Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa
File:                     207c8a94-e8cd-3236-a3df-59a05570c4ee.roa (raw, json)
Hash identifier:          bvCRJoMIiVJmjlkPhUUn/n89t8/98cirV4UVLyPvxYs=
Subject key identifier:   E6:78:3D:4E:7D:FA:6A:A9:A2:A4:38:AB:8A:DD:26:11:B7:9C:61:4D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FA467DA018894DEDA7C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7861
IP address blocks:        2001:56a:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fa:46:7d:a0:18:89:4d:ed:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fe574922-cd6f-4f29-98df-e1e44c32cafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:16:6a:bb:09:22:7b:b6:46:c5:45:db:99:
                    f8:cc:d1:ae:9d:90:aa:49:4b:b7:8d:c1:2d:cf:f3:
                    a3:45:50:94:b5:1b:28:91:73:31:f3:b6:7f:68:35:
                    96:9c:24:f2:60:91:dd:96:84:ee:ca:b9:29:27:8f:
                    22:eb:c0:c6:d3:0f:c0:79:5e:06:a7:07:ea:0c:85:
                    e0:25:5f:52:f6:42:77:f4:bf:2f:9d:8a:ee:99:03:
                    c0:52:a9:49:43:c0:f3:64:48:90:dd:dd:7d:3a:f6:
                    9b:b8:e9:27:80:e0:b5:ff:2e:d8:d3:d2:74:e5:0d:
                    5f:bb:62:d1:ef:af:36:ea:2d:e1:ca:52:b0:cc:31:
                    d7:69:fe:f0:37:05:8d:8a:a1:4d:e5:9e:95:f8:a4:
                    98:b7:06:6b:3b:4b:d3:31:18:14:54:e7:76:dc:a4:
                    db:35:1f:b1:13:31:4f:2c:ac:c5:b0:77:45:db:33:
                    6c:4b:9e:f8:7a:d8:84:0d:12:40:fc:ea:f1:97:72:
                    e4:c3:04:c4:33:1c:f4:08:ee:08:4b:d9:6f:24:d4:
                    d1:de:94:03:af:99:6b:29:30:8b:69:66:31:2a:b4:
                    24:10:f1:dd:3f:39:90:56:1d:1a:fd:e1:bc:e1:62:
                    40:d8:26:ac:de:4f:7c:35:1c:99:21:3e:10:f5:21:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:78:3D:4E:7D:FA:6A:A9:A2:A4:38:AB:8A:DD:26:11:B7:9C:61:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:80:71:69:cc:1d:d9:a3:e7:84:54:2d:ef:57:29:3d:62:
         d1:c6:d9:1e:84:e8:9d:6d:71:af:c8:13:e9:e4:dd:ee:6b:ee:
         30:19:ff:d7:f6:72:c8:a7:10:ca:2e:a4:40:9c:e1:e9:88:09:
         04:91:46:2d:f8:e3:af:19:f4:e9:22:a2:cc:8c:12:13:c6:38:
         e7:47:21:fa:d9:7b:0c:39:7b:7b:f1:06:fc:7a:5c:0b:0b:59:
         20:d5:26:54:90:9e:ba:2d:b0:ed:24:63:c1:0b:b8:df:40:53:
         65:12:94:e3:c7:cc:5c:26:5d:9c:22:ed:e1:10:a5:d5:f5:ac:
         e5:7d:d2:88:c6:51:e9:47:14:65:63:23:a1:17:ad:25:91:76:
         a9:d8:9a:8c:aa:f1:1c:22:96:7f:0a:f2:32:b6:64:84:c8:7f:
         43:df:f6:5d:7a:c9:1c:0a:73:be:34:97:84:3c:1d:3f:0b:f8:
         02:21:19:8e:f8:42:bf:b7:4c:d3:e3:ee:42:3c:25:68:be:f5:
         86:75:e2:b6:4e:1f:c7:b2:32:d8:9c:65:b7:26:2c:00:e5:d5:
         18:46:1d:a0:eb:12:af:2b:51:46:61:6e:73:9d:9c:8e:26:b5:
         3e:bf:72:81:e2:46:70:2b:d1:39:a6:fa:dd:6f:d5:e2:20:73:
         2f:b6:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 07:41:32 2026 by rpki-client