Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/0f9f7f5a-7f17-3853-bcf7-73b6268d5549.roa
File:                     0f9f7f5a-7f17-3853-bcf7-73b6268d5549.roa (raw, json)
Hash identifier:          9KadG2tj7BClvGidnWUny1JqvhfTAVyBp+Ke6nuf90Y=
Subject key identifier:   6C:C4:32:23:76:DA:FD:8D:BD:3C:CD:14:FF:8D:D9:E6:5D:30:33:7E
Certificate issuer:       /CN=31423667-ebcc-4a10-8150-8758941bb075
Certificate serial:       010D0C9F4328584F0ED24460643EB1AB58263380
Authority key identifier: 91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/0f9f7f5a-7f17-3853-bcf7-73b6268d5549.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     19218
IP address blocks:        2604:fd00:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:44:60:64:3e:b1:ab:58:26:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31423667-ebcc-4a10-8150-8758941bb075
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=9eb48b89-99ee-4082-9390-8f7a240e2695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:64:33:c3:e1:a5:cf:ff:06:40:f8:05:95:
                    04:66:6b:ab:f1:a3:c2:35:28:33:1a:b4:92:72:82:
                    cf:36:4c:14:95:c3:5c:cb:90:7c:92:4d:34:c9:58:
                    b4:f8:03:0e:2b:37:22:c1:cf:9c:96:86:0f:12:95:
                    8c:20:40:7f:8d:3f:f9:eb:25:b1:7c:d2:01:8b:6e:
                    00:a8:e9:07:fa:71:3a:e6:25:5f:eb:20:38:45:5a:
                    3e:3e:7e:c0:bb:2e:bb:c2:a6:92:de:0e:c1:33:2e:
                    5b:62:b7:00:38:f9:3f:b8:48:b5:35:b0:14:17:e1:
                    45:e0:53:a8:ac:b9:8e:6f:fc:f6:89:7b:44:f6:cd:
                    0a:22:67:05:1e:9f:fc:e2:f1:79:b5:50:a4:9e:8e:
                    86:b8:66:7e:e3:66:e2:04:2b:1d:4c:00:98:0b:71:
                    90:45:8d:d4:57:8b:ce:cb:3a:24:d5:27:29:f0:f5:
                    81:d6:29:1b:e1:cc:99:c6:d0:e8:c8:a7:80:fd:00:
                    9a:42:ec:56:5a:aa:04:13:dd:cb:82:e9:62:5a:3c:
                    34:0d:f5:1f:49:e7:22:54:c7:32:5a:33:0c:24:e1:
                    af:23:2e:b8:cc:81:ac:29:75:32:4b:2e:b5:50:c6:
                    40:76:8d:57:90:25:91:7a:62:5e:f5:ee:32:4c:44:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C4:32:23:76:DA:FD:8D:BD:3C:CD:14:FF:8D:D9:E6:5D:30:33:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/0f9f7f5a-7f17-3853-bcf7-73b6268d5549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl

            X509v3 Authority Key Identifier:
                keyid:91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fd00:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d1:4c:06:b8:5a:2d:c1:4e:9a:87:59:cb:e2:a8:1b:97:85:
         f9:9e:93:70:25:ac:36:07:bc:60:3f:29:c3:a9:66:21:2f:9e:
         9e:dc:d1:11:15:c2:36:a6:0b:77:54:32:f8:60:a0:59:92:77:
         0b:51:c7:b6:c9:57:ef:e5:ea:5f:e5:55:ed:40:a3:d5:60:e3:
         69:66:d0:f3:f5:26:1e:ba:2f:74:80:14:a4:22:91:b9:a8:7a:
         0f:62:18:28:24:a1:91:c5:66:5b:45:c5:21:e7:fc:b3:dc:e8:
         ea:f7:8e:97:4a:4c:2e:07:ab:97:0b:b4:b6:c6:d8:46:70:f6:
         4f:ee:a9:5b:a9:0c:a1:f5:41:5b:9f:53:f5:0e:57:77:8b:15:
         af:20:f5:c6:a0:24:8f:55:bc:d2:b7:70:10:be:0a:41:9f:f2:
         1e:4a:32:f1:29:e7:5b:86:88:44:de:c2:1e:7f:4b:68:42:f3:
         59:f4:0c:11:1d:02:49:9c:5b:ff:ff:7a:be:5b:f2:66:56:36:
         f7:91:ea:7a:1f:92:53:64:ee:f2:67:0b:1d:2d:cd:06:3b:74:
         5b:47:6b:c0:de:4f:90:c7:ed:56:24:c8:54:85:ab:7f:fe:7b:
         75:b9:cb:da:da:a6:41:de:41:73:6b:25:9d:ef:f9:5d:5f:3a:
         0b:40:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:44:37 2026 by rpki-client