d:
                    27:61:bb:5b:ee:2e:f9:18:7d:46:43:ac:86:37:e5:
                    46:fa:8f:0e:b2:75:b5:b9:bc:70:5e:1d:e5:f8:d5:
                    3b:41:8a:18:88:7a:29:89:3b:38:d0:90:dc:ba:f8:
                    c5:91:37:54:f3:21:29:57:a5:e7:9c:c5:d9:44:de:
                    59:39:92:b3:28:5b:d9:8a:ab:10:bd:7e:92:1b:e4:
                    b4:85:c0:24:a3:e4:85:49:ea:c8:fb:8d:03:5d:b6:
                    bf:a5:39:61:87:6e:8d:8e:3d:de:ad:f9:69:5b:df:
                    d8:78:df:cf:f6:50:9a:85:c1:a8:70:51:31:f8:ae:
                    82:79:84:65:e4:56:a4:00:37:9a:b3:75:98:28:99:
                    f2:39:fc:bf:04:16:52:c3:fe:10:34:36:8d:e0:9b:
                    da:47:cb:fc:b1:be:48:a6:cc:d1:29:41:a4:f3:8a:
                    50:e5:8e:db:d3:16:43:3a:a7:f1:80:8d:6c:4e:84:
                    f3:eb:bb:e8:2e:34:a6:e7:0f:89:e6:5a:3a:0c:a2:
                    00:ec:f0:6b:3c:65:d9:29:18:e0:79:a3:3f:fd:00:
                    1a:d0:41:92:d1:d9:43:4e:ca:9b:8f:1d:6c:7a:b8:
                    56:7b:81:ce:19:8f:d2:d8:03:5b:e3:85:23:cf:61:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:34:64:59:73:F7:BF:6A:6D:CB:1F:D1:EB:55:D1:E6:FE:0B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12c:90af::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:a6:7a:7f:c3:87:d2:0f:b5:17:a7:8d:94:44:1a:f5:70:
         82:73:75:28:6d:45:af:8f:e2:6d:ea:ba:4d:1f:92:d4:38:bd:
         de:3a:12:f9:63:23:63:b7:b1:50:08:1e:85:15:8e:74:25:cc:
         5e:22:00:78:78:14:1d:c3:cb:63:70:56:09:a5:aa:b0:ad:ba:
         f2:71:76:82:4b:45:8f:a7:65:02:fa:ad:a8:67:6d:f3:8b:b3:
         19:1d:45:38:95:94:6f:a4:91:7a:56:cf:1e:bf:0f:cc:28:4e:
         1a:a9:4e:46:95:8c:6d:62:f9:98:e0:5a:05:bf:cf:0a:5a:78:
         a7:2d:68:5d:b2:4d:e3:3e:e9:04:ca:95:a9:55:fb:42:4b:3c:
         60:d0:0c:08:38:c8:cd:82:02:83:a1:ec:10:94:9f:cd:05:fc:
         23:eb:34:dd:9d:24:16:1a:1e:16:e5:46:18:da:0e:29:56:a6:
         0c:8c:58:1d:58:d4:6d:37:09:3a:4d:db:cd:22:ba:51:3c:37:
         4d:5d:39:2e:ea:40:87:02:bb:62:f8:53:5d:ad:80:ac:ce:94:
         3b:3f:f7:08:3d:2c:90:ae:e1:d2:42:74:b5:ab:11:50:aa:32:
         0f:1b:c9:06:28:a2:f8:a0:76:23:90:fc:f4:72:63:69:8c:51:
         ac:a4:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:41:51 2026 by rpki-client