Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa
File:                     e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa (raw, json)
Hash identifier:          eH0V6UuyylV44kXieCeQ/CDBWfnCadrbWkxTbkggIW8=
Subject key identifier:   45:D3:7C:3D:75:97:49:BF:B9:64:DE:C7:20:FF:0B:70:EF:79:53:CD
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584F49766EAD232EFDD38094FB10
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399728
IP address blocks:        2620:98:e00a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:6e:ad:23:2e:fd:d3:80:94:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8384a9d4-981a-43f9-8ff9-727006cd2931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:75:eb:59:98:df:7b:96:2b:bc:c4:7c:31:
                    3c:c7:f9:ca:fe:68:df:15:3f:6e:91:70:94:56:4f:
                    62:26:de:7d:11:7d:f6:16:ef:2d:9d:1a:5c:98:b4:
                    e1:c4:15:6c:50:02:f0:46:25:a2:26:98:f9:2e:ee:
                    83:27:43:db:a6:a3:46:0a:5c:5d:ab:74:c6:8e:52:
                    9b:f3:40:60:2b:c2:33:64:94:81:36:25:bb:b6:b6:
                    2e:5c:ad:85:42:25:00:46:bc:24:14:67:4a:d5:ce:
                    e1:3b:09:23:43:be:fa:2f:1e:21:4b:ae:0e:7d:00:
                    ba:a2:0a:fa:a6:93:b4:0d:f2:63:eb:65:61:40:5c:
                    6a:03:7e:51:e1:02:77:69:85:5f:96:c2:07:f2:40:
                    66:db:04:95:85:b5:d9:14:dd:ce:1a:32:fe:12:f2:
                    d7:cf:4a:54:f8:c6:c1:c1:78:f1:eb:10:1a:05:24:
                    26:b7:a3:02:b5:64:e1:52:a7:19:23:cb:cf:32:7c:
                    f5:9a:16:a4:96:2c:76:c5:12:ae:92:2e:af:d0:bd:
                    15:30:fd:15:5b:cc:04:cf:33:aa:3f:ce:fc:5d:29:
                    ac:62:bd:02:10:96:2e:36:aa:ef:60:2d:60:98:71:
                    6d:a0:4b:01:5f:af:a4:71:db:39:e4:b5:49:bc:a4:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:7C:3D:75:97:49:BF:B9:64:DE:C7:20:FF:0B:70:EF:79:53:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:ee:e1:84:19:f7:c1:41:cb:27:f1:8c:86:1b:38:0b:22:
         38:d9:15:30:a9:74:f2:32:9e:10:af:62:71:02:a5:4f:09:57:
         44:6c:95:ef:85:65:ae:7c:43:96:cf:c8:55:1a:18:8a:85:b4:
         95:7b:a5:eb:91:fa:ed:19:91:2f:e7:ea:a8:60:50:b3:91:7e:
         24:58:6f:ad:6b:88:26:0b:9d:82:ef:ab:02:5a:54:78:4c:75:
         20:88:34:3e:ed:b7:b5:48:ea:2d:45:6b:71:2b:41:87:67:81:
         c8:e2:6c:42:b5:9e:58:d8:a2:4a:04:e3:af:96:26:76:29:e0:
         14:8a:3c:14:79:b6:6a:4e:58:8a:7c:5c:1c:c4:cc:67:49:71:
         e9:d4:fc:be:09:13:07:51:e5:73:c3:1c:84:8c:1c:f4:35:73:
         30:b8:e4:8d:99:34:07:50:32:90:ae:84:f7:32:2a:a4:1f:18:
         45:d0:4a:e7:a9:a3:36:cd:9f:4d:02:1f:c3:4f:38:46:15:b4:
         4a:93:ca:ac:83:a4:d3:2e:94:31:c5:c3:c1:85:bd:e8:6e:79:
         02:08:d5:41:70:cc:da:c7:53:46:a6:9a:f3:ec:dd:0f:ee:de:
         03:30:73:69:8b:0a:5e:0a:a5:34:55:ec:3f:be:59:25:02:38:
         b4:f3:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:00:05 2026 by rpki-client