Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa
File:                     25f78cd6-2361-34d7-bc58-29a86b5c8031.roa (raw, json)
Hash identifier:          tF9ZfyLHKfX7wK6768CDl3lRwTlueb5kPtzEuvPoJFE=
Subject key identifier:   AF:E4:8B:AB:6E:0A:6A:79:7D:22:8A:CD:DD:AF:25:82:8E:F2:D7:20
Certificate issuer:       /CN=0acd930f-69db-4fad-a737-b4b3b2f142c6
Certificate serial:       010D0C9F4328584F19FCFD442FB0CDC596ECE900
Authority key identifier: 12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     396836
IP address blocks:        2604:24e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fd:44:2f:b0:cd:c5:96:ec:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acd930f-69db-4fad-a737-b4b3b2f142c6
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=590aa744-0585-44e7-9b1e-5de629480f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:92:65:cd:99:d1:dd:2a:5e:b3:f5:5e:be:
                    ce:4b:7e:f1:a2:49:af:7d:a4:c9:04:5f:c7:9f:c8:
                    60:95:e4:4a:ba:a7:ad:41:b0:05:3e:19:b5:8d:18:
                    1e:79:a4:cd:e5:cf:87:52:5b:5d:a2:2e:89:e5:a8:
                    51:85:fb:4d:87:1b:14:9f:a1:8e:91:b7:d5:ea:55:
                    cc:62:25:a8:c3:5b:af:a1:ea:4d:52:a1:b3:9d:98:
                    e8:d8:bd:85:c5:80:71:da:d5:de:9f:44:93:92:eb:
                    c7:29:92:62:ba:eb:af:12:0b:f3:31:60:dc:66:30:
                    3d:67:5b:16:fe:d3:05:56:a2:52:99:23:3d:34:01:
                    dd:44:8e:8a:6a:53:23:2c:43:76:9a:83:90:d7:7f:
                    35:c0:dd:59:db:ec:4c:38:bd:79:86:a7:c7:ce:dd:
                    28:d0:e6:68:1c:36:70:01:e6:5e:9a:1a:e5:30:27:
                    23:23:3d:e5:97:86:ac:2f:7a:eb:ff:f9:41:b3:00:
                    da:7c:02:94:cc:bd:93:8f:5f:cf:90:37:a5:9a:f6:
                    ed:77:42:14:bf:9f:63:d6:87:21:39:7c:ea:44:26:
                    74:61:06:4d:10:50:f8:6a:c9:5d:a8:fd:66:97:7f:
                    fe:63:4e:ca:ec:05:4e:d6:b8:28:bb:b1:be:48:98:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:8B:AB:6E:0A:6A:79:7D:22:8A:CD:DD:AF:25:82:8E:F2:D7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl

            X509v3 Authority Key Identifier:
                keyid:12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:24e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:78:90:be:cc:27:70:22:2c:40:9b:4c:6e:62:73:e4:dc:fa:
         17:c4:1b:0e:72:83:6e:fa:19:c4:f5:c1:d8:59:97:c9:03:35:
         29:90:7c:0c:70:06:42:f1:e7:0f:94:b5:44:d9:2c:af:58:48:
         d8:97:52:0c:4a:06:c2:81:84:3d:df:c3:e2:8f:a5:64:b9:02:
         f5:29:bf:f5:b2:9d:17:2c:b5:f0:9e:cb:df:db:d3:a9:b8:cb:
         ea:a9:2a:3f:a5:35:b5:06:35:e1:bb:d3:6e:a7:93:0b:9d:16:
         3a:14:4b:25:0d:86:34:4b:52:4f:6d:ee:b4:53:58:c6:d3:36:
         ab:39:19:37:ea:a0:46:02:0d:d1:7a:86:0b:2d:8e:e2:28:96:
         4b:81:09:e2:1c:07:76:df:ed:8d:87:36:57:77:b8:6f:6a:07:
         5f:c4:5a:f8:c6:26:dd:e3:4b:b0:d4:8e:6f:5f:f5:0b:fc:e4:
         b1:e9:f4:65:25:b1:f4:88:03:3f:5a:c8:dd:3e:9b:20:81:ce:
         1b:65:13:0a:76:b2:35:99:92:55:cd:fe:b2:64:30:37:b3:0b:
         cc:29:d8:ed:86:f8:23:ec:55:38:91:e1:d4:3f:3e:f2:f9:56:
         49:28:75:42:27:37:31:f3:9d:93:72:c0:95:88:ff:ed:75:c7:
         a2:75:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:37:54 2026 by rpki-client