Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa
File:                     d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa (raw, json)
Hash identifier:          kuulRzHicFoSfolJOmVIFoyh1dLUt7ZZet16WU1BxgI=
Subject key identifier:   1A:D9:5B:5C:D9:61:36:9B:71:C7:1A:7A:46:F7:B5:05:05:C7:04:47
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584ED9C750AC9E52431AAB989600
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     394497
IP address blocks:        2606:8e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:50:ac:9e:52:43:1a:ab:98:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=20d8c637-2042-4896-8dcc-4f1308a58cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:51:77:4a:df:fe:4d:5f:39:dc:1a:f2:51:
                    b9:ba:61:d7:0c:08:42:24:63:6a:ba:5d:ab:26:f0:
                    0b:0d:72:c2:25:d1:aa:12:cc:9e:b5:21:0b:ce:06:
                    e4:a5:24:c0:c0:6d:d8:ef:30:93:fc:cb:4a:7a:2a:
                    61:67:7d:e9:26:6e:c2:e1:98:dd:c3:99:71:d9:50:
                    79:bd:21:ae:27:95:1d:f1:68:47:13:fa:6a:a5:c2:
                    ad:91:a6:5d:3a:0f:45:01:f3:af:e4:18:aa:e6:2d:
                    29:78:cf:de:6a:69:ba:ca:50:af:54:70:74:15:c0:
                    e9:7c:1e:5f:f2:b5:ad:9f:56:8d:1a:8a:86:00:94:
                    68:47:2f:52:d9:6f:e2:06:68:e2:42:0f:34:86:43:
                    03:1a:48:86:12:9a:cb:be:f0:f3:83:7b:0f:cd:0b:
                    24:70:2a:c1:2d:a1:7d:f0:5f:ab:7e:70:ae:a5:08:
                    85:33:da:95:2f:6d:6c:b9:3a:a3:21:6f:de:5b:6b:
                    2d:2a:17:76:0f:6c:e5:77:02:48:11:1f:67:39:d7:
                    21:9d:d6:4d:71:df:8d:6e:72:5e:10:76:72:c0:88:
                    de:c6:e4:c1:6d:97:49:5e:46:ea:b9:72:5a:ef:b0:
                    81:26:7a:07:53:68:10:9b:0e:3c:c4:84:f1:25:17:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D9:5B:5C:D9:61:36:9B:71:C7:1A:7A:46:F7:B5:05:05:C7:04:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:28:1a:ab:87:4d:ed:0a:85:35:be:f8:c2:3b:29:ad:31:b9:
         00:d6:78:be:5c:61:a6:9f:e0:60:34:1a:9f:06:47:0f:fe:6e:
         e5:4a:6d:c9:a3:bf:b4:39:62:05:05:20:8e:c4:ab:19:1b:85:
         49:97:ca:23:63:50:34:eb:9b:9a:c0:90:34:f2:2c:ca:97:72:
         15:5d:ca:e5:7c:b6:e7:3b:b5:5e:64:79:e0:65:d6:0a:c1:27:
         bb:bc:12:fc:bd:3c:45:32:be:68:1e:28:79:a3:ed:35:20:f3:
         fe:0f:7e:f1:9c:39:55:f8:35:0d:b5:d3:0e:18:76:99:98:e9:
         22:11:33:c4:78:1a:9e:0b:18:a4:e8:5b:02:8c:c4:99:b5:94:
         64:e0:ad:82:ed:fa:cf:54:0e:90:84:dc:2b:57:0b:12:07:9d:
         6a:ed:25:fe:9b:b5:0d:2d:af:c3:44:46:25:14:c8:a9:11:ed:
         19:d3:d0:ca:b1:9f:77:fa:a4:2e:c8:50:0a:ad:dc:3a:94:a3:
         dc:be:48:28:74:1c:5e:e3:aa:b7:b5:e2:72:b6:8c:12:bd:e8:
         89:cc:2b:0c:83:a4:43:1d:95:ac:a0:34:d5:93:d9:a7:b6:51:
         44:b8:26:cf:4e:11:71:b6:56:b5:19:51:6c:fe:36:8e:e8:6c:
         0e:66:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:33:16 2026 by rpki-client