Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
File:                     12742b04-3c62-302c-a844-0e1fc03e34d6.roa (raw, json)
Hash identifier:          jtItQqm1Dl0uRi7tos/e1T2NtswM0y6gKiKffI7mGwk=
Subject key identifier:   2D:B9:12:7E:65:78:02:98:12:1A:28:0F:5F:D4:A2:C9:56:75:30:D3
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F4975A2DFB6C6475484145280
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8987
IP address blocks:        2605:4300:2c1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:a2:df:b6:c6:47:54:84:14:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=eaa90dd5-2460-4bb2-8f26-a5bebd565b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:62:81:c1:1b:fa:2e:34:93:c4:0d:ca:19:
                    da:f9:36:32:f7:cc:ec:54:30:d7:ed:27:e5:6b:cd:
                    60:c6:56:de:8d:8c:1e:49:3f:11:f8:c2:1d:43:7a:
                    01:02:ca:a8:68:70:93:77:a0:e1:39:41:a7:68:e7:
                    0a:e0:02:28:6c:9c:80:d3:0c:20:4d:41:ae:be:8c:
                    d7:d2:5f:91:3b:a2:cc:72:7d:84:b6:d5:da:22:df:
                    22:b3:de:5c:96:1b:53:d1:70:c5:ad:84:07:9a:85:
                    53:3f:41:ef:ac:4a:33:c9:8b:d6:7d:04:fd:e6:6e:
                    0a:1a:ad:70:c4:53:ea:40:a1:b9:38:31:3d:f1:ef:
                    7d:0b:d2:8a:63:b7:00:5d:a9:36:e6:51:70:9d:c1:
                    99:13:17:c1:ed:42:4c:9b:7d:93:1d:96:15:12:b4:
                    b1:b7:87:c4:e4:86:4f:b9:c3:1b:27:39:6a:e8:79:
                    8b:ce:d4:a3:fe:5f:e3:6b:23:b0:98:44:a1:45:31:
                    01:43:da:66:03:c4:31:c0:60:2c:a8:94:02:8f:7e:
                    1e:76:bc:2f:e4:b7:f6:7f:88:db:db:5e:2a:7e:cc:
                    da:ba:01:b9:f1:2e:85:0d:24:1a:1b:f7:30:1c:cd:
                    f4:2a:c6:60:97:4a:9a:03:73:22:b4:7b:61:c4:7f:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:12:7E:65:78:02:98:12:1A:28:0F:5F:D4:A2:C9:56:75:30:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:ff:ae:8b:a0:2e:94:50:d7:c0:9d:20:2e:c1:20:40:10:
         3b:5f:e1:d0:10:51:68:61:55:5c:e5:3c:4f:bc:8c:71:e6:e9:
         53:45:a2:a9:cc:58:c7:d5:a2:8e:b2:b7:57:58:dc:3e:f2:1d:
         6d:e7:6f:af:7a:7a:d8:c9:c4:f4:d6:94:03:6c:85:54:eb:84:
         7c:0e:9b:46:62:5f:84:5c:d3:f8:e0:a4:5b:0f:4c:e7:f8:c7:
         f3:4a:39:47:cd:de:ad:6b:ce:51:97:21:a7:0a:c1:b2:44:c5:
         4b:24:ae:cb:28:71:e6:c9:a0:41:3d:f2:7c:fa:51:ea:d3:6f:
         af:9c:85:15:1d:ff:cb:21:22:2f:dc:df:5c:a1:ab:00:15:46:
         04:f2:ff:2d:43:c0:7a:ca:f7:9d:4e:f0:03:17:ab:e8:c9:65:
         4f:29:1e:42:2c:fa:ac:a8:7e:69:9c:27:85:61:20:54:3c:90:
         26:dc:db:bc:5e:e2:d8:20:ad:01:f4:38:84:5a:a0:35:3e:5b:
         25:13:05:6a:2c:d5:12:58:09:b3:d1:f1:6d:36:10:43:22:79:
         fa:fc:95:85:70:47:e4:62:2f:0d:e2:ca:0c:0d:a7:02:88:7c:
         45:ea:7e:0d:da:70:68:31:0c:b3:d1:98:60:17:6f:a8:9c:0f:
         62:84:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:59:16 2026 by rpki-client