Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/262e2d2e-8603-33d3-9a00-e06501b05b17.roa
File:                     262e2d2e-8603-33d3-9a00-e06501b05b17.roa (raw, json)
Hash identifier:          Y6tv2daAR3YnEGDLONrQTraIkLVvY0vF+5Fg6SsU3PU=
Subject key identifier:   BA:04:6B:0D:E8:99:72:D2:37:3F:D7:25:90:F6:0B:AB:D6:E7:E9:BD
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F189797DB55B5A807584A9270
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/262e2d2e-8603-33d3-9a00-e06501b05b17.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:97:db:55:b5:a8:07:58:4a:92:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=fd9b04f7-837b-41d9-81e3-6536b36849d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:35:5c:28:eb:f9:e1:cd:b3:82:8e:af:da:
                    d2:0c:d4:aa:ec:e5:bb:ea:46:ec:dd:3c:53:c9:d9:
                    90:e6:ff:77:66:0e:3e:12:47:ef:9c:c6:47:73:bc:
                    94:18:73:46:42:f1:f4:a0:86:06:0f:bf:91:5c:da:
                    b5:ca:28:00:55:20:da:e2:ca:5d:95:33:d0:0b:f5:
                    e3:d4:64:15:f0:3c:e3:69:cd:d1:8a:bd:f6:0c:cc:
                    1e:3c:3b:1d:d6:26:10:a9:e8:a9:33:d3:61:71:8f:
                    ff:9e:13:2d:b7:5b:fc:05:6d:0f:f9:82:b8:8d:34:
                    47:60:26:48:58:d9:69:8c:93:84:ea:0a:2f:4b:0b:
                    49:a9:13:cb:f8:cc:03:81:f0:d9:e7:af:75:0c:29:
                    6d:2f:b3:24:7b:dc:cf:a4:4b:41:d6:3c:1a:dd:ee:
                    f1:5d:b0:87:32:3a:95:1b:c1:d5:65:af:28:92:15:
                    b8:26:36:14:a4:da:0a:f3:40:c8:6e:d7:27:5d:8f:
                    e5:e2:cc:36:0d:a1:b2:8f:b8:4b:a0:09:6b:f4:2b:
                    e5:28:82:d0:6d:16:35:c5:93:05:ca:74:33:54:45:
                    2c:48:06:29:24:03:bd:df:cb:0c:39:ee:b3:27:fe:
                    7d:15:e3:b9:49:b2:2f:9a:59:01:b2:5d:3e:7e:80:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:6B:0D:E8:99:72:D2:37:3F:D7:25:90:F6:0B:AB:D6:E7:E9:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/262e2d2e-8603-33d3-9a00-e06501b05b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:56:82:7f:d0:a1:88:99:71:91:08:e6:1d:3d:6f:da:eb:
         96:08:0f:4b:ef:28:d1:46:26:b6:13:7a:0c:00:b2:09:e1:a7:
         39:1c:e5:70:ac:d2:26:f1:23:4d:cf:7e:f2:f7:fa:8e:e5:f7:
         cf:80:21:18:fc:fc:90:b4:f2:d1:bb:65:ae:09:36:a9:e7:a6:
         dd:52:59:5d:8c:4a:ea:4c:f5:fe:7a:db:6b:77:e4:78:10:23:
         10:da:3c:0e:c4:ba:53:7f:f7:13:79:0f:1b:84:b5:5f:b0:de:
         ce:dd:a1:3b:53:93:c4:d5:ac:c9:f0:f0:20:b6:56:b8:ac:5c:
         da:82:a9:5e:ae:49:00:04:87:99:0d:76:22:fa:82:76:c3:2e:
         49:e4:4c:43:e0:94:98:13:07:a6:dd:05:87:a1:2f:6a:ac:db:
         8f:50:6e:b8:36:ad:be:42:0e:f3:1e:7c:0b:95:aa:1a:e7:31:
         59:5f:1d:c5:74:96:ae:c9:eb:fd:03:1a:45:a9:94:c3:46:26:
         ea:83:db:5a:ee:fa:1f:90:d0:de:3b:13:bf:16:81:09:3f:21:
         a4:fc:5f:0f:96:4a:57:5f:ca:f3:b8:b9:c7:44:dc:90:63:78:
         21:d7:a3:7b:2b:3d:c5:ab:ce:50:35:e4:6c:2a:24:52:62:a3:
         7f:cb:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:25:22 2026 by rpki-client