Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/df3ac286-e0b6-3aad-b66a-0d14e9a1d734.roa
File:                     df3ac286-e0b6-3aad-b66a-0d14e9a1d734.roa (raw, json)
Hash identifier:          CJy6HNPiMiVh+swPFNstscrpuqLuZrqIsuxB2+Ddbss=
Subject key identifier:   03:DC:11:08:F1:D3:E1:99:BA:65:0E:4B:F0:19:AC:1A:6B:89:47:03
Certificate issuer:       /CN=e01b5bcb-f7e5-4cdd-a03a-79bc49957249
Certificate serial:       010D0C9F4328584F1EDAF0D7118BD86BEF40DF00
Authority key identifier: 08:26:11:D5:A2:8D:6C:BD:79:80:A0:5A:F4:97:C1:7E:D5:D1:EF:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/df3ac286-e0b6-3aad-b66a-0d14e9a1d734.roa
Signing time:             Wed 09 Sep 2026 18:50:50 +0000
ROA not before:           Wed 09 Sep 2026 18:50:50 +0000
ROA not after:            Tue 08 Dec 2026 19:50:50 +0000
asID:                     62566
IP address blocks:        2604:5840:cfe0::/44 maxlen: 48
                          2604:5840:cff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:da:f0:d7:11:8b:d8:6b:ef:40:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01b5bcb-f7e5-4cdd-a03a-79bc49957249
        Validity
            Not Before: Sep  9 18:50:50 2026 GMT
            Not After : Dec  8 19:50:50 2026 GMT
        Subject: CN=79a793f2-ded9-46ec-8776-770c2e0a40e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:3a:9b:44:2c:34:cf:a3:4e:55:d9:ab:df:
                    df:0c:f4:59:40:97:41:8b:fc:0a:ad:53:75:c0:28:
                    67:6c:c6:e7:65:1d:a0:03:a3:b3:d4:83:b6:20:11:
                    f9:cd:88:d8:04:95:0a:f2:b5:14:a1:6e:83:8d:80:
                    22:07:70:de:68:cd:df:27:93:5a:a5:6c:d2:85:2d:
                    a5:2d:e9:cb:3d:8e:3a:77:d6:87:82:2d:24:49:10:
                    a8:7b:14:fc:f0:09:20:11:4d:08:30:84:07:80:d7:
                    f3:d1:a7:b1:93:83:79:a2:90:5e:10:6f:a5:f4:00:
                    a6:b0:d6:5e:c6:d2:aa:a2:2e:a5:52:7b:4a:79:1d:
                    ce:d6:4c:c2:8a:e5:68:1e:84:f4:80:ff:19:3c:82:
                    6e:5a:cd:5a:37:ea:bb:b5:98:aa:9d:b2:a9:16:f8:
                    90:b7:33:02:54:66:6e:f3:1b:d3:a1:6b:c1:48:42:
                    70:e2:04:39:40:47:b9:7a:5e:31:e9:6c:9c:bf:b6:
                    ad:72:1e:7f:8a:f1:38:10:c5:5a:bb:28:7b:50:56:
                    71:a5:ad:64:f6:d7:22:a7:b9:f5:fb:67:a1:ba:63:
                    b3:87:97:b9:db:56:58:73:59:c5:c8:1e:c5:d0:b4:
                    22:90:a0:c8:af:d3:91:df:92:50:b5:7b:42:45:0a:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DC:11:08:F1:D3:E1:99:BA:65:0E:4B:F0:19:AC:1A:6B:89:47:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/df3ac286-e0b6-3aad-b66a-0d14e9a1d734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.crl

            X509v3 Authority Key Identifier:
                keyid:08:26:11:D5:A2:8D:6C:BD:79:80:A0:5A:F4:97:C1:7E:D5:D1:EF:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e01b5bcb-f7e5-4cdd-a03a-79bc49957249.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5840:cfe0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:51:f4:1b:25:9c:4a:bf:59:15:d4:86:70:0d:a9:4a:9f:7b:
         1a:4b:34:e4:9c:a3:be:ad:2a:0e:43:81:67:98:ea:15:5d:ef:
         bf:d3:f9:7e:08:dc:7c:e7:f6:66:c8:5d:24:bb:cb:45:4c:b5:
         d9:b5:47:89:5e:87:67:a6:f2:06:a6:51:1b:67:8d:d8:bf:fd:
         7f:57:d8:a6:4d:ef:a4:6c:47:4f:db:d4:93:3b:22:41:06:d2:
         0a:5d:39:3e:68:6d:b3:b6:23:de:c6:42:40:de:7c:70:ed:94:
         84:f4:de:11:ee:a0:d5:70:72:e2:2b:29:f5:80:e3:77:5d:79:
         2c:af:d0:9d:34:94:6c:41:5f:28:e8:9f:ef:cb:30:19:74:a7:
         12:74:8b:5f:82:8b:8d:45:ec:72:fa:bb:57:71:c5:68:30:7a:
         00:16:47:b4:b0:a0:65:a0:fa:30:7b:91:11:ce:3c:57:4f:46:
         f5:81:a9:e2:6e:84:9f:d5:c7:5d:cc:c1:26:ad:31:06:f7:d6:
         5e:8a:53:99:d3:e3:e9:06:e7:27:af:5c:95:34:fe:54:02:3d:
         bc:3b:78:fc:48:c5:2b:5e:ce:c1:d7:ce:ca:30:1d:61:63:f1:
         5c:86:6e:84:b4:8a:13:17:93:0a:66:ac:e4:00:0b:f0:70:5a:
         24:b9:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:43 2026 by rpki-client