Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa
File:                     321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa (raw, json)
Hash identifier:          zlkEybaOKqs+WvRJI+K78PyH2UFA3l5USASfA3Pasgs=
Subject key identifier:   4B:F4:11:55:7C:74:FF:CD:87:CD:7C:88:46:B7:2A:4B:51:B7:66:4F
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584EE0C1FFF66DC04EB113A65C40
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     25623
IP address blocks:        2001:4830:3100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:ff:f6:6d:c0:4e:b1:13:a6:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=0889c373-ea3b-411e-b707-516ab9cc1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:d9:bb:c0:ee:89:f6:cd:e6:7d:c3:4a:5f:
                    ef:69:a8:a9:df:90:b6:4c:cf:41:a6:88:e5:4a:74:
                    18:37:ac:a3:ef:67:16:a2:66:3d:60:47:cc:dc:5c:
                    30:71:36:9f:5c:be:85:e0:46:c8:5e:55:80:5e:5f:
                    57:3a:83:1f:b4:c5:5d:61:6d:82:53:06:27:cb:dd:
                    a3:2e:99:32:87:3d:67:0b:a2:0a:f9:2d:d3:fe:df:
                    d2:b6:83:95:03:95:8e:dd:2b:17:5e:e7:cd:a6:70:
                    52:49:72:1a:11:ef:90:b3:4a:6b:95:eb:fd:ee:36:
                    3c:80:34:e0:de:91:b0:f0:c5:48:3d:59:3a:e1:f8:
                    3d:68:e4:08:32:9d:97:3c:ab:ee:9f:0b:e5:22:17:
                    00:a5:f9:7d:96:7d:a6:21:c9:8d:62:ab:40:80:a0:
                    ef:5a:46:99:30:15:77:21:37:33:ac:11:a5:e6:fa:
                    56:cc:76:67:80:a8:ff:c6:29:7f:11:ab:bd:a5:ac:
                    a7:75:aa:fd:b1:5a:82:a0:b8:55:8f:8b:2b:74:58:
                    d4:9f:14:30:80:fd:b8:8b:7d:22:a1:63:bf:38:78:
                    8d:4c:c9:8a:88:23:eb:cb:8f:87:1a:f5:15:a6:20:
                    ec:37:58:30:42:35:33:c3:f6:b8:70:ee:b8:bb:12:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F4:11:55:7C:74:FF:CD:87:CD:7C:88:46:B7:2A:4B:51:B7:66:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:3100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:3b:8f:2e:3b:53:f0:e9:a9:3b:14:66:57:45:68:50:0e:
         2b:54:b6:e1:31:77:a4:b5:cc:de:40:04:e4:0d:52:09:78:ed:
         fc:9f:84:da:57:5e:ff:5e:b3:2d:88:bc:87:08:3e:15:72:1b:
         38:57:f9:25:39:aa:08:fc:87:2b:7e:d2:20:f8:b1:f8:11:a7:
         d9:38:4f:8b:fe:58:d8:b5:3a:b1:4a:4f:da:1e:36:b1:27:21:
         68:a6:9b:38:7f:ca:60:06:b2:26:b2:cb:95:71:8b:1d:d3:ff:
         14:b8:dd:86:2c:9f:90:87:f9:ec:6a:34:b7:2a:25:dd:65:eb:
         3b:e9:90:c7:98:e2:85:c1:db:1e:fd:47:07:7e:97:dc:ee:66:
         4d:67:69:12:88:5d:f0:e6:57:d5:28:d7:54:b4:01:36:c9:26:
         9a:13:00:30:c0:8c:be:1c:81:42:79:98:0d:41:a7:de:ea:b0:
         8e:06:d4:62:00:64:92:15:37:e7:cd:03:62:68:d1:db:82:a8:
         9b:40:e3:a7:42:6b:ad:c1:f7:6b:2e:e1:10:c6:98:59:f6:82:
         f4:ea:26:70:e2:6c:97:10:de:7a:c9:20:58:58:f7:bb:3c:96:
         be:4e:b6:d4:4d:92:a4:af:e2:47:bc:1b:19:a2:c8:d7:10:f3:
         e5:11:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:14:11 2026 by rpki-client