Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/174355ca-5c45-31ab-a32d-9cfef42668a7.roa
File:                     174355ca-5c45-31ab-a32d-9cfef42668a7.roa (raw, json)
Hash identifier:          n+wyKbUHR+vqHplxJpCKVmTOoTks4UGl2ErnkL+Xt0w=
Subject key identifier:   DF:93:26:96:28:33:C4:55:C5:61:7A:62:C6:53:11:5A:14:C8:CA:BF
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584F4973E8731B3ECBFE56FD6600
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/174355ca-5c45-31ab-a32d-9cfef42668a7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400097
IP address blocks:        2606:3d40:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e8:73:1b:3e:cb:fe:56:fd:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aef80f56-e7e6-4f09-99c4-926559e06bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:36:f9:da:4c:46:1c:7a:02:d1:4d:df:9b:
                    b8:d8:17:7b:5f:03:c0:5d:2d:6e:28:a6:b2:44:59:
                    a5:8e:da:18:c3:e6:c9:ab:82:bd:90:e3:09:53:e4:
                    da:52:14:c7:ff:5a:3f:59:be:67:03:ad:7b:40:bf:
                    d1:6a:7c:ff:c7:ea:91:84:ce:ee:ce:d1:01:15:90:
                    9d:92:d4:70:d7:23:6a:4b:6d:5c:57:9e:6a:d2:b7:
                    b6:0d:13:2f:d9:de:b9:97:84:d7:dc:45:73:a2:6f:
                    2a:e5:35:d5:64:49:16:85:06:fd:e9:2c:2f:31:b6:
                    9b:1b:d5:d6:0a:53:53:b8:88:e5:ee:82:42:0f:e2:
                    aa:2f:32:9b:16:92:74:80:ea:16:7d:18:7d:15:dc:
                    f6:93:0c:54:6b:78:40:65:9b:49:57:c7:c9:31:20:
                    5f:eb:9e:7a:e1:56:4e:d2:87:07:a6:27:1f:ff:df:
                    31:c1:47:cf:fb:a8:b7:a3:08:11:b5:1b:d4:6d:89:
                    99:76:fc:01:68:58:0d:a8:f0:fd:74:af:c6:48:0d:
                    5b:38:57:0f:16:a6:e0:6e:5d:c8:f2:84:02:12:7f:
                    5e:f2:34:47:be:dc:fd:58:b4:28:4a:fd:bd:ba:be:
                    b8:50:69:44:fc:ca:56:cd:af:9e:8e:69:9f:c0:c3:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:26:96:28:33:C4:55:C5:61:7A:62:C6:53:11:5A:14:C8:CA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/174355ca-5c45-31ab-a32d-9cfef42668a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:76:60:d2:c3:37:a3:ec:44:55:92:f3:f1:24:7b:46:14:fc:
         4f:05:ea:34:4d:c6:ef:e2:25:11:65:1c:3e:4b:a4:f6:20:7a:
         8b:d1:2f:9f:23:2b:a5:96:96:89:85:83:4d:04:b3:36:95:07:
         3e:bb:38:b2:56:68:be:e7:37:17:5d:f6:37:96:3e:9a:2a:35:
         8c:a2:f9:d1:b6:b0:56:94:67:60:56:93:3f:7d:61:88:fe:09:
         3c:f4:99:f5:6d:74:f0:7d:8b:4a:43:18:59:b2:4d:94:2e:87:
         57:ee:57:a6:4b:0b:f7:3c:fd:66:ff:86:1e:21:e8:08:b0:16:
         ac:b9:4d:8a:07:0e:24:4e:84:2a:23:ad:c5:b0:f1:bd:b8:4b:
         c3:57:78:45:87:d7:8d:0a:38:78:3d:03:5e:9f:dc:50:f9:a0:
         a0:01:50:2a:a6:ee:b2:4f:21:2b:dd:58:3b:c4:ab:49:1a:20:
         b4:c1:c0:0c:64:2f:49:2b:13:0c:56:97:12:1a:cd:de:d6:f9:
         e0:2a:46:2c:3b:a4:92:3b:72:3a:4b:89:94:04:10:60:8e:89:
         a9:16:7c:34:c2:4a:9c:8c:b8:85:82:2e:ec:2c:b2:1a:4f:5e:
         99:9b:1e:51:9e:6a:f4:5c:cd:bf:ae:d5:74:17:41:f9:41:25:
         36:5b:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:49:57 2026 by rpki-client