Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa
File:                     14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa (raw, json)
Hash identifier:          SDa1NSZ9JKWvPAjXceN1IazRkC13AcWnFK1bidch6GM=
Subject key identifier:   A6:24:86:31:2F:5F:D7:EA:21:AB:A7:A6:F3:4F:BB:F9:24:E9:E3:5D
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584F119D00BD99C8B6496497F700
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     214611
IP address blocks:        2607:1c0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:00:bd:99:c8:b6:49:64:97:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=d867b8a0-f007-4c2c-a54c-2e50294cf795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:71:44:3a:42:97:f3:91:bc:38:35:86:e4:
                    c1:7d:58:86:fa:b4:cb:bb:bd:f8:8a:50:e5:ad:92:
                    0d:b4:0a:da:6e:53:05:9c:fb:fc:af:a1:84:fb:6d:
                    b8:fe:15:b5:65:fb:76:bb:a1:a1:30:68:a1:ec:4f:
                    7b:f8:75:92:7c:e6:1a:df:b1:cf:ef:4a:f6:77:35:
                    c8:0d:a4:73:05:7b:70:0b:18:1f:af:6f:a4:b6:2d:
                    50:b7:48:f2:9c:ff:6f:09:99:09:51:e6:b6:de:9c:
                    fc:f5:71:e1:48:4d:c0:01:b0:93:ef:9a:12:bc:82:
                    1f:9e:50:07:40:94:92:ee:b1:46:35:99:79:e5:99:
                    a8:c3:7b:17:d6:62:b8:59:a6:9c:1c:64:51:54:18:
                    d6:8c:29:bd:71:1b:e8:65:27:75:36:24:0b:f2:91:
                    f9:ad:71:26:21:53:c8:94:0f:53:f5:7a:82:fe:99:
                    a2:49:47:2a:39:14:18:c6:eb:72:74:f3:03:d9:e3:
                    f7:79:95:13:c3:8d:27:f4:04:01:ed:c0:2e:ba:14:
                    4d:08:58:53:07:6a:0c:06:92:bb:16:3a:f8:78:ca:
                    43:c2:ec:6c:f9:d2:45:79:81:a4:c5:90:b6:3c:aa:
                    db:90:e0:68:28:9f:a9:be:99:6f:f8:f6:a6:b1:72:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:24:86:31:2F:5F:D7:EA:21:AB:A7:A6:F3:4F:BB:F9:24:E9:E3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:70:dc:c5:4d:aa:a1:77:fc:67:51:d1:00:21:50:8e:24:
         fe:14:2c:78:c1:12:fb:67:1b:92:ed:c4:35:09:ed:2c:3c:a1:
         5c:bb:8e:3c:d8:16:f1:12:96:24:26:39:5b:49:8c:30:c0:bc:
         3f:d1:f4:d5:91:e0:81:c2:0b:c9:f7:fe:d7:dc:91:ce:fa:b9:
         e8:6e:8c:19:bd:f5:88:94:c7:ad:24:8d:cb:0b:14:b7:06:92:
         b6:2e:16:bf:34:55:32:0d:8a:be:97:91:de:a0:8f:ed:80:43:
         d2:f0:7c:2e:1d:04:74:40:78:75:e2:90:69:ce:19:f6:f4:1e:
         ec:6b:1f:ba:94:7f:c7:e7:77:cb:3f:a3:98:eb:62:ce:98:99:
         79:00:81:dd:c3:2d:a0:cf:51:cf:27:a8:4a:69:51:12:22:61:
         f9:7f:27:d0:30:f7:32:b7:61:88:c5:36:af:a5:dc:aa:b1:3e:
         46:f4:35:26:e0:af:02:34:d3:4e:8c:89:78:b4:0f:68:55:ce:
         36:be:c5:05:87:7b:b0:51:bf:e4:51:f3:b4:4a:d5:3e:5f:00:
         ab:e7:0d:89:01:7b:03:a6:31:b0:64:e0:ae:a3:a9:82:76:9b:
         c1:f2:72:e2:5b:94:b3:45:cb:5e:98:bb:c3:b7:e8:25:dd:f3:
         ce:15:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:06:21 2026 by rpki-client