Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa
File:                     91c113ca-efd5-351d-aee5-8cfa7262f18e.roa (raw, json)
Hash identifier:          H2iYalxEv3h3UOudT/6JPpN2jRfoontulwieApPeRv0=
Subject key identifier:   77:A3:88:96:B3:FD:DE:3F:94:A0:D9:09:C4:87:37:1C:1B:4C:2F:E4
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584F549D54E0FE45B83E9EA985D0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     62588
IP address blocks:        2607:f790:fff0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:54:e0:fe:45:b8:3e:9e:a9:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=8b0f09e8-31b7-4313-8f49-9930231d65e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:13:6e:fc:35:88:66:37:f0:10:cf:65:82:
                    79:8c:f0:3f:30:7d:38:aa:24:52:5f:d1:73:5f:64:
                    0f:88:08:b9:d4:c1:9e:14:ba:f8:2e:c8:22:6e:4b:
                    cd:75:f2:c6:01:dc:99:fd:d9:50:92:e6:74:08:85:
                    79:c8:d5:c1:d0:f7:d2:2d:e1:e0:b8:d7:b4:51:eb:
                    28:82:5a:87:cb:d1:a7:53:bd:90:ca:eb:eb:ff:6d:
                    7e:7c:f3:f9:c8:a0:9b:f6:0c:e7:ff:d8:c4:28:7e:
                    31:bf:77:b7:04:a6:e8:f4:e3:8b:f4:41:b4:e1:b5:
                    53:be:fb:12:a3:2f:56:bd:45:dc:73:8d:41:98:4b:
                    16:14:23:99:b1:4a:9c:73:50:2d:40:36:83:b3:bb:
                    de:82:70:09:e8:6e:bd:10:54:90:28:14:62:2b:3c:
                    21:b3:b4:2f:f6:b8:43:39:cb:f0:c1:2f:a6:7b:91:
                    a1:00:53:6a:3c:55:fc:41:f5:2f:bb:17:16:85:e2:
                    e5:05:84:b0:ea:6c:df:29:f6:1f:88:c5:56:43:f5:
                    3d:60:b1:c7:12:fd:37:ec:d1:05:d8:5a:40:ae:37:
                    43:12:56:15:26:29:3d:70:4c:52:9d:a5:7e:09:15:
                    9a:2d:26:b4:6f:71:79:d7:18:df:60:73:23:36:7f:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:88:96:B3:FD:DE:3F:94:A0:D9:09:C4:87:37:1C:1B:4C:2F:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:76:85:10:7d:6a:58:d4:01:87:5d:3e:55:f0:38:ea:c6:36:
         27:f7:22:29:cc:bb:b0:af:24:cf:85:ec:8b:1f:46:02:3d:f7:
         f2:0d:9f:36:49:66:5a:36:ce:80:85:0c:9a:bd:7a:22:a0:a5:
         0d:1c:9f:f8:41:cf:03:e9:33:95:5f:f0:ef:80:26:13:5f:43:
         f3:6a:da:ec:fc:1e:ea:70:54:dd:a8:89:72:dc:37:f5:e2:87:
         5e:7e:55:df:5d:43:42:24:da:79:19:d1:31:51:dc:c6:d1:a1:
         5e:8c:96:8a:6e:f6:f7:45:b2:36:69:01:72:67:99:60:8f:80:
         3d:11:4f:4a:64:37:8c:25:ee:cf:db:e3:87:22:f4:bc:c4:7b:
         4a:b1:46:fa:2b:0a:b8:cd:c6:48:ee:35:e8:17:01:80:a5:77:
         03:61:b9:fe:01:d7:69:44:45:a0:27:0e:ab:f5:53:ca:7f:7f:
         94:78:fe:81:5b:0a:28:57:51:22:30:64:ef:34:1d:a0:78:9b:
         ea:ba:7c:53:9f:a4:88:19:66:66:b3:00:30:b4:ff:cc:5a:a9:
         c8:08:56:4d:5c:d6:0d:56:76:a7:87:e6:2e:5c:58:fd:36:83:
         14:b8:61:b8:b2:5f:cb:8e:5d:80:f4:d3:e7:3b:43:87:37:bc:
         9f:3c:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:43:09 2026 by rpki-client