Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/10fdebf8-a336-37c4-adbb-a1df55d700d1.roa
File:                     10fdebf8-a336-37c4-adbb-a1df55d700d1.roa (raw, json)
Hash identifier:          ncNpHtWZReAmnDMaaomefftlK9/WRqIjNo9tCK58dKc=
Subject key identifier:   09:9C:5E:05:B7:E1:AA:DC:9F:AD:4D:95:5A:FB:D6:CD:18:39:31:D2
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584F35E7CCCD7D3A98C4BDD27B80
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/10fdebf8-a336-37c4-adbb-a1df55d700d1.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        2607:bc40:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:cc:cd:7d:3a:98:c4:bd:d2:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=1bd98581-e0d7-42db-a3e9-12b7fd2e16d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:0d:0a:54:e0:97:e2:36:ca:66:73:38:6c:
                    06:85:f7:d9:a8:a4:37:d1:7e:a4:0a:b7:8e:43:9e:
                    18:dd:d7:f0:f0:e4:87:df:4d:63:56:1b:6b:0e:5b:
                    50:a3:56:47:39:75:ad:d7:87:6f:2d:3e:3d:b4:a4:
                    f2:9e:f3:db:cf:69:3c:4d:71:19:ce:dd:23:7f:c5:
                    f0:a7:a0:ee:3d:f0:5e:a2:92:03:f5:25:86:a0:06:
                    ed:37:3d:be:7e:ad:ac:59:83:0b:92:ba:40:81:c4:
                    a6:b0:9b:a3:19:8d:ef:9d:0d:c2:8d:84:da:9f:b2:
                    34:36:1e:08:7c:29:8f:79:d7:0d:1f:9e:08:cb:48:
                    33:2b:3b:47:38:f4:31:13:5e:5e:ba:81:09:bf:2c:
                    e8:2e:27:1a:10:cd:6a:5f:72:c4:c6:a2:a2:97:8b:
                    b5:ec:7e:cc:13:52:cf:da:9f:5a:ef:4d:88:a6:cc:
                    8d:7f:19:92:6b:e2:64:58:c2:66:f1:09:61:06:d5:
                    58:77:cc:c7:0f:48:0f:20:5f:75:93:00:4f:bf:76:
                    5b:aa:4e:b0:3c:6d:5e:60:1f:26:7b:41:eb:fd:dc:
                    cd:7e:08:b8:c5:5a:27:c4:95:ca:84:d5:25:1a:17:
                    28:d2:8c:7e:5b:4e:17:b7:c6:d6:1b:d9:32:1a:cd:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9C:5E:05:B7:E1:AA:DC:9F:AD:4D:95:5A:FB:D6:CD:18:39:31:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/10fdebf8-a336-37c4-adbb-a1df55d700d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:16:6b:e0:ee:bf:88:3f:01:6a:00:30:6e:45:53:a4:5a:
         1d:38:b1:dc:cf:50:fc:2b:b5:e2:05:26:fe:7f:20:e2:c2:07:
         31:08:d4:68:a9:8e:2c:2d:8b:71:3b:af:e8:d1:a5:ee:59:30:
         01:70:3b:07:9e:69:d6:1e:e6:02:8b:3f:e7:53:77:a4:3c:44:
         df:83:bc:c3:f9:06:86:37:16:74:67:34:af:64:6c:e8:35:bf:
         f9:80:c1:15:12:01:7e:4a:0c:02:3d:0b:60:6c:bb:85:5b:01:
         bc:cc:72:b5:ae:8b:4e:c8:72:17:51:76:be:f6:be:99:64:0f:
         29:ee:11:5a:3c:75:72:69:96:2a:44:54:81:18:58:93:7b:3b:
         4f:89:87:33:2b:f1:c3:f4:72:33:b3:c2:8d:a9:01:1e:cd:b2:
         a3:e5:78:06:1b:95:6f:81:15:b4:b4:65:e8:95:0a:f4:81:63:
         bf:b5:dd:2a:db:51:29:6f:6c:ad:e8:53:a6:3a:d8:40:f0:66:
         1f:74:19:de:10:bb:1d:ef:18:cd:4b:1a:3e:37:0b:b4:fc:80:
         2b:97:df:97:04:6e:31:be:d3:47:e8:5a:e4:84:29:b6:dc:7e:
         5f:cb:c9:a3:3c:09:59:9b:ec:d3:f1:1e:85:0e:9a:78:0b:7d:
         18:90:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:16:57 2026 by rpki-client