Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa
File:                     3d2f377f-1667-3064-a226-3cf473e49e64.roa (raw, json)
Hash identifier:          ZVFMW7uDL67dV+wmgMIvP62DVZwZTTIzV9d/ELzMsLE=
Subject key identifier:   0C:5E:F3:31:D1:60:7B:73:AD:37:77:1B:2F:FD:F8:E8:CD:EA:EA:15
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584EF2E76AAD8600D641FA8E9080
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     376
IP address blocks:        2001:510:108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6a:ad:86:00:d6:41:fa:8e:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=10d3c1b4-ed02-42ff-8e44-750592466975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:d4:26:1c:df:83:7b:a6:a4:dd:46:11:4b:
                    31:a6:8a:84:5f:9c:ce:3d:bd:e4:38:55:18:fd:ae:
                    56:7e:48:90:71:15:39:58:9f:c9:04:c5:b5:3f:30:
                    ac:d3:41:42:ce:0a:ed:90:ab:7c:2e:30:f3:ca:5d:
                    d2:34:28:9c:e4:69:52:ef:85:6c:35:6c:c2:08:5a:
                    fc:39:be:b1:97:4a:46:2d:0c:2c:55:1a:3a:15:08:
                    9c:04:de:82:87:8f:1c:5a:59:7f:10:f1:fd:9c:65:
                    6d:dd:46:e8:42:a8:ed:ad:c9:8e:19:75:d5:b0:fd:
                    15:50:a4:26:cf:30:0e:d8:4d:a1:60:25:a8:19:48:
                    97:5b:85:43:60:2f:ec:cd:ee:84:2b:b0:e7:4e:aa:
                    74:c5:20:62:d5:f3:c4:2f:3a:76:e2:9b:46:e5:d1:
                    c7:5f:e7:b1:56:17:09:2d:8c:2f:7a:ee:b2:a7:15:
                    1c:b3:15:90:06:40:2a:72:a8:ee:0c:c8:5b:69:e1:
                    ea:7e:1a:88:83:27:64:a3:40:26:77:36:30:71:c9:
                    e3:f8:ad:d0:17:39:a2:d1:fa:00:75:aa:46:8c:41:
                    6f:f3:22:aa:09:eb:2b:43:c0:8a:eb:e7:45:ff:c9:
                    b3:1e:97:f4:d7:e6:12:68:34:e5:33:34:8f:a9:d2:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5E:F3:31:D1:60:7B:73:AD:37:77:1B:2F:FD:F8:E8:CD:EA:EA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:0a:cd:f5:90:92:1d:55:ad:6b:86:b3:02:f6:76:f1:a0:
         81:8f:51:94:f7:a3:9b:cd:a4:b8:77:f8:aa:7f:c1:bd:89:9d:
         c2:7f:ba:eb:5d:63:14:95:64:03:1a:ac:51:4e:55:25:78:4c:
         a8:7a:ef:0c:90:9b:ed:29:15:39:2c:23:26:1a:ef:34:aa:fe:
         82:b9:c3:7b:e2:d5:95:4d:09:8f:4d:c0:78:7b:da:77:92:51:
         f3:28:10:e3:a8:80:04:a5:e1:93:fe:e1:c4:8a:c8:a6:17:99:
         6b:7f:b9:81:96:8f:ae:31:a2:38:3b:2a:96:34:e5:4c:69:f8:
         49:09:fa:fe:98:5f:13:1e:72:18:c7:7f:27:e7:bb:0b:d3:a8:
         46:c4:2e:bc:55:41:f7:5f:e1:d5:f3:6a:a7:01:cb:f0:59:5c:
         b7:ce:d6:c4:f2:f4:07:52:ae:8c:51:5f:10:71:6a:23:82:3d:
         ee:36:d6:d0:f8:fc:dc:5d:4b:14:c3:39:2d:30:50:fa:9d:4f:
         0e:4d:c0:8a:4f:a4:05:ff:e5:0d:a1:21:d5:30:0d:9c:3f:7c:
         56:10:6d:bd:e1:b7:fa:6b:e2:67:6e:93:b5:81:f4:04:27:a2:
         7d:21:34:01:bc:96:74:75:14:ae:8f:1a:0c:17:30:39:86:03:
         c1:a7:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:39:30 2026 by rpki-client