Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
File:                     cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa (raw, json)
Hash identifier:          SH+lXdLesb+eEDpVlWDHn16gwL/PtTRbhWFZvhg4F7Y=
Subject key identifier:   DC:8D:D0:3F:00:38:B2:5D:A2:91:8D:D2:4F:0B:B5:30:E4:F2:22:D6
Certificate issuer:       /CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
Certificate serial:       010D0C9F4328584F268D0608AE330F545309D040
Authority key identifier: CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     396919
IP address blocks:        2605:940::/40 maxlen: 56
                          2605:940:400::/40 maxlen: 56
                          2605:940:510::/44 maxlen: 56
                          2605:940:610::/44 maxlen: 56
                          2605:940:710::/44 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:06:08:ae:33:0f:54:53:09:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=60e59ea3-f62b-4105-b711-df904404132e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:33:3c:13:88:4b:b9:f6:4b:33:ea:c1:c1:
                    b3:eb:17:c8:1f:db:d5:fb:da:b4:52:83:1d:ec:73:
                    20:15:f1:90:d9:03:d2:67:b3:9c:b5:90:5f:3e:42:
                    c8:0b:80:6a:15:7b:c3:16:93:44:24:0a:66:bd:06:
                    eb:94:cd:0a:a0:ee:1c:a0:ad:f2:9a:9d:51:e2:ec:
                    61:46:ba:61:4d:64:92:86:ac:ee:46:ed:f3:d7:23:
                    8c:7d:83:9c:94:86:2f:13:3c:ba:f7:68:35:04:fb:
                    25:c0:89:5b:bb:ce:b1:2c:fc:c6:7a:87:7e:f2:8f:
                    92:4b:4e:c1:5d:2f:f6:be:c5:1d:cd:30:26:75:53:
                    9e:4e:be:82:a7:c6:83:f2:f3:02:64:89:f0:00:19:
                    29:af:0b:88:06:be:f4:d4:54:25:b2:4a:c9:6f:65:
                    78:32:6b:05:c7:98:6c:12:99:30:af:eb:bc:c9:c9:
                    84:48:37:3f:28:4b:d0:01:ad:be:df:3a:83:a4:a2:
                    35:13:e7:24:d6:4f:ba:90:b4:06:e0:65:17:d6:b6:
                    e5:dd:41:2a:b4:29:c5:c6:e9:ce:b8:94:56:d8:39:
                    73:d6:f0:33:b8:56:d9:31:ae:f0:54:70:20:33:8a:
                    90:ea:f2:5a:7d:d7:ac:f9:ce:35:dc:fc:66:67:01:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:D0:3F:00:38:B2:5D:A2:91:8D:D2:4F:0B:B5:30:E4:F2:22:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl

            X509v3 Authority Key Identifier:
                keyid:CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:940::/40
                  2605:940:400::/40
                  2605:940:510::/44
                  2605:940:610::/44
                  2605:940:710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:a0:e9:47:48:c1:0b:19:a8:2d:a8:97:b7:65:ce:29:5b:
         78:22:fc:8d:68:7f:26:d2:7b:bd:ba:49:b6:a8:6a:3a:cc:06:
         8f:44:ef:89:b4:09:ba:20:dc:1d:72:64:9e:0e:2b:b8:16:66:
         af:87:04:a7:3c:ae:03:57:00:53:6f:e0:cc:e1:49:64:f3:95:
         47:0f:ed:54:d1:cd:a6:ba:12:24:06:ff:cd:0e:16:07:f5:97:
         6f:57:98:a7:11:3a:ac:87:36:4d:0e:87:73:f1:1a:5e:94:f8:
         dc:3d:dd:36:7a:c9:a8:b1:a4:64:b9:f2:8b:90:4d:17:b0:6f:
         05:0e:11:4d:fd:03:62:f5:01:db:e8:1d:51:ab:13:7e:18:64:
         15:03:6d:73:f4:de:89:b7:a0:9d:83:78:5f:db:6f:55:86:66:
         77:f5:c9:8c:90:a5:a0:4a:6d:1b:80:b7:3a:a2:3d:12:75:e9:
         cc:0a:15:a7:82:e8:23:fc:96:b5:83:26:26:8a:b6:d7:a2:5e:
         22:a6:45:db:cf:10:1a:95:0d:53:b1:d0:18:05:6c:64:06:df:
         0c:1c:53:7c:84:c2:68:71:31:37:0c:e4:80:c8:76:73:79:03:
         01:23:c7:a6:a1:ce:e7:22:e6:b0:20:89:af:38:d3:3d:32:be:
         2f:bc:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:02 2026 by rpki-client